| streamz.ws/x3dbdb1e392485b4edc965b8c7937c44a |  172.67.204.103 | 301 Moved Permanently | 0 B |
URL HTTP/1.1streamz.ws/x3dbdb1e392485b4edc965b8c7937c44a IP172.67.204.103:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x3dbdb1e392485b4edc965b8c7937c44a HTTP/1.1
Host: streamz.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 07 Nov 2022 01:40:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 07 Nov 2022 02:40:06 GMT
Location: https://streamz.ws/x3dbdb1e392485b4edc965b8c7937c44a
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YXa9WeCPeZh6QdKYmJzxRtJriLa%2Fnh%2FHBUPOZ2imjIY8LhyFnGmGkEO%2FxbxdVMo4CqW4%2BFyy9nOOQ8TfGm3V1k1dPRgUQnYWz3oCTkybu9fbe19XOpZSF3y%2Fuh1O"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76625be44858b4e8-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc7a8ba48383a0e56baca8c8c41b81a04 b04c1f1e730a71f17ff639c9db697c532d4e5421 7860552382285e6eddddc5226c6f6400caa3f6fc3cb4b8a2d550c6fc653f78bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7860552382285E6EDDDDC5226C6F6400CAA3F6FC3CB4B8A2D550C6FC653F78BB"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14749
Expires: Mon, 07 Nov 2022 05:45:55 GMT
Date: Mon, 07 Nov 2022 01:40:06 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash05978511215be8462d0b69e33b3a91a3 61535ba131d547f1c5108d9e7763ee3fc8d8c824 cfdbf0f9e88e3c1ae8eb03e46c352633a75d4b2edbfbd57c1c6b52ff1623a109
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6470
Cache-Control: max-age=124727
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:06 GMT
Etag: "63678ce7-1d7"
Expires: Tue, 08 Nov 2022 12:18:53 GMT
Last-Modified: Sun, 06 Nov 2022 10:31:03 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd8c32b2fb818533a5b3fe5c69157bde9 93594fd3fc50d9d444c28660eabba1edbe4f0588 df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12586
Expires: Mon, 07 Nov 2022 05:09:52 GMT
Date: Mon, 07 Nov 2022 01:40:06 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash05978511215be8462d0b69e33b3a91a3 61535ba131d547f1c5108d9e7763ee3fc8d8c824 cfdbf0f9e88e3c1ae8eb03e46c352633a75d4b2edbfbd57c1c6b52ff1623a109
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6470
Cache-Control: max-age=124727
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:06 GMT
Etag: "63678ce7-1d7"
Expires: Tue, 08 Nov 2022 12:18:53 GMT
Last-Modified: Sun, 06 Nov 2022 10:31:03 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4b2GFPclQmiK7StBdQMDHiiqxQPFzLbaHBw71INJlNjqJFMgrYxrzkZ73VZayukFFI4GFqiXNyc=
x-amz-request-id: 7M5BS5D7SHXBSNKV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 07 Nov 2022 01:10:40 GMT
age: 1766
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash6b6ee8b0c1fc79bb7c85c8758d3f3001 5ddde0f73867983cacb7cf062dd45b3c76327bb8 c60782d53ca242d9b9c5b7a311e8d6a72e487aefefb19b09df69231019868ac8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "C60782D53CA242D9B9C5B7A311E8D6A72E487AEFEFB19B09DF69231019868AC8"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7958
Expires: Mon, 07 Nov 2022 03:52:44 GMT
Date: Mon, 07 Nov 2022 01:40:06 GMT
Connection: keep-alive
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash6b6ee8b0c1fc79bb7c85c8758d3f3001 5ddde0f73867983cacb7cf062dd45b3c76327bb8 c60782d53ca242d9b9c5b7a311e8d6a72e487aefefb19b09df69231019868ac8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "C60782D53CA242D9B9C5B7A311E8D6A72E487AEFEFB19B09DF69231019868AC8"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7957
Expires: Mon, 07 Nov 2022 03:52:44 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash3054ff7863d21152343d152c8d87f2aa c739e40c72279a8c803851e97859b55eca998535 b75c9a4be6170969adafe935e04373661f3d8b47dfed0153af838b921a6d53a5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B75C9A4BE6170969ADAFE935E04373661F3D8B47DFED0153AF838B921A6D53A5"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9003
Expires: Mon, 07 Nov 2022 04:10:10 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| cdn.jsdelivr.net/npm/console-ban@4.1.0/dist/console-ban.min.js |  151.101.85.229 | 200 OK | 1.1 kB |
URL HTTP/2cdn.jsdelivr.net/npm/console-ban@4.1.0/dist/console-ban.min.js IP151.101.85.229:0
File typeASCII text, with very long lines (2290) Hash40b3ef2768d7935061842ffe0fa61e82 e9c69254feb8f40811ebb97120b454056264fa3b 7c586b754e539026c170338190bb64f68f78bc533102d5a1d818e687f21b1fb1
GET /npm/console-ban@4.1.0/dist/console-ban.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.1.0
x-jsd-version-type: version
etag: W/"94a-x2FYTFEbUDUMlcmV/trIW701Sjg"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 07 Nov 2022 01:40:07 GMT
age: 4066805
x-served-by: cache-fra19179-FRA, cache-bma1631-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1082
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash3054ff7863d21152343d152c8d87f2aa c739e40c72279a8c803851e97859b55eca998535 b75c9a4be6170969adafe935e04373661f3d8b47dfed0153af838b921a6d53a5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B75C9A4BE6170969ADAFE935E04373661F3D8B47DFED0153AF838B921A6D53A5"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9003
Expires: Mon, 07 Nov 2022 04:10:10 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb8988c44d656e4521aa7d84091f926d3 debd55429e2a0f0bcd257201f2efe00d2e7ed35f e04704fa687f5daa90436f47c59fabadc7779f604a68cef3baf6b97a0bc5e92b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb8988c44d656e4521aa7d84091f926d3 debd55429e2a0f0bcd257201f2efe00d2e7ed35f e04704fa687f5daa90436f47c59fabadc7779f604a68cef3baf6b97a0bc5e92b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stc.cdncache.xyz/content/video/images/home_video_separator1.png | 172.67.179.35 | 200 OK | 183 B |
URL HTTP/2stc.cdncache.xyz/content/video/images/home_video_separator1.png IP172.67.179.35:0
File typePNG image data, 39 x 7, 4-bit colormap, non-interlaced\012- data Hash5531d88509a83a5f727f3b584f5a243f 361ea1fa1ffdcb866742f3a2953030c20ac9f0e6 5621651e2aa6f8af81cca48915d4211d364367f3dbc340fa3153370b1c0833d7
GET /content/video/images/home_video_separator1.png HTTP/1.1
Host: stc.cdncache.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: image/png
content-length: 183
last-modified: Mon, 22 Feb 2016 15:07:18 GMT
etag: "56cb2426-b7"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2205
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=csFf%2FITN23Y5q7uDIuCAz7XpTN70piwus2v6KWJ0JW32LM3vbtiu58KqMiZJGhY%2FsrB9c4kiTc8I%2BQEvj5gZ7SCKRz1WHH7OZfU0%2BVdoEybCy0AjKYaNYxyNWkSBJDbEltt7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625be99d1fb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stc.cdncache.xyz/streamz.cc/400dpiLogoCropped.png | 172.67.179.35 | 200 OK | 32 kB |
URL HTTP/2stc.cdncache.xyz/streamz.cc/400dpiLogoCropped.png IP172.67.179.35:0
File typePNG image data, 1737 x 394, 8-bit/color RGBA, non-interlaced\012- data Hash25a3d6b08a01ab2bcf0f85ae17a9dc9e 37dd263d0dfde403832f710cbd8a8644a0f79d01 614edc281e7a4388888a2d8a8a222d6b1b42e2fe4a27f8de12d8f14f46a2b16d
GET /streamz.cc/400dpiLogoCropped.png HTTP/1.1
Host: stc.cdncache.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: image/png
content-length: 31883
last-modified: Mon, 25 Feb 2019 12:57:04 GMT
etag: "5c73e620-7c8b"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2205
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2BJqQ%2Bs7Fjsm4o7izsKq6%2FR31QsaCIiDNNZaSqM4pD8pOhug5FcSorYkxOYRWPk9quPWE0ZDgvit5M3yhcnAblMlJWFZ9raN0PvUxqbiUe4hzhCw%2B0sBOLZk6juSS9i444Gv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625be99d1db51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb8988c44d656e4521aa7d84091f926d3 debd55429e2a0f0bcd257201f2efe00d2e7ed35f e04704fa687f5daa90436f47c59fabadc7779f604a68cef3baf6b97a0bc5e92b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cache.cdncache.xyz/streamz.cc/player.png | 172.67.179.35 | 200 OK | 8.2 kB |
URL HTTP/2cache.cdncache.xyz/streamz.cc/player.png IP172.67.179.35:0
File typePNG image data, 932 x 521, 8-bit/color RGB, non-interlaced\012- data Hash38e01e2a7fef39759a8ce1bbb7194f5f 46b997b58a3ea2308f25529ff560d2fe9cbb4106 ee999a93f10fb9b4db0357f4d095493544b2e71000de15854a9bb4331567ed46
GET /streamz.cc/player.png HTTP/1.1
Host: cache.cdncache.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: image/png
content-length: 8201
last-modified: Wed, 16 Oct 2019 09:25:48 GMT
etag: "5da6e21c-2009"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3394
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K3%2FXUztqnhhzxfwMriPHkoNbsMpzbko6JVyBs4HZgzXXt1evY9nGDUY3EsGJNNhb5wbG6b6rsYbovuW0ZXCiQw4qoiHGN8GnzGNzI%2Fe9AJbuFAvliXEmQxSASEAgQ04uuP4et8g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625be9bd32b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stc.cdncache.xyz/content/video/css/custom.css | 172.67.179.35 | 200 OK | 0 B |
URL HTTP/2stc.cdncache.xyz/content/video/css/custom.css IP172.67.179.35:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /content/video/css/custom.css HTTP/1.1
Host: stc.cdncache.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: text/css
content-length: 0
access-control-allow-origin: *
cf-bgj: minify
etag: "5dbc301a-0"
last-modified: Fri, 01 Nov 2019 13:16:10 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4748
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wSxtkUhKFgzXX2n3KRuSEY1b%2BAjxDOyVWvVvaepS9udp%2FKS0SF7x2RMRVpw%2FQrKpL6iJ5mP86z4qM8m72EqTGOvKuo%2FkeVh0uAXa1enOIrsqGKx4WH42bLXVoEu%2B5nhPZUlm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625be9cd47b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash3054ff7863d21152343d152c8d87f2aa c739e40c72279a8c803851e97859b55eca998535 b75c9a4be6170969adafe935e04373661f3d8b47dfed0153af838b921a6d53a5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B75C9A4BE6170969ADAFE935E04373661F3D8B47DFED0153AF838B921A6D53A5"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9003
Expires: Mon, 07 Nov 2022 04:10:10 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 |  104.18.20.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 IP104.18.20.226:0
Hashaafaae39318f4b99b4a4c94bf6b6108f 76f7a62117983edf19c8d5436913033ca43ea2e7 ffd28ec535a35eb5d554169d038564bd1f200bd504b9a3ccc7f4566fa791fe1e
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:07 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "4534A6716AE8D44EEFC98AC2EF87FF9FC6458CF3"
Expires: Mon, 07 Nov 2022 12:00:00 GMT
Last-Modified: Mon, 07 Nov 2022 00:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1825
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76625bea1b3eb4ff-OSL
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 346 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash3054ff7863d21152343d152c8d87f2aa c739e40c72279a8c803851e97859b55eca998535 b75c9a4be6170969adafe935e04373661f3d8b47dfed0153af838b921a6d53a5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "B75C9A4BE6170969ADAFE935E04373661F3D8B47DFED0153AF838B921A6D53A5"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9003
Expires: Mon, 07 Nov 2022 04:10:10 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6f1ae228e55b71631d1c828f90898acb 2a15697a02d0eeab31cc0b140465ef4991827002 09cc94dcc89fa1d26c57d25dc53ce3cd8c69fc9396d86d6ac60b54980deb17ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "09CC94DCC89FA1D26C57D25DC53CE3CD8C69FC9396D86D6AC60B54980DEB17CA"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4814
Expires: Mon, 07 Nov 2022 03:00:21 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashb8988c44d656e4521aa7d84091f926d3 debd55429e2a0f0bcd257201f2efe00d2e7ed35f e04704fa687f5daa90436f47c59fabadc7779f604a68cef3baf6b97a0bc5e92b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stc.cdncache.xyz/css/global.css | 172.67.179.35 | 200 OK | 54 kB |
URL HTTP/2stc.cdncache.xyz/css/global.css IP172.67.179.35:0
File typeASCII text, with very long lines (65536), with no line terminators Hash53f24c3b6dc14cf9ca81ce6a507ab74b 18337c9cb3b68f1ecd54f89d820b2de7d6768a46 c583384e0b3bde6c5bbbc71dac15b7766b524155f2f81ccc9f13b0db74453bf5
GET /css/global.css HTTP/1.1
Host: stc.cdncache.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: text/css
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=435962
etag: W/"5be5d45c-6a6fa"
last-modified: Fri, 09 Nov 2018 18:39:24 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RP9%2B3ob7GNoE1U5a6r317BtmuKBf%2FDJY4cFT47LHAcqehguIDj95m51qbKS%2B7bJW9T565uP7IKBrjRgVE19DMwnYenSBg%2FgO%2Fi3MR8%2FxTy%2F%2FU65eeUMRABoSKO15LFVPycxg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625be9bd37b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd862f992e9902530594e7aca425f129b 25b414fe833d30b52928535d659a1ee281b82e3a 0c6286152fe8bb5fdf1505f2001d530a65ee53aa6d9601bbb1eecb683036071d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5787
Cache-Control: max-age=118991
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:07 GMT
Etag: "6367792b-1d7"
Expires: Tue, 08 Nov 2022 10:43:18 GMT
Last-Modified: Sun, 06 Nov 2022 09:06:51 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hash0c9089273ca8433cedf7b3b9b375cd35 350eb6e3b64d9b709695d3a3a31ffa1a7f117289 d4bbceaae54b211236411436373f567f6d15e93acf6b961e5f2b52b63b1b446a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 04 Nov 2022 23:48:08 GMT
Expires: Fri, 11 Nov 2022 23:48:07 GMT
Etag: "350eb6e3b64d9b709695d3a3a31ffa1a7f117289"
Cache-Control: max-age=424679,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76625beaff66b529-OSL
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0a5dde2747c171c148af2f95c9dd00bf aeb001a57f07534b46d929fe251ff598c5fc66d8 e80f9e3c2dd441b703f71c3fef44b036820dcfc0029e51f51f1081737a61ff17
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E80F9E3C2DD441B703F71C3FEF44B036820DCFC0029E51F51F1081737A61FF17"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4872
Expires: Mon, 07 Nov 2022 03:01:19 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0a5dde2747c171c148af2f95c9dd00bf aeb001a57f07534b46d929fe251ff598c5fc66d8 e80f9e3c2dd441b703f71c3fef44b036820dcfc0029e51f51f1081737a61ff17
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E80F9E3C2DD441B703F71C3FEF44B036820DCFC0029E51F51F1081737A61FF17"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4872
Expires: Mon, 07 Nov 2022 03:01:19 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| byambipoman.com/tag.min.js | 139.45.197.239 | 200 OK | 23 kB |
URL HTTP/2byambipoman.com/tag.min.js IP139.45.197.239:0
File typeASCII text, with very long lines (65536), with no line terminators Hashea188740f0270617889697edb78276bc 5080530e34a03009aaaa822eb55690d4ca9475ca 1a4089a19b833f5c690e5c2264b727b74b5e1df183c174cfa5e5a50e0bd555b1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /tag.min.js HTTP/1.1
Host: byambipoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: text/javascript; charset=utf-8
content-length: 23234
content-encoding: br
x-trace-id: f0d796b3209588dcd0bfc46fb644317c
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Thu, 03 Nov 2022 15:01:27 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash12a1f191d3251cadd0fce23ca14e1a5d a95b5c8eafe5d0ae8d78c77d4965ba1c486ec864 95b318059b6735c7221e60eabe0489c228c705c47a5f6adc8f829ac0f3c5f77c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 69 kB |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash944fd5388168314b5aac539f63d33ea4 32971e69d0fcb001911db515c9d72d718e996740 2e1485b38069585106a1c3727dcac58fc8d97b772e8f20a5dc7cdf594d3967ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA399765222072922D99CB76D8AE2C183CE4CFEA45CD212AC41314E82FB2F686"
Last-Modified: Sun, 06 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4100
Expires: Mon, 07 Nov 2022 02:48:27 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| www.googletagmanager.com/gtag/js?id=UA-135498744-1 | 142.250.74.168 | 200 OK | 58 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-135498744-1 IP142.250.74.168:0
File typeASCII text, with very long lines (32041), with CRLF line terminators Hash15f03d6c38e0135afff155be0b421030 c1e4b2a26d2ff107866dda723b442ec1fb2a6c68 f99a44da4e0a19863173292bf79cb7202502884d8898c9380ed40b243c6b6a53
GET /gtag/js?id=UA-135498744-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 07 Nov 2022 01:40:07 GMT
expires: Mon, 07 Nov 2022 01:40:07 GMT
cache-control: private, max-age=900
last-modified: Mon, 07 Nov 2022 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43654
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 10 kB |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash762f37cee5e23bb5bb4074f86c601b9a 12952568e06b29caa7610f13ec4f25de5637816a 604e03d8d074d17d54141a05867c8435474e10b024f14c7ba2297f0a2299a0df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A7DAB0386B158EBD696A9499CF7BE68D7EA08FC3D18F7ED4F7D6D475B488D35C"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8892
Expires: Mon, 07 Nov 2022 04:08:19 GMT
Date: Mon, 07 Nov 2022 01:40:07 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 54.187.146.10 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.187.146.10:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ih/WHe5JHfAkonkFDDm1YQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eI0dGZsa1HzhssQf+c4HUb1vDvI=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 37 kB |
IP142.250.74.3:0
Hash23d4709f65f7e9dedd1917c5f59ad8fd 19e446871652f827d962c68e2e35085695e85dcb 7a478d695aba83dda76a4b555301a079cabf612322c18d38702a3e1ed8145e2f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashba5d09c54b98bfc2c7b5f15103e025c4 4aa7eb9e5615c168c0cd80234a6c96836b6024c1 d955461da6913fb1575a92808feef634015a734963f2e438ac968ba1dd69b1b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1861
Cache-Control: max-age=112188
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:07 GMT
Etag: "63676dee-117"
Expires: Tue, 08 Nov 2022 08:49:55 GMT
Last-Modified: Sun, 06 Nov 2022 08:18:54 GMT
Server: ECS (amb/6BBD)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashba5d09c54b98bfc2c7b5f15103e025c4 4aa7eb9e5615c168c0cd80234a6c96836b6024c1 d955461da6913fb1575a92808feef634015a734963f2e438ac968ba1dd69b1b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1861
Cache-Control: max-age=112188
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:07 GMT
Etag: "63676dee-117"
Expires: Tue, 08 Nov 2022 08:49:55 GMT
Last-Modified: Sun, 06 Nov 2022 08:18:54 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hash4410e0283900e769c122cfbcbdbed143 c5588f7f402a41c39405d7459367eadb893fafaf c9943eb8c4b659d1f5adf76a2d36b70f4ab306c5831b469e07b0fa822056f2b5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 03 Nov 2022 18:25:20 GMT
Expires: Thu, 10 Nov 2022 18:25:19 GMT
Etag: "c5588f7f402a41c39405d7459367eadb893fafaf"
Cache-Control: max-age=318911,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76625bed184eb529-OSL
|
|
| my.rtmark.net/gid.js?userId=d79d376f5bc24aeca710ef3db2ebd05c | 139.45.195.8 | 200 OK | 65 B |
URL HTTP/2my.rtmark.net/gid.js?userId=d79d376f5bc24aeca710ef3db2ebd05c IP139.45.195.8:0
File typeJSON data\012- , ASCII text Hash1aeba386a9457e879d1c5d5bbbcb1cf2 02f02e451ceeeb0bcc747f654cf1f5ade2779129 734600c28e407d4b0344f03c35b6bde3bbc07a410606dde29b36b227062666e5
GET /gid.js?userId=d79d376f5bc24aeca710ef3db2ebd05c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://streamz.ws
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=d79d376f5bc24aeca710ef3db2ebd05c; expires=Tue, 07 Nov 2023 01:40:07 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| welfarefit.com/0a/8e/a9/0a8ea9e4ad607d3617b937e2440886f0.js | 192.243.61.225 | 403 Forbidden | 0 B |
URL HTTP/1.1welfarefit.com/0a/8e/a9/0a8ea9e4ad607d3617b937e2440886f0.js IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /0a/8e/a9/0a8ea9e4ad607d3617b937e2440886f0.js HTTP/1.1
Host: welfarefit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Server: nginx/1.22.0
Date: Mon, 07 Nov 2022 01:40:07 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 74 kB |
IP172.64.155.188:0
Hash7fdc185003c8e1c3f47c99f45b40c55e 18f94a776729fd575c3b03d95ca4ae3178fd9ebe c012a44f68ebf198694bebe999efc0e33f785dc04d7e09bfa89d71d765077654
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 04 Nov 2022 13:33:18 GMT
Expires: Fri, 11 Nov 2022 13:33:17 GMT
Etag: "34b058d2aec290f7a178dcd6bd7e7ca26625939f"
Cache-Control: max-age=387789,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76625bedd886b529-OSL
|
|
| datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f |  37.48.68.71 | 200 OK | 12 B |
URL HTTP/1.1datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f IP37.48.68.71:0 ASN#60781 LeaseWeb Netherlands B.V.
File typeJSON data\012- , ASCII text, with no line terminators Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 950
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Mon, 07 Nov 2022 01:40:08 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://streamz.ws
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| byambipoman.com/tag.min.js | 139.45.197.239 | 200 OK | 23 kB |
URL HTTP/2byambipoman.com/tag.min.js IP139.45.197.239:0
File typeASCII text, with very long lines (65536), with no line terminators Hashea188740f0270617889697edb78276bc 5080530e34a03009aaaa822eb55690d4ca9475ca 1a4089a19b833f5c690e5c2264b727b74b5e1df183c174cfa5e5a50e0bd555b1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /tag.min.js HTTP/1.1
Host: byambipoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Cookie: OAID=d79d376f5bc24aeca710ef3db2ebd05c; oaidts=1667785207; syncedCookie=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:08 GMT
content-type: text/javascript; charset=utf-8
content-length: 23234
content-encoding: br
x-trace-id: f0a8b1cffcd5b342f67db92aa7765187
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Thu, 03 Nov 2022 15:01:27 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash6dba1915540598e77ae8d73ce49c4b3b f9c34b678d814548946cafea65b20ff352fb501b 89f7e3ac689535c3a373e1ff2f4125e7879782917687c26210a3eaf6c9a6e6a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash6dba1915540598e77ae8d73ce49c4b3b f9c34b678d814548946cafea65b20ff352fb501b 89f7e3ac689535c3a373e1ff2f4125e7879782917687c26210a3eaf6c9a6e6a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash6dba1915540598e77ae8d73ce49c4b3b f9c34b678d814548946cafea65b20ff352fb501b 89f7e3ac689535c3a373e1ff2f4125e7879782917687c26210a3eaf6c9a6e6a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 | 216.58.207.195 | 200 OK | 30 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 IP216.58.207.195:0
Hashd27076f3b3268dee5a5648ad16ff27b8 323012e94fc6935973411a15443acab750bc9473 5a258cf9eebc0583d38a0beabf214f55c6a798a830b45cdf7e662e7e73236ba8
GET /s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 01 Nov 2022 17:17:27 GMT
expires: Wed, 01 Nov 2023 17:17:27 GMT
cache-control: public, max-age=31536000
age: 462161
last-modified: Tue, 26 Apr 2022 16:04:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 | 216.58.207.195 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 01 Nov 2022 17:10:21 GMT
expires: Wed, 01 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 462587
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 | 216.58.207.195 | 200 OK | 23 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data Hashde69cf9e514df447d1b0bb16f49d2457 2ac78601179c3a63ba3f3f3081556b12ddcaf655 c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 01 Nov 2022 17:10:21 GMT
expires: Wed, 01 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 462587
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 | 216.58.207.195 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 24408, version 1.0\012- data Hashefee2d080d7bebdd2e0aeb2e030813a0 f8d38f9f9584e48c2e469877ebd94232265585f1 bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 31 Oct 2022 20:02:02 GMT
expires: Tue, 31 Oct 2023 20:02:02 GMT
cache-control: public, max-age=31536000
age: 538686
last-modified: Tue, 26 Apr 2022 15:50:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 9.7 kB |
IP142.250.74.3:0
Hash05b6bf59896b6fcfec85a3dcc99e0690 d27e2f2cd9c3afbfcc8b88a92ef4230c58e35176 b47382a228d13079f453d08ac7e24f5052016321f94a58a0f7d0b15dcf12bc3a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| gloodsie.com/zone?pub=0&zone_id=2456325&is_mobile=false&domain=streamz.ws&var=&ymid=&var_3= | 139.45.197.251 | 200 OK | 7.4 kB |
URL HTTP/2gloodsie.com/zone?pub=0&zone_id=2456325&is_mobile=false&domain=streamz.ws&var=&ymid=&var_3= IP139.45.197.251:0
Hash63227b7eef39cc2f067a027af7425f7d 268a6576afbfa246b13dbc693fcbe25dcf8b56d4 f48214163893c6e9eb6c370ede73e00542618a4cb1cc1e104c0a47fb1318bd35
GET /zone?pub=0&zone_id=2456325&is_mobile=false&domain=streamz.ws&var=&ymid=&var_3= HTTP/1.1
Host: gloodsie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamz.ws/
Origin: https://streamz.ws
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:08 GMT
content-type: application/json; charset=utf-8
content-length: 714
x-trace-id: b53b6db5e482d0681cd34bbb4ffd83a9
access-control-allow-origin: https://streamz.ws
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8efeb5ec0f64364caa23fd0abc7c7dd1 3d26d9d7ccdb58b3b9fb418c5319a2f96314b961 10bfed965d6b09621fd1c70ab4450f4ebc8e267016d0ea5bd194b11aefa5291c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "10BFED965D6B09621FD1C70AB4450F4EBC8E267016D0EA5BD194B11AEFA5291C"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12761
Expires: Mon, 07 Nov 2022 05:12:49 GMT
Date: Mon, 07 Nov 2022 01:40:08 GMT
Connection: keep-alive
|
|
| inpagepush.com/500/2994135?excludes=&oaid=d79d376f5bc24aeca710ef3db2ebd05c&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.237 | 200 OK | 0 B |
URL HTTP/2inpagepush.com/500/2994135?excludes=&oaid=d79d376f5bc24aeca710ef3db2ebd05c&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.237:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /500/2994135?excludes=&oaid=d79d376f5bc24aeca710ef3db2ebd05c&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: inpagepush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://streamz.ws/
Origin: https://streamz.ws
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:08 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://streamz.ws
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hashecd59619272522c5607abc38c52615b2 c706cd76f715b820876bcd90d216a75576caaa6b 2b0d982c67708bed1ab85abee9cb4953262f0b6186da70645964b1010e567cd5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 12:04:30 GMT
Expires: Sun, 13 Nov 2022 12:04:29 GMT
Etag: "c706cd76f715b820876bcd90d216a75576caaa6b"
Cache-Control: max-age=555260,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76625bf0e9b0b529-OSL
|
|
| cnt.streamz.ws/count.php?xyz=2 |  31.42.186.225 | 200 OK | 25 B |
URL HTTP/1.1cnt.streamz.ws/count.php?xyz=2 IP31.42.186.225:0 ASN#30860 Virtual Systems LLC
Hash12cc7ed4a6b046eecc2f0d56c270592e 605ba817c55faf8b6716d75356a7b94da4f3050f 6b50cd1af83a4a38bb32da05cb7aeeea70ce2f1b442805ebfd713a2ad8ff0a48
GET /count.php?xyz=2 HTTP/1.1
Host: cnt.streamz.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 07 Nov 2022 01:40:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.3
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Proxy-Cache: MISS
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| 6.adsco.re/ | 104.17.167.186 | 200 OK | 0 B |
IP104.17.167.186:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:08 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://streamz.ws
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625bf30903b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hashecd59619272522c5607abc38c52615b2 c706cd76f715b820876bcd90d216a75576caaa6b 2b0d982c67708bed1ab85abee9cb4953262f0b6186da70645964b1010e567cd5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 12:04:30 GMT
Expires: Sun, 13 Nov 2022 12:04:29 GMT
Etag: "c706cd76f715b820876bcd90d216a75576caaa6b"
Cache-Control: max-age=555260,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76625bf24a5bb529-OSL
|
|
| 4.adsco.re/ | 162.252.214.5 | 200 OK | 62 B |
IP162.252.214.5:0
File typeASCII text, with no line terminators Hashadde5febc7b5b6c2c759ec735cce83a0 77ec17be8a9970ff04663294d41c590d0d24fde4 ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://streamz.ws
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 07 Nov 2022 00:41:09 GMT
expires: Mon, 07 Nov 2022 02:41:09 GMT
cache-control: public, max-age=7200
age: 3539
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hashecd59619272522c5607abc38c52615b2 c706cd76f715b820876bcd90d216a75576caaa6b 2b0d982c67708bed1ab85abee9cb4953262f0b6186da70645964b1010e567cd5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 12:04:30 GMT
Expires: Sun, 13 Nov 2022 12:04:29 GMT
Etag: "c706cd76f715b820876bcd90d216a75576caaa6b"
Cache-Control: max-age=555260,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76625bf339c2b4f1-OSL
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 280 B |
IP93.184.220.29:0
Hash267a98361564c46b0f733ce567024f33 4bbd52ee36fcf08cc0b13a18443e67d9700d0d61 1e2b21e78097bc07ca4fb3a1318bd36d7bc2a58e811b21956c83f4dfe31ec32e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5817
Cache-Control: max-age=86618
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:09 GMT
Etag: "6366fa9a-118"
Expires: Tue, 08 Nov 2022 01:43:47 GMT
Last-Modified: Sun, 06 Nov 2022 00:06:50 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha43e926111a6cea1e27a7cb77cca3c4d 190cb06f1aa22fb2b5049014a78f22563b945dd3 2f5328c45100780a3c5b89f8e28ed2fbaa7c3eda75d1016a20b402bb1cbcb2c0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F5328C45100780A3C5B89F8E28ED2FBAA7C3EDA75D1016A20B402BB1CBCB2C0"
Last-Modified: Sat, 05 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12348
Expires: Mon, 07 Nov 2022 05:05:57 GMT
Date: Mon, 07 Nov 2022 01:40:09 GMT
Connection: keep-alive
|
|
| offerimage.com/www/images/d995b3e4c37b07be75218a653fa1110a.jpeg | 104.22.32.172 | 200 OK | 12 kB |
URL HTTP/2offerimage.com/www/images/d995b3e4c37b07be75218a653fa1110a.jpeg IP104.22.32.172:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data Hashd995b3e4c37b07be75218a653fa1110a f65205d0ee64ca84506c9571c7f622cc9007c05d f457644cc2d00bb9eaa0e56c33fc42a8d7fba1fcd263d9fdc33d02284b50967b
GET /www/images/d995b3e4c37b07be75218a653fa1110a.jpeg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:09 GMT
content-type: image/jpeg
content-length: 12425
cache-control: max-age=86400
cf-bgj: h2pri
etag: "6358a071-3089"
expires: Mon, 07 Nov 2022 06:16:29 GMT
last-modified: Wed, 26 Oct 2022 02:50:25 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 69820
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625bf4db7609af-ARN
X-Firefox-Spdy: h2
|
|
| gloodsie.com/custom | 139.45.197.251 | 200 OK | 0 B |
IP139.45.197.251:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: gloodsie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://streamz.ws/
Origin: https://streamz.ws
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:09 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://streamz.ws
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashc6d6c54103958d5cb2f315ca1ce5de87 ec77a85040cede22bddb4274f06b889f110d6c9a 6313b11766367e7f964d7f523662eaf7248f10577ea3bf2f65db52e16d152417
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| gloodsie.com/custom | 139.45.197.251 | 200 OK | 0 B |
IP139.45.197.251:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: gloodsie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://streamz.ws/
Origin: https://streamz.ws
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:09 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://streamz.ws
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-135498744-1&cid=819013173.1667785207&jid=46878056&gjid=925942433&_gid=1057349821.1667785207&_u=YEBAAUAAAAAAACAAI~&z=1477230842 | 64.233.165.156 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-135498744-1&cid=819013173.1667785207&jid=46878056&gjid=925942433&_gid=1057349821.1667785207&_u=YEBAAUAAAAAAACAAI~&z=1477230842 IP64.233.165.156:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-135498744-1&cid=819013173.1667785207&jid=46878056&gjid=925942433&_gid=1057349821.1667785207&_u=YEBAAUAAAAAAACAAI~&z=1477230842 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://streamz.ws
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 07 Nov 2022 01:40:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| gloodsie.com/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:0
File typeJSON data\012- , ASCII text Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: gloodsie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamz.ws/
Content-Type: application/json
Origin: https://streamz.ws
Content-Length: 425
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:09 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 838b0a505a9075e71960e45ca196b501
access-control-allow-origin: https://streamz.ws
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| gloodsie.com/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:0
File typeJSON data\012- , ASCII text Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: gloodsie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamz.ws/
Content-Type: application/json
Origin: https://streamz.ws
Content-Length: 810
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:09 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 6d61dcc7bbaade61f200297c546791d2
access-control-allow-origin: https://streamz.ws
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashc6d6c54103958d5cb2f315ca1ce5de87 ec77a85040cede22bddb4274f06b889f110d6c9a 6313b11766367e7f964d7f523662eaf7248f10577ea3bf2f65db52e16d152417
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 01:40:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| lfqb6sfxr6lb.n4.adsco.re/ | 38.132.109.186 | 200 OK | 0 B |
URL HTTP/1.1lfqb6sfxr6lb.n4.adsco.re/ IP38.132.109.186:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: lfqb6sfxr6lb.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:09 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash2e37c89a5a7f608a21ac42b87ee0f7fc 55132fb03671e178b7e186da48ac7e02d6e96e23 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15532
Expires: Mon, 07 Nov 2022 05:59:01 GMT
Date: Mon, 07 Nov 2022 01:40:09 GMT
Connection: keep-alive
|
|
| adsco.re/p | 162.252.214.5 | 200 OK | 169 B |
IP162.252.214.5:0
File typeASCII text, with no line terminators Hashe8c0557bae17eafa4e788ba27659981b ed5000b0a91d576953e14753ee9bb082aa1cfaed 2acf1fa451a4379b22f693d89ae40176e77d27f4c6ccb4f3f41de21de6d7c618
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2028
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Access-Control-Allow-Origin: https://streamz.ws
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash2e37c89a5a7f608a21ac42b87ee0f7fc 55132fb03671e178b7e186da48ac7e02d6e96e23 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15532
Expires: Mon, 07 Nov 2022 05:59:01 GMT
Date: Mon, 07 Nov 2022 01:40:09 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash2e37c89a5a7f608a21ac42b87ee0f7fc 55132fb03671e178b7e186da48ac7e02d6e96e23 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15532
Expires: Mon, 07 Nov 2022 05:59:01 GMT
Date: Mon, 07 Nov 2022 01:40:09 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash2e37c89a5a7f608a21ac42b87ee0f7fc 55132fb03671e178b7e186da48ac7e02d6e96e23 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15532
Expires: Mon, 07 Nov 2022 05:59:01 GMT
Date: Mon, 07 Nov 2022 01:40:09 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash2e37c89a5a7f608a21ac42b87ee0f7fc 55132fb03671e178b7e186da48ac7e02d6e96e23 6d71b8c1578f69619e174e61fbe9c92de7df4563e4a413b7b3d1be229f464df2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6D71B8C1578F69619E174E61FBE9C92DE7DF4563E4A413B7B3D1BE229F464DF2"
Last-Modified: Sun, 06 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15532
Expires: Mon, 07 Nov 2022 05:59:01 GMT
Date: Mon, 07 Nov 2022 01:40:09 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff861c8eb-a661-4f40-88e3-1c0820b24ddf.jpeg | 34.120.237.76 | 200 OK | 9.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff861c8eb-a661-4f40-88e3-1c0820b24ddf.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbc7e03b47d9322fb66cbc978e4fb5743 7e85c7716999fe4aec0427e6ce389899718dd96c c3c83d59e8afdc758bfd2e2081c8291d603cc65d64da8550087764cc79b9fea4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff861c8eb-a661-4f40-88e3-1c0820b24ddf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9364
x-amzn-requestid: 54c47913-2e05-4a6b-9bef-c2b9db3435b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a9ikFGpSoAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636217b3-38ca73873cbcda894840f0a9;Sampled=0
x-amzn-remapped-date: Wed, 02 Nov 2022 07:09:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: AD6FTMs9X1S9RVf7z4elVfLAE3EGFxTTDbCSNaJv45cpcb4SAynEYg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 07:56:46 GMT
age: 63803
etag: "7e85c7716999fe4aec0427e6ce389899718dd96c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdff3860-eced-4251-b1d8-7417addfbe09.jpeg | 34.120.237.76 | 200 OK | 5.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdff3860-eced-4251-b1d8-7417addfbe09.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2dbaafe8423c84a7ce91d3e24666d297 ea5b8e1067c47ee223c4de98b56e2c803ff5dbf7 df1db80b4d217d185e2f7e6ecf50c2547feec104411fe121c3303dd49bd26f03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbdff3860-eced-4251-b1d8-7417addfbe09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5374
x-amzn-requestid: f8819162-8a09-4395-95d7-076df001e087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKLdPF6qoAMFxrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636725ee-4b17f70f54752c1f27b042df;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 03:11:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Po-Bq5lCVpmIHi6SLoyjaVJOF15jLff4OxxOeqYKDKXsd8SSehQXSQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 03:39:54 GMT
age: 79215
etag: "ea5b8e1067c47ee223c4de98b56e2c803ff5dbf7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe31fd091-80a5-44a5-88d9-6c7500097882.jpeg | 34.120.237.76 | 200 OK | 6.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe31fd091-80a5-44a5-88d9-6c7500097882.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha8a927e8e8d385db9016a6113dd2b391 ad99d073b2fb93ca950eb691a74d44d19d3724fb f33c813d46b76b98bad5c43d111766f95b67f37fad1e1977ee288f9e224e9b49
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe31fd091-80a5-44a5-88d9-6c7500097882.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6692
x-amzn-requestid: 3845da3e-c9ff-4b0e-920b-327c85dd51dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a9iPSHQ_oAMF5Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6362172e-4abebd8e7b96eabd6875931d;Sampled=0
x-amzn-remapped-date: Wed, 02 Nov 2022 07:07:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: U3fftl2mdpAnxD7HFAY7aN-zp9PG0ImNuiDtF2o1-VAci6mZQGi7QQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 22:26:38 GMT
age: 11611
etag: "ad99d073b2fb93ca950eb691a74d44d19d3724fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc90e051a-3c9e-4bfb-9cd7-25928f06accd.jpeg | 34.120.237.76 | 200 OK | 6.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc90e051a-3c9e-4bfb-9cd7-25928f06accd.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha6a444e60271f54bddf9c9b5a2859b9e 307273a31cb8ec7a7ad0467ac4562af4ae3a59b9 f9d656bdf4f11cc9d8c36f9de6e79680fe0b52be57f12608f4f9751f95e00d5b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc90e051a-3c9e-4bfb-9cd7-25928f06accd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6770
x-amzn-requestid: 195ed20f-0ff1-49f8-9517-12e06693c768
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bG3gJG4noAMFQbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6365d2cd-789e979d3ec5ec083a2a9707;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 03:04:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: j-jThgLikZnmecTDovw70nj4HbIDaQWO6zZfNjUuv4RMAsnxOcCUxw==
via: 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 04:03:38 GMT
age: 77791
etag: "307273a31cb8ec7a7ad0467ac4562af4ae3a59b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4e2853cc6ec6223160471401e6871f4b f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bF_38GKXoAMFwSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: cLOqm36ioY751X1yA1WcQpaXiFYuvzFn8xLQ56MyDTpvi1J4Ruvc9Q==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 06:27:59 GMT
age: 69130
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08fced45-2207-4622-ad9c-c2ab54f27b2a.jpeg | 34.120.237.76 | 200 OK | 7.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08fced45-2207-4622-ad9c-c2ab54f27b2a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6c405a2c2821da31e4000a3badb64d60 4ae120aa65e23ea40cf9f3dc25c5c3c0aba24db9 c192840e892b171fe60c7688b3e6388433d4fcc8a0a1f54699a361373da64d37
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08fced45-2207-4622-ad9c-c2ab54f27b2a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7460
x-amzn-requestid: 031771ee-eab5-41f8-80de-5281dded85bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bMtUrE79IAMF3vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636828ea-58109a273d57d22c7149dbf2;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LS98d51I0ItMw5BmilaSOJUX9OiJluTdfx3x5iuRnYNJ_xaD5Bz8dg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:39:11 GMT
age: 14458
etag: "4ae120aa65e23ea40cf9f3dc25c5c3c0aba24db9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash46ec308c1c2fe184285651f926b12569 d1250efa67c584c26e3f7d63815d0d1bcab8969d 2aab3b834a98b733c775dde5a4fa2c7ffed2ad1c88aa8688cf19abd88f1b53c8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2AAB3B834A98B733C775DDE5A4FA2C7FFED2AD1C88AA8688CF19ABD88F1B53C8"
Last-Modified: Sat, 05 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7001
Expires: Mon, 07 Nov 2022 03:36:50 GMT
Date: Mon, 07 Nov 2022 01:40:09 GMT
Connection: keep-alive
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hash1e2c9301637e79a8a1b4da910937999c 1035ec4cbd11434594627b79f7c53363a159c4b1 509f748a1b06ecd824c6de04a20c21960ad8dac0aad4e16b4cbf6578046ff972
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 05 Nov 2022 21:23:09 GMT
Expires: Sat, 12 Nov 2022 21:23:08 GMT
Etag: "1035ec4cbd11434594627b79f7c53363a159c4b1"
Cache-Control: max-age=502378,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76625bf78d53b529-OSL
|
|
| intelligenceadx.com/Bfyd.html?_=BAYAY2hh-QFjaGH5gAGBAsAAIAC_unR-K-_Q7o3GlQY2A_3GutgszdCtdJ9LhGgNalbfwQBGMEQCIETGWngD8tWr6QhObWt4g_RJhsVtR77bIEngMc51FCMGAiACD-8mT8eLX8W7V8YL42lNWvevpXUEhn2X7pNbGAg3Ug&v=4&uQElBhmp=4010771&minBid=&gMErSokV=0,0&TnQRXJDE=&KwbXkTgi=&s=1280,1024,1,1280,1024,0 | 208.95.114.100 | 200 OK | 44 B |
URL HTTP/2intelligenceadx.com/Bfyd.html?_=BAYAY2hh-QFjaGH5gAGBAsAAIAC_unR-K-_Q7o3GlQY2A_3GutgszdCtdJ9LhGgNalbfwQBGMEQCIETGWngD8tWr6QhObWt4g_RJhsVtR77bIEngMc51FCMGAiACD-8mT8eLX8W7V8YL42lNWvevpXUEhn2X7pNbGAg3Ug&v=4&uQElBhmp=4010771&minBid=&gMErSokV=0,0&TnQRXJDE=&KwbXkTgi=&s=1280,1024,1,1280,1024,0 IP208.95.114.100:0
File typeASCII text, with no line terminators Hashd5f0a25e4d3522d56d48ce7bc3e518fb 86794caff58f7fee6e684c2ba7195f970a8d6f4c 9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /Bfyd.html?_=BAYAY2hh-QFjaGH5gAGBAsAAIAC_unR-K-_Q7o3GlQY2A_3GutgszdCtdJ9LhGgNalbfwQBGMEQCIETGWngD8tWr6QhObWt4g_RJhsVtR77bIEngMc51FCMGAiACD-8mT8eLX8W7V8YL42lNWvevpXUEhn2X7pNbGAg3Ug&v=4&uQElBhmp=4010771&minBid=&gMErSokV=0,0&TnQRXJDE=&KwbXkTgi=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: intelligenceadx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Mon, 07 Nov 2022 01:40:09 GMT
X-Firefox-Spdy: h2
|
|
| lfqb6sfxr6lb.s4.adsco.re/ |  185.200.116.90 | 200 OK | 0 B |
URL HTTP/1.1lfqb6sfxr6lb.s4.adsco.re/ IP185.200.116.90:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: lfqb6sfxr6lb.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 01:40:10 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
|
|
| inpagepush.com/impression/Y40qQsOniFsMDB9VnFVhS8rz5_wnDr9GxCSW0LxPYNI9o2pC0mbIy-alUVYRaxxvXOafdaoSnebn7ChqimVtBrXIJnKzvjdr2FHPn6R0ANX3srPmBWeN54TKKq6BQEggNIFUkv76W11JG_cFZLz38BFr8Axx2Oeim2WpZUQ1LpRp3ZNzLOUmrtxEZ0SlTR7zoYuFTPFzO3Yc5xusbLjglEDMAAVRhaiYtv9wAoQwvDnkYEfq2z3JyznH2NaOgpq4h4j9614jG7ha0WsTl5Gl-h1ghiLhAHv_5hSsOVGj-9re73p9lVVpuBx2xt_-8BbvsByMColB3pbLzeSK2fCX_8AaTCU1zDvPSzf6_qU4Pi9qmTks2zRs49JYf_PEB6Jbh60hhjcTxWq86NPO4L2zgQxFFUmQtnQtGyWmJXj1Os0CUjrPSgyKFIQ4QVGBH5LfRqWSr64HLiNeq6EaQP89GMStZ2kRbu4yNwYNRPZwnZl_TYfzT3rgBFVvIxngFXcLGFtZ8cax_S9WQ3WxnYG_oWX7QpCG6k86ZQFds2hlgf4=?_z=2994135&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=898&wfc=5&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.237 | 200 OK | 43 B |
URL HTTP/2inpagepush.com/impression/Y40qQsOniFsMDB9VnFVhS8rz5_wnDr9GxCSW0LxPYNI9o2pC0mbIy-alUVYRaxxvXOafdaoSnebn7ChqimVtBrXIJnKzvjdr2FHPn6R0ANX3srPmBWeN54TKKq6BQEggNIFUkv76W11JG_cFZLz38BFr8Axx2Oeim2WpZUQ1LpRp3ZNzLOUmrtxEZ0SlTR7zoYuFTPFzO3Yc5xusbLjglEDMAAVRhaiYtv9wAoQwvDnkYEfq2z3JyznH2NaOgpq4h4j9614jG7ha0WsTl5Gl-h1ghiLhAHv_5hSsOVGj-9re73p9lVVpuBx2xt_-8BbvsByMColB3pbLzeSK2fCX_8AaTCU1zDvPSzf6_qU4Pi9qmTks2zRs49JYf_PEB6Jbh60hhjcTxWq86NPO4L2zgQxFFUmQtnQtGyWmJXj1Os0CUjrPSgyKFIQ4QVGBH5LfRqWSr64HLiNeq6EaQP89GMStZ2kRbu4yNwYNRPZwnZl_TYfzT3rgBFVvIxngFXcLGFtZ8cax_S9WQ3WxnYG_oWX7QpCG6k86ZQFds2hlgf4=?_z=2994135&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=898&wfc=5&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.237:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /impression/Y40qQsOniFsMDB9VnFVhS8rz5_wnDr9GxCSW0LxPYNI9o2pC0mbIy-alUVYRaxxvXOafdaoSnebn7ChqimVtBrXIJnKzvjdr2FHPn6R0ANX3srPmBWeN54TKKq6BQEggNIFUkv76W11JG_cFZLz38BFr8Axx2Oeim2WpZUQ1LpRp3ZNzLOUmrtxEZ0SlTR7zoYuFTPFzO3Yc5xusbLjglEDMAAVRhaiYtv9wAoQwvDnkYEfq2z3JyznH2NaOgpq4h4j9614jG7ha0WsTl5Gl-h1ghiLhAHv_5hSsOVGj-9re73p9lVVpuBx2xt_-8BbvsByMColB3pbLzeSK2fCX_8AaTCU1zDvPSzf6_qU4Pi9qmTks2zRs49JYf_PEB6Jbh60hhjcTxWq86NPO4L2zgQxFFUmQtnQtGyWmJXj1Os0CUjrPSgyKFIQ4QVGBH5LfRqWSr64HLiNeq6EaQP89GMStZ2kRbu4yNwYNRPZwnZl_TYfzT3rgBFVvIxngFXcLGFtZ8cax_S9WQ3WxnYG_oWX7QpCG6k86ZQFds2hlgf4=?_z=2994135&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=898&wfc=5&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: inpagepush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Cookie: OAID=d79d376f5bc24aeca710ef3db2ebd05c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:13 GMT
content-type: image/gif
content-length: 43
x-trace-id: a00229c72e06cbc5a83feb5c9b435d9c
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 19:34:08 GMT
expires: Thu, 02 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 367565
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 19:34:08 GMT
expires: Thu, 02 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 367565
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js?pub=0&userId=c41fc22a51de47fa949f054ebb14e35d&zoneId=2456325&checkDuplicate=true&ymid=&var= | 139.45.195.8 | 200 OK | 65 B |
URL HTTP/2my.rtmark.net/gid.js?pub=0&userId=c41fc22a51de47fa949f054ebb14e35d&zoneId=2456325&checkDuplicate=true&ymid=&var= IP139.45.195.8:0
File typeJSON data\012- , ASCII text Hash1aeba386a9457e879d1c5d5bbbcb1cf2 02f02e451ceeeb0bcc747f654cf1f5ade2779129 734600c28e407d4b0344f03c35b6bde3bbc07a410606dde29b36b227062666e5
GET /gid.js?pub=0&userId=c41fc22a51de47fa949f054ebb14e35d&zoneId=2456325&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamz.ws/
Origin: https://streamz.ws
Connection: keep-alive
Cookie: ID=d79d376f5bc24aeca710ef3db2ebd05c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:15 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://streamz.ws
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=d79d376f5bc24aeca710ef3db2ebd05c; expires=Tue, 07 Nov 2023 01:40:15 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| gloodsie.com/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:0
File typeJSON data\012- , ASCII text Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: gloodsie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamz.ws/
Content-Type: application/json
Origin: https://streamz.ws
Content-Length: 433
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:15 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 65bf1fbc3797558d90611397a89325aa
access-control-allow-origin: https://streamz.ws
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Lato:100,300,400,400italic,700 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Lato:100,300,400,400italic,700 IP142.250.74.10:0
GET /css?family=Lato:100,300,400,400italic,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 07 Nov 2022 01:40:07 GMT
date: Mon, 07 Nov 2022 01:40:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| gloodsie.com/pfe/current/universal.min.js?v=3.1.402 | 139.45.197.251 | 200 OK | 0 B |
URL HTTP/2gloodsie.com/pfe/current/universal.min.js?v=3.1.402 IP139.45.197.251:0
GET /pfe/current/universal.min.js?v=3.1.402 HTTP/1.1
Host: gloodsie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamz.ws/
Origin: https://streamz.ws
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:08 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 13:02:53 GMT
etag: W/"63626a7d-180b9"
access-control-allow-origin: https://streamz.ws
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| stc.cdncache.xyz/content/video/css/video.css | 172.67.179.35 | 200 OK | 0 B |
URL HTTP/2stc.cdncache.xyz/content/video/css/video.css IP172.67.179.35:0
GET /content/video/css/video.css HTTP/1.1
Host: stc.cdncache.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: text/css
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=80773
etag: W/"58a7565a-13b85"
last-modified: Fri, 17 Feb 2017 20:00:26 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yg%2FGxBfjpR0RbVda3%2BkGRLupQ%2BpKHG4nay6p2Af8aeKlTTxIRMSi3CrRhSePMT4xw2Y1grxffWknDNkSWqLAxABDSxRvZDsiM8R1nH9c6Nhtffbln1Qqxrgw%2FfT834mT8MK0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625be99d1cb51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| byambipoman.com/5/2850024/?oo=1&aab=1 | 139.45.197.239 | 200 OK | 0 B |
URL HTTP/2byambipoman.com/5/2850024/?oo=1&aab=1 IP139.45.197.239:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /5/2850024/?oo=1&aab=1 HTTP/1.1
Host: byambipoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: application/json
x-trace-id: 8ee63b5ab088d844438c0b0973a975e1
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://streamz.ws
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=d79d376f5bc24aeca710ef3db2ebd05c; expires=Tue, 07 Nov 2023 01:40:07 GMT; path=/; secure; SameSite=None
oaidts=1667785207; expires=Tue, 07 Nov 2023 01:40:07 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:100,300,400,400italic,700 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto:100,300,400,400italic,700 IP142.250.74.10:0
GET /css?family=Roboto:100,300,400,400italic,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 07 Nov 2022 01:40:07 GMT
date: Mon, 07 Nov 2022 01:40:07 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Patua+One:100,300,400,400italic,700 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Patua+One:100,300,400,400italic,700 IP142.250.74.10:0
GET /css?family=Patua+One:100,300,400,400italic,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 07 Nov 2022 01:40:07 GMT
date: Mon, 07 Nov 2022 01:40:07 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| stc.cdncache.xyz/plugins/rs-plugin/css/settings.css | 172.67.179.35 | 200 OK | 0 B |
URL HTTP/2stc.cdncache.xyz/plugins/rs-plugin/css/settings.css IP172.67.179.35:0
GET /plugins/rs-plugin/css/settings.css HTTP/1.1
Host: stc.cdncache.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: text/css
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=34481
etag: W/"589c8a56-86b1"
last-modified: Thu, 09 Feb 2017 15:27:18 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4%2F5%2B%2BtAlX%2FI3KaMJ%2FRBx6KhA8PykBouBM7aQCXpWQisMfqsW4KopW6Yae3dDSrzrLd7zNmkmMsTg%2FlCcxBFf59Jn%2B%2F480cyTbN9mmU3oXybbrbNlM2GC2dhu7ypnBNpgZ7x%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625be9dd50b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.intelligenceadx.com/lazyload.min.js | 185.76.9.15 | 200 OK | 0 B |
URL HTTP/2www.intelligenceadx.com/lazyload.min.js IP185.76.9.15:0 ASN#60068 Datacamp Limited
GET /lazyload.min.js HTTP/1.1
Host: www.intelligenceadx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: application/x-javascript
alt-svc: quic="185.76.9.13:443"; ma=2592000; v="44,43,39"
expires: Fri, 11 Nov 2022 20:48:03 GMT
access-control-allow-origin: *
link: <https://intelligenceadx.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-accel-expires: @1668199683
server: CDN77-Turbo
x-77-nzt: AblMCQ3PodT/dOcCAA
x-77-nzt-ray: ffffffffecd3a680f76168638a39da22
x-cache: HIT
x-age: 190324
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| inpagepush.com/500/2994135?excludes=&oaid=d79d376f5bc24aeca710ef3db2ebd05c&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.237 | 200 OK | 0 B |
URL HTTP/2inpagepush.com/500/2994135?excludes=&oaid=d79d376f5bc24aeca710ef3db2ebd05c&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.237:0
GET /500/2994135?excludes=&oaid=d79d376f5bc24aeca710ef3db2ebd05c&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: inpagepush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://streamz.ws
Connection: keep-alive
Referer: https://streamz.ws/
Cookie: OAID=aea1bdb46fb0408ab57b2e1d3d5f126c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:08 GMT
content-type: application/javascript
x-trace-id: 2839684ad520f2d61b5ec2090c8ca4b3
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://streamz.ws
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=d79d376f5bc24aeca710ef3db2ebd05c; expires=Tue, 07 Nov 2023 01:40:08 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| streamz.ws/x3dbdb1e392485b4edc965b8c7937c44a | 104.21.93.42 | 200 OK | 0 B |
URL HTTP/2streamz.ws/x3dbdb1e392485b4edc965b8c7937c44a IP104.21.93.42:0
GET /x3dbdb1e392485b4edc965b8c7937c44a HTTP/1.1
Host: streamz.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: text/html
x-powered-by: PHP/5.3.3
set-cookie: views=1; expires=Thu, 02-Nov-2023 01:40:07 GMT; domain=streamz.ws
views=1; expires=Thu, 02-Nov-2023 01:40:07 GMT; domain=*.streamz.ws
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o7dZz7DB%2F6T6aQs6JkmFsBrbBdM31PnnieVUCg301%2Fx9pUZ71kvHoKXFBNAn8C1QCulEcPmFDLtXJF%2Bj%2BoWFagsA4ge34qiKCnzeXd8TS%2FovlIi9KeQAjzx3u2GK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76625be68a73b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stc.cdncache.xyz/content/video/css/structure.css | 172.67.179.35 | 200 OK | 0 B |
URL HTTP/2stc.cdncache.xyz/content/video/css/structure.css IP172.67.179.35:0
GET /content/video/css/structure.css HTTP/1.1
Host: stc.cdncache.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: text/css
access-control-allow-origin: *
cf-bgj: minify
cf-polished: origSize=138463
etag: W/"58a75664-21cdf"
last-modified: Fri, 17 Feb 2017 20:00:36 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e8JVrurptB37P7a74ilCi8dFdNWfCfw87L4FK7h1XUSQyiD5kv1zM6F%2BuaE0un3rLb6kZi4JBnJUcBRzc01cJVhNJmP7%2FV8QB35YZI8RG8s0iRa%2FeljfDIgCYhuEQwLwLcuZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625be9bd3ab51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tzegilo.com/stattag.js | 172.67.194.45 | 200 OK | 0 B |
IP172.67.194.45:0
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:58 GMT
etag: W/"634eb2c6-32d9"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1026
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nA0JCeV5VS5DydoxKHn2LSVmlHQmx69%2B9uPvTNCnuFC06WzrRSvrH%2FhC2l9d%2F0wx1O6bcvO%2BuBJEPYUm3emMtGVaUYKFEKlKhxCo%2Fh6MDaOT460Ty6kPsZDif9eV%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625becfb430b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| byambipoman.com/?rb=tQnJUJmRN-9s82Pw-9-c8kwggeazduFgNmNlH4u8tlqd8s-dHNibQu6gsNzTFfJ5y6H3RK6hPWeb8Rt3sGXQvJ7hqbKhgJCoWovMS6b9754280L0xUTEcTCm8MgvRJvA1ULCdsGqNyp3AWa2miU7b3DZpBz_MEPtAPwD46q0dCd-SWrrNqW7lieEr1A-fYSSJ5EPaESBZuXDd3AXIZ1sujT7NlY46m_pPl3Qcw%3D%3D&request_ab2=0&zoneid=2850024&js_build=iclick-v1.447.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=2&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.447.0&bs=3d468cf8-34ae-48b5-9a88-d97fd9193d8d&userId=d79d376f5bc24aeca710ef3db2ebd05c&m=link | 139.45.197.239 | 200 OK | 0 B |
URL HTTP/2byambipoman.com/?rb=tQnJUJmRN-9s82Pw-9-c8kwggeazduFgNmNlH4u8tlqd8s-dHNibQu6gsNzTFfJ5y6H3RK6hPWeb8Rt3sGXQvJ7hqbKhgJCoWovMS6b9754280L0xUTEcTCm8MgvRJvA1ULCdsGqNyp3AWa2miU7b3DZpBz_MEPtAPwD46q0dCd-SWrrNqW7lieEr1A-fYSSJ5EPaESBZuXDd3AXIZ1sujT7NlY46m_pPl3Qcw%3D%3D&request_ab2=0&zoneid=2850024&js_build=iclick-v1.447.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=2&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.447.0&bs=3d468cf8-34ae-48b5-9a88-d97fd9193d8d&userId=d79d376f5bc24aeca710ef3db2ebd05c&m=link IP139.45.197.239:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /?rb=tQnJUJmRN-9s82Pw-9-c8kwggeazduFgNmNlH4u8tlqd8s-dHNibQu6gsNzTFfJ5y6H3RK6hPWeb8Rt3sGXQvJ7hqbKhgJCoWovMS6b9754280L0xUTEcTCm8MgvRJvA1ULCdsGqNyp3AWa2miU7b3DZpBz_MEPtAPwD46q0dCd-SWrrNqW7lieEr1A-fYSSJ5EPaESBZuXDd3AXIZ1sujT7NlY46m_pPl3Qcw%3D%3D&request_ab2=0&zoneid=2850024&js_build=iclick-v1.447.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=2&pl=https%3A%2F%2Fstreamz.ws%2Fwdu%3F914x3jrcwk5rftj2kh6pkjn435jd4iyej2cnm4zip494yt7iae8vyvz11je61ckl&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.447.0&bs=3d468cf8-34ae-48b5-9a88-d97fd9193d8d&userId=d79d376f5bc24aeca710ef3db2ebd05c&m=link HTTP/1.1
Host: byambipoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamz.ws/
Origin: https://streamz.ws
Connection: keep-alive
Cookie: OAID=d79d376f5bc24aeca710ef3db2ebd05c; oaidts=1667785207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: application/json
x-trace-id: da462dae6dd8b1ea447b40871b5617b2
access-control-allow-origin: https://streamz.ws
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=d79d376f5bc24aeca710ef3db2ebd05c; expires=Tue, 07 Nov 2023 01:40:07 GMT; path=/; secure; SameSite=None
oaidts=1667785207; expires=Tue, 07 Nov 2023 01:40:07 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Mon, 14 Nov 2022 01:40:07 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| stc.cdncache.xyz/js/jquery-2.1.4.min.js | 172.67.179.35 | 200 OK | 0 B |
URL HTTP/2stc.cdncache.xyz/js/jquery-2.1.4.min.js IP172.67.179.35:0
GET /js/jquery-2.1.4.min.js HTTP/1.1
Host: stc.cdncache.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: application/javascript
last-modified: Mon, 22 Feb 2016 15:07:32 GMT
etag: W/"56cb2434-14979"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2205
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zwHyCxz30Gq1r4jjdBp%2FrArLrWIg1dxgxo4X0inAQEj1SnkvoM7UrtzS8631DSeQUa%2FwyUw3%2FbpfRy6YkEjb%2B%2BwPnIWyRpTBDuVbt%2FkRByvD150fXVgoY%2BPUOQGM9XNUXW%2FT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625bea3d79b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| inpagepush.com/400/2994135 | 139.45.197.237 | 200 OK | 0 B |
URL HTTP/2inpagepush.com/400/2994135 IP139.45.197.237:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /400/2994135 HTTP/1.1
Host: inpagepush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: application/javascript
x-trace-id: 4eb92c5c818f6aec2d2bffe83a0c4ecf
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=aea1bdb46fb0408ab57b2e1d3d5f126c; expires=Tue, 07 Nov 2023 01:40:07 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.embed.ly/player-0.1.0.min.js | 104.16.90.50 | 200 OK | 0 B |
URL HTTP/2cdn.embed.ly/player-0.1.0.min.js IP104.16.90.50:0
GET /player-0.1.0.min.js HTTP/1.1
Host: cdn.embed.ly
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:07 GMT
content-type: application/javascript
x-amz-id-2: iSY10R+pZ7UVvpr2NaGu08RHxCuXpzcxvi9HZ9Zwzjfv+hviE4zdk6lrlmfguOxMIBBdIjR4+Vc=
x-amz-request-id: E6242B03THEETYDT
cache-control: public, max-age=14400
last-modified: Tue, 24 Oct 2017 18:33:09 GMT
x-amz-version-id: null
etag: W/"19b624e7fe7a86b4c7851ed61e250626"
cf-cache-status: HIT
age: 179
expires: Mon, 07 Nov 2022 05:40:07 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625beb6dd50b51-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.166.186 | 200 OK | 0 B |
IP104.17.166.186:0
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://streamz.ws/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 01:40:08 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 08 Dec 2022 01:40:08 GMT
etag: W/"11BCsVfRLqCHC9ZZvH4GUw=="
cf-cache-status: HIT
age: 1492304
vary: Accept-Encoding
server: cloudflare
cf-ray: 76625bf22cc51bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
104.21.93.42