ouo.press/rX618eN
104.22.59.251403 Forbidden 3.8 kB IP 104.22.59.251:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (836)
Hash bdda2ae0067570d95dff1da34e85a3db
87f63375320c7209526cb1c780aea4f159794e8f
b4a642f804a0e592710aa747ab9205547107c0667a0a5c28679f7e64ec4edf74
GET /rX618eN HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 403 Forbidden
Date: Sun, 27 Nov 2022 23:09:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
CF-Chl-Bypass: 1
Referrer-Policy: same-origin
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Frame-Options: SAMEORIGIN
Set-Cookie: __cf_bm=9YsCo1qx4V_8KWtBhZs2WrO.xijlbZKQheep2wjuzuk-1669590573-0-AQ20FD8sarFQjgEGVprU48uZlhZvGwt18rMlE2hbppWvHCnE6U5qbillKRLyr6L1+t4LiP+edBOpzwfUujumZTE=; path=/; expires=Sun, 27-Nov-22 23:39:33 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e883d3f39b524-OSL
Content-Encoding: gzip
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8539
Expires: Mon, 28 Nov 2022 01:31:52 GMT
Date: Sun, 27 Nov 2022 23:09:33 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5505
Cache-Control: max-age=132805
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:33 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 12:02:58 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 22:19:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3007
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3b56944f0e5716fd4fad2ec18994d4be
61cafa4de31ba960d1145ec37272f6f6b6944e0c
4fd46b0b6a2ea24f5ce175985a3933c04b4c01bd3e32bee2e50a61a65eef7af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7348
Expires: Mon, 28 Nov 2022 01:12:02 GMT
Date: Sun, 27 Nov 2022 23:09:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: q0l71aEsIOFEuLb7xgdY9QV+FyDxhiL/TyilLCJtRsFj2msV3ersILnbWVaqKZ0PsMUuK9NOvZs=
x-amz-request-id: JHYMDDSF8BRYYMS8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 22:44:48 GMT
age: 1486
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ouo.press/cdn-cgi/styles/challenges.css
104.22.59.251200 OK 2.6 kB URL HTTP/1.1 ouo.press/cdn-cgi/styles/challenges.css
IP 104.22.59.251:0
File type ASCII text, with very long lines (6294), with no line terminators
Hash ba2d8534d208d2a5b158507e004d7150
ab81307634698ea304a68783fa38937f562009a2
63b366fdbfea7cbec639f9a5f24714a831e171570625def9462d724b5c8fdc59
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/rX618eN
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:34 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:34:50 GMT
ETag: W/"637ccffa-1896"
Server: cloudflare
CF-RAY: 770e883fdaacb50c-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Mon, 28 Nov 2022 01:09:34 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip
ouo.press/favicon.ico
104.22.59.251200 OK 0 B IP 104.22.59.251:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/rX618eN
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:34 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Last-Modified: Sat, 14 Feb 2015 06:41:24 GMT
ETag: "54deee14-0"
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: max-age=86400
CF-Cache-Status: HIT
Age: 971
Accept-Ranges: bytes
Set-Cookie: __cf_bm=9aBbpwfSCOLmU.K8bj9dt9NZz1mrabE4PSPPNQ5E9PU-1669590574-0-ARpnehayVMkIJxEO/W5V8NFiuKdz9VoP7UDbPimJ0gqZCTyJsJbQx42KeAZU4kwJBIXElMH72+bIu/1Jd6Qhr0I=; path=/; expires=Sun, 27-Nov-22 23:39:34 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e883fea8bb50f-OSL
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 23:09:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ouo.press/cdn-cgi/images/trace/managed/js/transparent.gif?ray=770e883d3f39b524
104.22.59.251200 OK 42 B URL HTTP/1.1 ouo.press/cdn-cgi/images/trace/managed/js/transparent.gif?ray=770e883d3f39b524
IP 104.22.59.251:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cdn-cgi/images/trace/managed/js/transparent.gif?ray=770e883d3f39b524 HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/rX618eN
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:34 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:34:50 GMT
ETag: "637ccffa-2a"
Server: cloudflare
CF-RAY: 770e88409b76b50c-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Mon, 28 Nov 2022 01:09:34 GMT
Cache-Control: max-age=7200, public
Accept-Ranges: bytes
ouo.press/cdn-cgi/challenge-platform/h/b/orchestrate/managed/v1?ray=770e883d3f39b524
104.22.59.251200 OK 24 kB URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/orchestrate/managed/v1?ray=770e883d3f39b524
IP 104.22.59.251:0
File type ASCII text, with very long lines (56963), with no line terminators
Hash 93d4d9dd3487828849af329d493fd5c0
23c691c366b6078eb1c1ee7cc0a2dd6869a2897b
1d9cf23557177d0c1cfae0e82560e9a106a1ba6ec97a94bd9ea03e2d6a1b5f2c
GET /cdn-cgi/challenge-platform/h/b/orchestrate/managed/v1?ray=770e883d3f39b524 HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/rX618eN?__cf_chl_rt_tk=._Jr0e6WeCkP76G7IU82RnnF8TouliAzluWux887BDQ-1669590573-0-gaNycGzNAv0
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:34 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: max-age=0, must-revalidate
Set-Cookie: __cf_bm=aqe0Tw_fgZZPpEUO9iWXa2SXYF3E5ELNctXQNv780g4-1669590574-0-AREcU275CyVydorD6QC72rqRBzFoFmmB8C1OKtm9GqUi4bJh2/nwV3IWCb3q12fh84Wh9g31PQV3YPc76u+bO/g=; path=/; expires=Sun, 27-Nov-22 23:39:34 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 770e8840ab1cb50f-OSL
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash c7c52d07b76716c439e964b15291e293
aeed4273121cefd857c2b5f23c8ac28cd4f6c325
930e946f81768d2e858ca3ff94a4a24b14fa9167f820fe7b5f6c19e755ad773c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4656
Cache-Control: max-age=132675
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:34 GMT
Etag: "63833f41-117"
Expires: Tue, 29 Nov 2022 12:00:49 GMT
Last-Modified: Sun, 27 Nov 2022 10:43:13 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.9665087126251036:1669587717:0vIXEa0G5hiPhAYQTwx8GgrINCYsBo7VwbZkGhylT08/770e883d3f39b524/c17473144c8f3f8
104.22.59.251200 OK 72 kB URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.9665087126251036:1669587717:0vIXEa0G5hiPhAYQTwx8GgrINCYsBo7VwbZkGhylT08/770e883d3f39b524/c17473144c8f3f8
IP 104.22.59.251:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash e60d06fb938f46e3a4ca0b3c2e4da5b0
f21edec33eccdf2ea1370c580072bc71a9545448
c60f4eea08b73c0904b329f8a1044ecb12063ee80c20844dd1a64ee9224180ab
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.9665087126251036:1669587717:0vIXEa0G5hiPhAYQTwx8GgrINCYsBo7VwbZkGhylT08/770e883d3f39b524/c17473144c8f3f8 HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/rX618eN
Content-type: application/x-www-form-urlencoded
CF-Challenge: c17473144c8f3f8
Content-Length: 1791
Origin: http://ouo.press
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:34 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_gen: OWwdZ6htdCg+Jt3LLrb73hke5ULKtbxMLjfTw9G+77ZL5YX0OJGxQZnMYaPSNOh+Sr1NzVIy+4YIuwpCNtpKwkiQIl1jA1s5t7hqhwzttSOhL5/j7ba9CdM3t4SNR06WYA7Eic8rZcjgGVdA5lZ+cxyvTcgngStL/ntSVcyPmsUvRjJCuIqdv+AoUwS4nCGzioDQAdexjc9Vk/w3UzqKKxtaSRxdgIHrMYjsy1dkBoAfILXrxElhENrHWrmFjuWMkRbRsg3X33B8V+rrcubu0wPZkHc4hk47TUnMR2m0pRqZcIC3vFn4fh3VjnEv7mIwqC4ckIQHBPY7ZnK+TwwxDKMThSlZc7XCPtI10jhIwiay1z5XqmLOdCghWMJU/NVX5S4z2so5q9mILJvQTJZzCw==$biG87zvaCh1Zi7OAZCq/+g==
Set-Cookie: __cf_bm=Y3xd08ZlGIvbzMxYDIQHzyjnUhLxdb13kdjIgmjsJWU-1669590574-0-ASrBsrhjtNO8JBTqZY/YD3P8gykajQcDwi6bUoedsVNyzPh6qY8Zs4EgA1734Hdo9e7BRHJWnWycdBVzErIjBvk=; path=/; expires=Sun, 27-Nov-22 23:39:34 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 770e8841cc68b50f-OSL
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 23:08:54 GMT
cache-control: public,max-age=3600
age: 40
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1336
Cache-Control: max-age=123574
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:34 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 09:29:08 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
44.236.232.139101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.236.232.139:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: z3hwppM09H8N5M02UwujEg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eMc6TnufVF640XAtdX2HM3+LGpM=
ouo.press/cdn-cgi/challenge-platform/h/b/img/770e883d3f39b524/1669590574387/N5ExJj818TRUd5-
104.22.59.251200 OK 61 B URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/img/770e883d3f39b524/1669590574387/N5ExJj818TRUd5-
IP 104.22.59.251:0
File type PNG image data, 64 x 23, 8-bit/color RGB, non-interlaced\012- data
Hash 8af5e6a864081f26f1aa9b70ae3b0852
eee1e9b39bc4f9739eeef63060da993f19e530f0
1508ffe198a0ff2699fca8c0c27548e8d267b9f6614e1c576b7780174066d4de
GET /cdn-cgi/challenge-platform/h/b/img/770e883d3f39b524/1669590574387/N5ExJj818TRUd5- HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/rX618eN
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:35 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cf_bm=SxokyKVT72Vxwv1eXeb5eAnDNt4dYq8y2fiC_rY.Tvs-1669590575-0-Ac+pR+Tjxvt15H1CG6Vi8HE00pFC7cXKGp2e0cyuaTO1KxufSnKGdGF23FQ48JJakNu+J5D8VL0bOQxCcxD3lxc=; path=/; expires=Sun, 27-Nov-22 23:39:35 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 770e884729feb50f-OSL
ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.9665087126251036:1669587717:0vIXEa0G5hiPhAYQTwx8GgrINCYsBo7VwbZkGhylT08/770e883d3f39b524/c17473144c8f3f8
104.22.59.251200 OK 3.9 kB URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.9665087126251036:1669587717:0vIXEa0G5hiPhAYQTwx8GgrINCYsBo7VwbZkGhylT08/770e883d3f39b524/c17473144c8f3f8
IP 104.22.59.251:0
File type ASCII text, with very long lines (5196), with no line terminators
Hash 566cf404eb660b05680a492ce9b377e2
a1c52e57e0efc14c4b779adf92a8b56e9b121a20
7c6d95078cb550bbb3f51c5c2464db5230a90d5590d78567f6bcb9b5f7083ba6
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.9665087126251036:1669587717:0vIXEa0G5hiPhAYQTwx8GgrINCYsBo7VwbZkGhylT08/770e883d3f39b524/c17473144c8f3f8 HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/rX618eN
Content-type: application/x-www-form-urlencoded
CF-Challenge: c17473144c8f3f8
Content-Length: 16405
Origin: http://ouo.press
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:35 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_gen: Y4D3GGrBLkVHVPTWTNSFQoFkOf3FY/jog7D8OVuIoHU=$fl5RlBifUGPPM8138DEGCg==
Set-Cookie: __cf_bm=fnAZdsFbH8Q11o8nCLfjGTTWeUAVputNKtOri.sMKMw-1669590575-0-AZ5javW4KYhS8jMmsW7PfcxPrkIrpre8eisb0EViLt4AAEarBE+HvpRA0BZCwP9bZ4OkJ5zX0pcisdLg2IfAQAU=; path=/; expires=Sun, 27-Nov-22 23:39:35 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 770e8847fab9b50f-OSL
Content-Encoding: gzip
challenges.cloudflare.com/turnstile/v0/api.js?onload=_cf_chl_turnstile_l&render=explicit
104.18.7.185302 Found 0 B URL HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?onload=_cf_chl_turnstile_l&render=explicit
IP 104.18.7.185:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?onload=_cf_chl_turnstile_l&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 27 Nov 2022 23:09:35 GMT
content-length: 0
location: /turnstile/v0/75e640aa/api.js?onload=_cf_chl_turnstile_l&render=explicit
cache-control: max-age: 300
vary: Accept-Encoding
server: cloudflare
cf-ray: 770e88486ae7b4e8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11446
Expires: Mon, 28 Nov 2022 02:20:22 GMT
Date: Sun, 27 Nov 2022 23:09:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11446
Expires: Mon, 28 Nov 2022 02:20:22 GMT
Date: Sun, 27 Nov 2022 23:09:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e240caa3153ea25c34d07185b47f8a5
602e8ba5c6671ff947acfda757577ddc8ecec6ec
c2b37bf1ef003ceffaaf4612f2001b6f7998d5b95cd55b32c79fefcb24ccad7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ff6b6f2-e6dd-4654-9894-50de6f502f83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11255
x-amzn-requestid: ce06e0cc-3874-4a3d-a6c5-5cc1cb342138
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7w8EEOIAMF_6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99f-5ca652aa369ee1690b0d08cc;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6qKDE2jlIb8D2Mhg-OcsfU1haVtyGYfcMcs1NJT_HPlTv-O26tR60w==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:54:34 GMT
age: 4502
etag: "602e8ba5c6671ff947acfda757577ddc8ecec6ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0a4e0bb1e2748bdce6bbf685a910f0fc
5b97bfd787afcb912cdbef0f137f78a059082992
a7bc9adeb22cb57675e907bd961a6f554e6b7a46414ed782bcc9b53d68b1c328
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15639
x-amzn-requestid: 98e846b4-287f-4698-9529-25bcc2727a4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78dGReoAMFiDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e9-62c41b2717bd8e6f3b3797da;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AhbL-wXc_eYsgxdjf0DIEJD7Z3XfXMjXwDC52Bz_SnvmmWAhl3g99A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:38 GMT
age: 4678
etag: "5b97bfd787afcb912cdbef0f137f78a059082992"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69fecdd0-f203-4856-9306-7df6eb537732.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69fecdd0-f203-4856-9306-7df6eb537732.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 515b38218003c32df1ae80c1028ca88c
1b129f9794cbee796ec6321c52d062a58e3c26ab
acc804008b482ba917a113be5361f5172b973db477947b3da749d3287774980f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69fecdd0-f203-4856-9306-7df6eb537732.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7444
x-amzn-requestid: 71662fef-ed42-4596-ae11-80d8fc05f7fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGNloAMFjZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-4fd8cdaa43d66ba20286e4ed;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Hvz7wRVwS6OkBe7PWFijKhnz_qF5naVplBMUPC6zFrgLSuWXLKyIhw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:16:08 GMT
age: 3208
etag: "1b129f9794cbee796ec6321c52d062a58e3c26ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e33decf-55e5-425f-bb8d-5e1ca290e633.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e33decf-55e5-425f-bb8d-5e1ca290e633.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 300ba2bd11eefb4b5b9ba5b9d56c6cca
55c9d2899b16945f329d0dacc021161038629988
a866abff0b6b5c6ed6758f1208f106d8f00c7f16fa07f2a676301cce8301e964
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e33decf-55e5-425f-bb8d-5e1ca290e633.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4254
x-amzn-requestid: 9c63d2a1-e805-4114-8875-fc1dc022c047
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR8IwHopoAMFq0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383da37-395ca7b76b364c11172fbdd6;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:44:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kEPPpR5WF9pdwcaIAgJlKrueznhQ4g5RFucMPj5eI0EbNk5Dt2dLIQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:00:48 GMT
age: 4128
etag: "55c9d2899b16945f329d0dacc021161038629988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f14adca-9ca8-4ff4-8a3e-4620f8c1e8f8.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f14adca-9ca8-4ff4-8a3e-4620f8c1e8f8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13f4c2b3410532b6c756990f1759da46
16096289cd354fada56dbb3f2d75d406ae8ab62f
9894d998a884f2b5637bd12b0cd3df556835ea7a3134eb0f516fc03e3d31c26c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f14adca-9ca8-4ff4-8a3e-4620f8c1e8f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8568
x-amzn-requestid: da2726a2-20ad-4201-b4e9-3de9be88a485
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7-BHcUIAMFieA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9f3-370921803a9de7e627682c94;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MPWvdL-woEL21aHiMtzg--1Z1p2w9y0XTGxb445LyuMVlWTp4nsMQw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:16:30 GMT
age: 3186
etag: "16096289cd354fada56dbb3f2d75d406ae8ab62f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1f41832-bc78-4527-a3e7-8099266ecb52.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1f41832-bc78-4527-a3e7-8099266ecb52.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 577b69fd08ad8368ea5a94fe41476c1c
9442f111d329f721ddc55100cd246586d8204048
bdafc5068032dcf5e207cf2685a1b9350dbe8d990ba181520ff47889524532f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1f41832-bc78-4527-a3e7-8099266ecb52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8517
x-amzn-requestid: 12456791-0e7f-45d7-97ae-d663c8fa841d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMozvHHLoAMFVqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb4a-54ed1ec101789247052c9ec8;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:07:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UzzTPZIBjoow9PK-oM9rfGh5HkrivyPDofbTXy-I-9e4_baQnyKVhQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 05:55:42 GMT
age: 62034
etag: "9442f111d329f721ddc55100cd246586d8204048"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.9665087126251036:1669587717:0vIXEa0G5hiPhAYQTwx8GgrINCYsBo7VwbZkGhylT08/770e883d3f39b524/c17473144c8f3f8
104.22.59.251200 OK 2.1 kB URL HTTP/1.1 ouo.press/cdn-cgi/challenge-platform/h/b/flow/ov1/0.9665087126251036:1669587717:0vIXEa0G5hiPhAYQTwx8GgrINCYsBo7VwbZkGhylT08/770e883d3f39b524/c17473144c8f3f8
IP 104.22.59.251:0
File type ASCII text, with very long lines (2696), with no line terminators
Hash 1552b81405dd7c3e8756835329c7865c
940a4d8bc324e84be9de8c167f16824396973ba3
7a5e847a5243736083ce5b200ffde2057872286b3cc626b1bd33cc7b2c206737
POST /cdn-cgi/challenge-platform/h/b/flow/ov1/0.9665087126251036:1669587717:0vIXEa0G5hiPhAYQTwx8GgrINCYsBo7VwbZkGhylT08/770e883d3f39b524/c17473144c8f3f8 HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/rX618eN
Content-type: application/x-www-form-urlencoded
CF-Challenge: c17473144c8f3f8
Content-Length: 17148
Origin: http://ouo.press
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cf_chl_out: DyRsII3x8ehqJyV65KnmwIvD+cWqqrG+Di4jjG/DEfkavxhrtLMqIP3FoTjITXFeZ9sIUIYZHVtjn+Q6BvFF1g==$MizcPW0ZH9duvFPn1JT5uQ==
cf_chl_out_s: NK34CeGFVu4QSceeKnH005mPesE8Pa6oyzuZYvimX0heoViF8xe5X8Zy4IObOzKTMhdPgwD8+RWJYl2AKN1h1LZdsiaUNLkdbYszqMAtVPezF9+5e7gBMuodVqD4wCm5zy3rMVFFLmNcFfLhWhMumNaiy0+hN7AM20lPBOjAVfoeyN7pGtPocAUE1TCJuVCD$BOSk0zvSivBesr12vJOiQQ==
set-cookie: cf_chl_rc_m=;Expires=Sat, 26 Nov 2022 23:09:38 GMT;SameSite=Strict
__cf_bm=3yexrUCd6dqWzmYnzqbOZypN7z5qH85dkwnYkzvVQdY-1669590578-0-Ae9sMdynTJX6xt1pRwuBMrtihBqJ28ARPbpKmf+S1/Gl52mCajHZ44Y4cR/I8At5fY5yrLxiC0zCNEPO2ggASeQ=; path=/; expires=Sun, 27-Nov-22 23:39:38 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 770e8859cd66b50f-OSL
Content-Encoding: gzip
ouo.press/rX618eN
104.22.59.251200 OK 3.6 kB IP 104.22.59.251:0
Hash 00d2448b4c01f396d53e9fe34439519e
f811df1820352fc5083a47261c21807b446127e1
12e7f9c339957dcb71acfe69fad6cbc8d1c088c9f8c4dee2eea3239beae811fc
POST /rX618eN HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ouo.press/rX618eN?__cf_chl_tk=._Jr0e6WeCkP76G7IU82RnnF8TouliAzluWux887BDQ-1669590573-0-gaNycGzNAv0
Content-Type: application/x-www-form-urlencoded
Content-Length: 1772
Origin: http://ouo.press
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
CF-Cache-Status: DYNAMIC
Set-Cookie: cf_clearance=P9zidlWVV9x.EEDMoGVLFsV4JQcnIgP9hFtJv9UI6U4-1669590578-0-250; path=/; expires=Mon, 27-Nov-23 23:09:38 GMT; domain=.ouo.press; HttpOnly
ouoio_session=eyJpdiI6ImlNbEt3V1FOdXRzRG8xV0Jwa2tZUDNCQ1RaYXpGK25UK0hMNXF3NHEwUjQ9IiwidmFsdWUiOiJDM1RTck5Sek56bEdMMWE1Tlp3U1dqNmh3S0lQdVl0Zk9VbVNCXC82MjRKeDI5c0syN05yQ0M3Y1dEV3VuN1hxb0RaS3haNldWVWVZNlFMZHdoUXpaMUE9PSIsIm1hYyI6ImY5ZTk3NWZlOGVjNTM5NTAwNzY3ZTExZjg0NmExZTViYTEwYTY1ZTlhZTVkNWQwMTI5OGIyYmI4YmNmNjk2MmQifQ%3D%3D; path=/; httponly
language=eyJpdiI6ImRaREpWNFo2aGlpdE15eVVSOFlJbHhGU254eU1Qc3hUYms0QlA4VXNOY3c9IiwidmFsdWUiOiJpejFnQnZwZExteXE0MXM1djVWYXRGSTJkaTdPOTRRTDFrNGRTY2MwNjJBPSIsIm1hYyI6ImY1MGI0ZjIxNjc3ZmNjNWRkNmQ0NDkxN2RjMzI1NTIxNTZlMDVlNGViYmM5YzhjMzMzODhlNGRjN2FlMmY2YTEifQ%3D%3D; expires=Fri, 26-Nov-2027 23:09:38 GMT; Max-Age=157680000; path=/; httponly
53c46720d415321465e0ee5125a3312fa03aca43=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; expires=Mon, 28-Nov-2022 01:09:38 GMT; Max-Age=7200; path=/; httponly
__cf_bm=bkIdCXdywQuGDFoozkmgvYSTGnAgDL8XCZVpt_dDfaM-1669590578-0-AbUZOnPYa0+pahHoqrrcOAZCyHFZoA3bqjRfAn6riYA5nCY10Ch4UiLholYrc/wY/3QJ3EhY0BY5IHtTHlS8ggw=; path=/; expires=Sun, 27-Nov-22 23:39:38 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 770e885aee5eb50f-OSL
Content-Encoding: gzip
ouo.press/css/bootstrap.css
104.22.59.251200 OK 18 kB URL HTTP/1.1 ouo.press/css/bootstrap.css
IP 104.22.59.251:0
File type ASCII text, with very long lines (65452)
Hash ecd7a3b8fdf856cece681f760bad623c
3c16d8b0523e3c6de3b20f7c7f9de2ae48a2949a
40f5215bfeb4c595389b7d02127c47c94e173dbca21022c9f67eca101d03ab92
GET /css/bootstrap.css HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/rX618eN
Cookie: cf_clearance=P9zidlWVV9x.EEDMoGVLFsV4JQcnIgP9hFtJv9UI6U4-1669590578-0-250; ouoio_session=eyJpdiI6ImlNbEt3V1FOdXRzRG8xV0Jwa2tZUDNCQ1RaYXpGK25UK0hMNXF3NHEwUjQ9IiwidmFsdWUiOiJDM1RTck5Sek56bEdMMWE1Tlp3U1dqNmh3S0lQdVl0Zk9VbVNCXC82MjRKeDI5c0syN05yQ0M3Y1dEV3VuN1hxb0RaS3haNldWVWVZNlFMZHdoUXpaMUE9PSIsIm1hYyI6ImY5ZTk3NWZlOGVjNTM5NTAwNzY3ZTExZjg0NmExZTViYTEwYTY1ZTlhZTVkNWQwMTI5OGIyYmI4YmNmNjk2MmQifQ%3D%3D; language=eyJpdiI6ImRaREpWNFo2aGlpdE15eVVSOFlJbHhGU254eU1Qc3hUYms0QlA4VXNOY3c9IiwidmFsdWUiOiJpejFnQnZwZExteXE0MXM1djVWYXRGSTJkaTdPOTRRTDFrNGRTY2MwNjJBPSIsIm1hYyI6ImY1MGI0ZjIxNjc3ZmNjNWRkNmQ0NDkxN2RjMzI1NTIxNTZlMDVlNGViYmM5YzhjMzMzODhlNGRjN2FlMmY2YTEifQ%3D%3D; 53c46720d415321465e0ee5125a3312fa03aca43=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
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=86400
Cf-Bgj: minify
Cf-Polished: origSize=109522
ETag: W/"54def1fc-1abd2"
Expires: Mon, 28 Nov 2022 10:44:14 GMT
Last-Modified: Sat, 14 Feb 2015 06:58:04 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
CF-Cache-Status: HIT
Age: 1524
Set-Cookie: __cf_bm=tSZrQ_ao8EZ8eALNMQcsUSxtpI9fA7cY0gJIvJOuNwU-1669590578-0-AZYmF3/0OuhiLjKPaz8IHSR8dQOU/F1H9OPd1sn3//CdUdclhGEVFIokwLKctjLU5atyYMsC47gkBFT+1ZzctMw=; path=/; expires=Sun, 27-Nov-22 23:39:38 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e885c7853b50f-OSL
Content-Encoding: gzip
ouo.press/css/link-safe.css
104.22.59.251200 OK 1.8 kB URL HTTP/1.1 ouo.press/css/link-safe.css
IP 104.22.59.251:0
Hash d91a45478adaa488ef4f1733dfa3c44c
3686ea901ce8ca85bb82f42bf0a8d39095ebf73d
4bb66b15dd5791ec4c9867c3a89ee2ef9bdb5f0bbd0d442a1fbfe2c34e9bc86b
GET /css/link-safe.css HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/rX618eN
Cookie: cf_clearance=P9zidlWVV9x.EEDMoGVLFsV4JQcnIgP9hFtJv9UI6U4-1669590578-0-250; ouoio_session=eyJpdiI6ImlNbEt3V1FOdXRzRG8xV0Jwa2tZUDNCQ1RaYXpGK25UK0hMNXF3NHEwUjQ9IiwidmFsdWUiOiJDM1RTck5Sek56bEdMMWE1Tlp3U1dqNmh3S0lQdVl0Zk9VbVNCXC82MjRKeDI5c0syN05yQ0M3Y1dEV3VuN1hxb0RaS3haNldWVWVZNlFMZHdoUXpaMUE9PSIsIm1hYyI6ImY5ZTk3NWZlOGVjNTM5NTAwNzY3ZTExZjg0NmExZTViYTEwYTY1ZTlhZTVkNWQwMTI5OGIyYmI4YmNmNjk2MmQifQ%3D%3D; language=eyJpdiI6ImRaREpWNFo2aGlpdE15eVVSOFlJbHhGU254eU1Qc3hUYms0QlA4VXNOY3c9IiwidmFsdWUiOiJpejFnQnZwZExteXE0MXM1djVWYXRGSTJkaTdPOTRRTDFrNGRTY2MwNjJBPSIsIm1hYyI6ImY1MGI0ZjIxNjc3ZmNjNWRkNmQ0NDkxN2RjMzI1NTIxNTZlMDVlNGViYmM5YzhjMzMzODhlNGRjN2FlMmY2YTEifQ%3D%3D; 53c46720d415321465e0ee5125a3312fa03aca43=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
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:38 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=86400
Cf-Bgj: minify
Cf-Polished: status=cannot_optimize
ETag: W/"5d951ace-1830"
Expires: Mon, 28 Nov 2022 01:23:32 GMT
Last-Modified: Wed, 02 Oct 2019 21:46:54 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
CF-Cache-Status: HIT
Age: 35166
Set-Cookie: __cf_bm=2o5rTRMkChiRz9Zw69IqAybnBlI3fYRFM2pEKHMhHl4-1669590578-0-Ac//WBY6Hma+L0lphctVQTmvIzCMuyTrr4vespmqSZ5L8YokuHqtrbabUnIPGnouv7KBJNSBKG3no+g1EW9ytAk=; path=/; expires=Sun, 27-Nov-22 23:39:38 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e885c7d27b50c-OSL
Content-Encoding: gzip
ouo.press/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
104.22.59.251200 OK 655 B URL HTTP/1.1 ouo.press/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 104.22.59.251:0
File type HTML document, ASCII text, with very long lines (1238)
Hash bc3ba461c8a309acf61b6d9c41cb6236
88482306ecc9258d5e9cbb9ba5314dab223a5db4
31331f1b1519882d2f2fb60367708fd56a7a1ec0bddd0554c635547179c7dc8f
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/rX618eN
Cookie: cf_clearance=P9zidlWVV9x.EEDMoGVLFsV4JQcnIgP9hFtJv9UI6U4-1669590578-0-250; ouoio_session=eyJpdiI6ImlNbEt3V1FOdXRzRG8xV0Jwa2tZUDNCQ1RaYXpGK25UK0hMNXF3NHEwUjQ9IiwidmFsdWUiOiJDM1RTck5Sek56bEdMMWE1Tlp3U1dqNmh3S0lQdVl0Zk9VbVNCXC82MjRKeDI5c0syN05yQ0M3Y1dEV3VuN1hxb0RaS3haNldWVWVZNlFMZHdoUXpaMUE9PSIsIm1hYyI6ImY5ZTk3NWZlOGVjNTM5NTAwNzY3ZTExZjg0NmExZTViYTEwYTY1ZTlhZTVkNWQwMTI5OGIyYmI4YmNmNjk2MmQifQ%3D%3D; language=eyJpdiI6ImRaREpWNFo2aGlpdE15eVVSOFlJbHhGU254eU1Qc3hUYms0QlA4VXNOY3c9IiwidmFsdWUiOiJpejFnQnZwZExteXE0MXM1djVWYXRGSTJkaTdPOTRRTDFrNGRTY2MwNjJBPSIsIm1hYyI6ImY1MGI0ZjIxNjc3ZmNjNWRkNmQ0NDkxN2RjMzI1NTIxNTZlMDVlNGViYmM5YzhjMzMzODhlNGRjN2FlMmY2YTEifQ%3D%3D; 53c46720d415321465e0ee5125a3312fa03aca43=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
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:35:09 GMT
ETag: W/"637cd00d-4d7"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e885c7c37fac8-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Tue, 29 Nov 2022 23:09:38 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
hhklc.com/c.js
104.21.70.122301 Moved Permanently 6.0 kB IP 104.21.70.122:0
Hash 03e6e249492aa92ffb202f8878e19d2f
a7f3b52ccef6179027d442f84f842444befcbc09
84450dce51060b8eac0c5c0c5983b8421c3bc234991eac0d6284e4c147185437
GET /c.js HTTP/1.1
Host: hhklc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 23:09:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 28 Nov 2022 00:09:38 GMT
Location: https://hhklc.com/c.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NbvV8y4MjheGh5aY3uff35zQFxWo9Qnp28ZpSJVVJXvTB03ssiXK7F0EsTliYJldfWufphy8l9UkKQa3TMmSdnUUllXCmqz3Mrwucnmt26NKupnZHmXZ5qaQ8hc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e885c79bb0af6-OSL
alt-svc: h2=":443"; ma=60
cdn.adtrue.com/rtb/async.js
104.21.81.154301 Moved Permanently 0 B URL HTTP/1.1 cdn.adtrue.com/rtb/async.js
IP 104.21.81.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/async.js HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 23:09:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 28 Nov 2022 00:09:38 GMT
Location: https://cdn.adtrue.com/rtb/async.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l95%2B%2BkYNlIV3D2CR6QJ95loQ1lwfXrcsJVa1GSD%2FxrRSVRfPY4CmuldLTzBmkjyg2nJgNLUG1jGvDkKA4UX7WzN3Og%2FZk03N48GUjFSJ5crwlK%2BE65pCIL4X9kiFxYSnOg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e885c8a4fb50b-OSL
alt-svc: h2=":443"; ma=60
fonts.googleapis.com/css?family=Questrial
142.250.74.10200 OK 387 B URL HTTP/1.1 fonts.googleapis.com/css?family=Questrial
IP 142.250.74.10:0
Hash 7b73b3eed6a43db40b0640388112329f
ad4bb62a66f1f95c0a252f83345b40d40dcd5bb4
1776d3903d4f6fb36773bac4ccb4b86c0658838f29674d1fb506859506a41bc3
GET /css?family=Questrial HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 27 Nov 2022 23:09:38 GMT
Date: Sun, 27 Nov 2022 23:09:38 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ecdn.analysis.fi/static/js/fab.js
54.230.111.87200 OK 4.2 kB URL HTTP/1.1 ecdn.analysis.fi/static/js/fab.js
IP 54.230.111.87:0
File type ASCII text, with very long lines (574)
Hash 28a0bef1ecb63168106f97b637ab3414
e577575dd115f6a95aea8c2ae87d2c30c8464728
d8a34aeacc4054bd4e119e538c7eb4956421014f48a9b603d3f9314a7435b5a6
GET /static/js/fab.js HTTP/1.1
Host: ecdn.analysis.fi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 4240
Connection: keep-alive
Server: nginx/1.20.0
Last-Modified: Tue, 14 Dec 2021 15:30:51 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Sun, 27 Nov 2022 22:23:13 GMT
Expires: Sun, 27 Nov 2022 23:23:10 GMT
Cache-Control: max-age=3600
ETag: "61b8b8ab-1090"
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jyKSOQQXLTBJITSAADj1YIdDTOxi_RHtbj2C2GCAMRlh9HoWQ_elgg==
Age: 2788
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 87670e63574af55d2a11c08571e2f0c6
a793908a385fc11fe9b525f48a737c0a01e49d4b
ea6bb3da2e604ff9eee58ed31ca2b92b38ff9609a287c70fb116229074ef42c0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5607
Cache-Control: max-age=111647
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:38 GMT
Etag: "6382e96a-117"
Expires: Tue, 29 Nov 2022 06:10:25 GMT
Last-Modified: Sun, 27 Nov 2022 04:36:58 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9f6cc8d3fe9092a6d3901e873a87fd87
2e0aac117a4cc57596efb3d6f6624c269f94b031
e73982e62b92abac3d15b161f4525448cc2bc8b9bacefdcbfc6f87b74ec372e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=6Lcr1ncUAAAAAH3cghg6cOTPGARa8adOf-y9zv2x
142.250.74.164200 OK 28 kB URL HTTP/2 www.google.com/recaptcha/api.js?render=6Lcr1ncUAAAAAH3cghg6cOTPGARa8adOf-y9zv2x
IP 142.250.74.164:0
Hash 1fd7b23ddc40a67345b1aa9a01bda6e1
127983f1670e3d7eca724b97816b8d625c1c07a4
c6590edcc4d417e4e256d5c93251c97dcf511a5c40fdebc7fea5b71ada6b04c2
GET /recaptcha/api.js?render=6Lcr1ncUAAAAAH3cghg6cOTPGARa8adOf-y9zv2x HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sun, 27 Nov 2022 23:09:38 GMT
date: Sun, 27 Nov 2022 23:09:38 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 582
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ecdn.firstimpression.io/fi_client.js
54.230.111.89200 OK 100 kB URL HTTP/1.1 ecdn.firstimpression.io/fi_client.js
IP 54.230.111.89:0
File type ASCII text, with very long lines (618)
Size 100 kB (100123 bytes)
Hash 0d95a8c27544025b9b74da1368cba47c
ee48091855e1a32403ae1e6d50b43e08c3853bcf
1487a6f90f3e711eb767481ad8f7a0a27e1d77f70f391471f9a180362cd1830a
GET /fi_client.js HTTP/1.1
Host: ecdn.firstimpression.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 27 Nov 2022 22:11:48 GMT
Server: nginx/1.20.0
X-Powered-By: PHP/8.0.14
X-XSS-Protection: 0
Last-Modified: Sun, 27 Nov 2022 22:11:48 UTC
ETag: W/"18856951bdcc33636f5d17533a110a86"
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F7m2OZsCAc8YwMWxA5IGAnriBVJTWHol6Z5wbNeIROB9apZu73rKMw==
Age: 3470
cdn.adtrue.com/rtb/async.js
104.21.81.154200 OK 2.9 kB URL HTTP/2 cdn.adtrue.com/rtb/async.js
IP 104.21.81.154:0
File type HTML document, ASCII text, with very long lines (7327), with no line terminators
Hash 3b5a24ef073ab0c70362a99355c9bf39
f3f5b634a15a8c0d23230465cd14c6c61f393d33
cbc8617c23eb05dea39c275899d44efa489b88f97956fe32b46f8fa4befc2b95
GET /rtb/async.js HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ouo.press/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:38 GMT
content-type: application/javascript
last-modified: Mon, 16 Nov 2020 01:20:45 GMT
etag: W/"5fb1d3ed-1c9f"
expires: Sun, 24 Sep 2023 03:46:20 GMT
cache-control: max-age=31104000
access-control-allow-origin: *
cf-cache-status: HIT
age: 5167398
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pt3PlPnEigsXjCZS8c2u8%2FfsgBjOfz3d%2F8S0w%2FYPgsslcu%2BlIt%2FJHK2gFWVBdf4rRYIPciYa3XfXpn2lzMSeGIgt2ckD4ZnO5B3957dZZVyRZKVeVDJPrkRld0kHhsF8OQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770e885cec3cb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ouo.press/images/world.png
104.22.59.251200 OK 5.7 kB URL HTTP/1.1 ouo.press/images/world.png
IP 104.22.59.251:0
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 4eea420a8830a6d695114427bf52b556
35579e7f1a656beb3a07a7093166ff37c634bade
70f03c74cc197cf154af36fa552a448d9ffebb55081c96e55ef4cf469123fe22
GET /images/world.png HTTP/1.1
Host: ouo.press
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/rX618eN
Cookie: cf_clearance=P9zidlWVV9x.EEDMoGVLFsV4JQcnIgP9hFtJv9UI6U4-1669590578-0-250; ouoio_session=eyJpdiI6ImlNbEt3V1FOdXRzRG8xV0Jwa2tZUDNCQ1RaYXpGK25UK0hMNXF3NHEwUjQ9IiwidmFsdWUiOiJDM1RTck5Sek56bEdMMWE1Tlp3U1dqNmh3S0lQdVl0Zk9VbVNCXC82MjRKeDI5c0syN05yQ0M3Y1dEV3VuN1hxb0RaS3haNldWVWVZNlFMZHdoUXpaMUE9PSIsIm1hYyI6ImY5ZTk3NWZlOGVjNTM5NTAwNzY3ZTExZjg0NmExZTViYTEwYTY1ZTlhZTVkNWQwMTI5OGIyYmI4YmNmNjk2MmQifQ%3D%3D; language=eyJpdiI6ImRaREpWNFo2aGlpdE15eVVSOFlJbHhGU254eU1Qc3hUYms0QlA4VXNOY3c9IiwidmFsdWUiOiJpejFnQnZwZExteXE0MXM1djVWYXRGSTJkaTdPOTRRTDFrNGRTY2MwNjJBPSIsIm1hYyI6ImY1MGI0ZjIxNjc3ZmNjNWRkNmQ0NDkxN2RjMzI1NTIxNTZlMDVlNGViYmM5YzhjMzMzODhlNGRjN2FlMmY2YTEifQ%3D%3D; 53c46720d415321465e0ee5125a3312fa03aca43=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
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:38 GMT
Content-Type: image/png
Content-Length: 5692
Connection: keep-alive
Cache-Control: max-age=2592000
Cf-Bgj: imgq:85,h2pri
Cf-Polished: status=not_needed
ETag: "5549a07c-163c"
Expires: Sat, 03 Dec 2022 22:33:44 GMT
Last-Modified: Wed, 06 May 2015 05:02:52 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
CF-Cache-Status: HIT
Age: 2075754
Accept-Ranges: bytes
Set-Cookie: __cf_bm=H3buLZ2ZcmZObWc1F1io8bL7c_.sMPnpYdcOuPb8M1w-1669590578-0-AR+HKy5guWWvs9y9ituhz+0Spa7/+gm1JaOx2J4BBN739Yc4y6UPEv43DZO54cbIbeha/HHcHOOhaR+NuIhCgg0=; path=/; expires=Sun, 27-Nov-22 23:39:38 GMT; domain=.ouo.press; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e885d0906b50f-OSL
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tv.gourdycortes.com/1clkn/48786
172.255.6.96200 OK 26 B URL HTTP/1.1 tv.gourdycortes.com/1clkn/48786
IP 172.255.6.96:0
File type ASCII text, with no line terminators
Hash 414a242a6fee8464282857e475d3ef61
f669890350347f53aa9bd19c1a355692e8d17d2f
d4914e81dd0b4c1d8ee8e789f6b369d107b93ac886f862930e1a98580e79aafa
GET /1clkn/48786 HTTP/1.1
Host: tv.gourdycortes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 23:09:38 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Mon, 28-Nov-2022 23:09:38 GMT; Max-Age=86400; path=/
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Mon, 28-Nov-2022 23:09:38 GMT; Max-Age=86400; path=/
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
itineraryupper.com/ed/36/01/ed36014633829dc70a42dccaefdf3f11.js
192.243.59.13200 OK 59 kB URL HTTP/1.1 itineraryupper.com/ed/36/01/ed36014633829dc70a42dccaefdf3f11.js
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
Hash 6523c344a39281c50957055cbbdc467f
3fca912a313fcc9ba3829dd096124386d337ab4a
d70ef167837c6d3f96a2f2e957b9ff19b0ddbf332124928199cf30f5b5a2bd59
Analyzer Verdict Alert fortinet Malware
GET /ed/36/01/ed36014633829dc70a42dccaefdf3f11.js HTTP/1.1
Host: itineraryupper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 23:09:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ef5ac7e6795fb6593cb3c5e7b11b95a3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2
216.58.207.195200 OK 19 kB URL HTTP/1.1 fonts.gstatic.com/s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 19292, version 1.0\012- data
Hash 19007b17e56daa60133bce9e9b352a95
bac1384caeae5762e7a1d8c18037f69c8cd21bc4
fd88a03358ba14440b78c6329717bdf6ed1a9fe97c3ad4e0a0a39d31fb1ac546
GET /s/questrial/v18/QdVUSTchPBm7nuUeVf70viFl.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ouo.press
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 19292
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 15:53:57 GMT
Expires: Fri, 24 Nov 2023 15:53:57 GMT
Cache-Control: public, max-age=31536000
Age: 285342
Last-Modified: Wed, 27 Apr 2022 16:12:54 GMT
Content-Type: font/woff2
exchange.adtrue.com/delivery/impress?pzoneid=12953&ref=http%3A%2F%2Fouo.press%2FrX618eN&cb=4273239694&timeZone=0&adWidth=300&adHeight=250&loc=http://ouo.press/rX618eN
172.67.144.172301 Moved Permanently 0 B URL HTTP/1.1 exchange.adtrue.com/delivery/impress?pzoneid=12953&ref=http%3A%2F%2Fouo.press%2FrX618eN&cb=4273239694&timeZone=0&adWidth=300&adHeight=250&loc=http://ouo.press/rX618eN
IP 172.67.144.172:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /delivery/impress?pzoneid=12953&ref=http%3A%2F%2Fouo.press%2FrX618eN&cb=4273239694&timeZone=0&adWidth=300&adHeight=250&loc=http://ouo.press/rX618eN HTTP/1.1
Host: exchange.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 23:09:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 28 Nov 2022 00:09:39 GMT
Location: https://exchange.adtrue.com/delivery/impress?pzoneid=12953&ref=http%3A%2F%2Fouo.press%2FrX618eN&cb=4273239694&timeZone=0&adWidth=300&adHeight=250&loc=http://ouo.press/rX618eN
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6MHQMRTnABTH0r7778Si8UjGTpCN%2BaJhj%2BOK0bBXPCsBX6BXB0e8ygbq0gg970PgxXteVb20AlL%2Bf7s31iR8fsup9zqsMXCKiv89b8GEjNXGISxjXa%2FCQlYPmRUwVOrrLUESmQyv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e886068de0b55-OSL
alt-svc: h2=":443"; ma=60
cdn.adtrue.com/pb/prebid.js
104.21.81.154301 Moved Permanently 0 B URL HTTP/1.1 cdn.adtrue.com/pb/prebid.js
IP 104.21.81.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pb/prebid.js HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 23:09:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 28 Nov 2022 00:09:39 GMT
Location: https://cdn.adtrue.com/pb/prebid.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bd8JeNpXc5v3onXONcunsYNFsdPrdUqDFjh5ppnBsdQrh5aQuz9WPGvDNeZssXIMxO6VBLMObfDa8KQHWA8Td1rzw1MomLRs2qXHN5A1oIagR5UTxfvtgHjjIggC%2BrQQOw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e8860deabb50b-OSL
alt-svc: h2=":443"; ma=60
track.adtrue.com/track/request?pzoneid=12953&domain=ouo.press&ref=http%3A%2F%2Fouo.press%2FrX618eN&loc=http%3A%2F%2Fouo.press%2FrX618eN
172.67.144.172301 Moved Permanently 0 B URL HTTP/1.1 track.adtrue.com/track/request?pzoneid=12953&domain=ouo.press&ref=http%3A%2F%2Fouo.press%2FrX618eN&loc=http%3A%2F%2Fouo.press%2FrX618eN
IP 172.67.144.172:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/request?pzoneid=12953&domain=ouo.press&ref=http%3A%2F%2Fouo.press%2FrX618eN&loc=http%3A%2F%2Fouo.press%2FrX618eN HTTP/1.1
Host: track.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 23:09:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 28 Nov 2022 00:09:39 GMT
Location: https://track.adtrue.com/track/request?pzoneid=12953&domain=ouo.press&ref=http%3A%2F%2Fouo.press%2FrX618eN&loc=http%3A%2F%2Fouo.press%2FrX618eN
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0tXn6U5ws7pz2eXEYJ9qKCZ4Twwk%2F3fE%2FrtWRy6VCDzdCeqhX5pRmnY%2B91IkTdXszJMkUvzf49KU%2BIkrqlkwrzyPEyaeTW5AsAcjIJxK8gkc2zGEhS0SoHeY86Ug6LGjY6l8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e8860eebbb50b-OSL
alt-svc: h2=":443"; ma=60
friendshipmale.com/sfp.js
104.21.234.93200 OK 28 kB URL HTTP/1.1 friendshipmale.com/sfp.js
IP 104.21.234.93:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash b1fa950e77a7db5425f9a5257af02e9c
2d5580451f34ad96218f8b97edf9708f9ee1be87
d999c4320df27dc4a1d3de5aec22bb3ef201560b47a7eff3f28f4133c1997a14
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:39 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 8a3f96fbda9d272674f8b91a86e79ca0
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Sun, 27 Nov 2022 23:09:39 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FSj3rvtMd7dTVV%2Bur91lrDfk8UKKgnkuPgAGrI%2BrBylXAV3BAYmHR2FRjawqiTq%2BHUNR3ueL7obEk0zA2KCtfYikJMIBgkQ4VzRR5Ucggt5SzEw270%2BYqiEcNmlDxii8LpNL3K0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e88606d7b71ec-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ads.pubmatic.com/AdServer/js/pwt/155495/4202/pwt.js
23.38.200.201200 OK 80 kB URL HTTP/1.1 ads.pubmatic.com/AdServer/js/pwt/155495/4202/pwt.js
IP 23.38.200.201:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6a4ce36b0d03543974d71b88fa37145d
a5c1750aab7489f287c98bae25f5afff0ed16ce8
30fb02ff951a4220268d02c95e2dbd16adfad28b179a89e9643d75ade8809aaf
GET /AdServer/js/pwt/155495/4202/pwt.js HTTP/1.1
Host: ads.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Wed, 27 Oct 2021 05:33:12 GMT
ETag: "1241a12-3fca8-5cf4eee137dd8"
Accept-Ranges: bytes
Content-Encoding: gzip
P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
Content-Type: text/javascript
Content-Length: 80538
Cache-Control: max-age=79419
Expires: Mon, 28 Nov 2022 21:13:18 GMT
Date: Sun, 27 Nov 2022 23:09:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 8781ef7b81ea378c87b9b75e52115397
df3106ed152971215d454459c4e7ad93559aa4ca
e44e3b4621bc2e63c4b7a69aee8cf240a496c5d1cdef6b26f5a6036c0e3007a1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=140122
Date: Sun, 27 Nov 2022 23:09:39 GMT
Etag: "63836697-1d7"
Expires: Tue, 29 Nov 2022 14:05:01 GMT
Last-Modified: Sun, 27 Nov 2022 13:31:03 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TSX5wHRR-N41i8Q24tzwGT8XQNT_VdV8ecNwYdyFNpVf4Qp-zTM0nA==
Age: 2038
hhklc.com/c.js
104.21.70.122200 OK 3.7 kB IP 104.21.70.122:0
File type ASCII text, with very long lines (1696), with no line terminators
Hash ca43a57ec8e256443b91959c424cfb3a
5629074d75b431d937b3a28dbfdec216922931fd
107685a0c0c1ff8748e54335ee78d3a7e1b8ace59f60c15faf12c121eb3abb4e
GET /c.js HTTP/1.1
Host: hhklc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ouo.press/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:38 GMT
content-type: application/javascript
last-modified: Fri, 11 Nov 2022 16:10:23 GMT
etag: W/"636e73ef-2218"
server-asp-net: Asp Net
expires: Sun, 27 Nov 2022 23:38:14 GMT
cache-control: public, max-age=14400
cf-cache-status: HIT
age: 984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mA%2BXJiK1IZUFpBr0X7fJ%2BMdonndGlUpZX4JEySlUsdstgW9KeauxHVfIHh0XD4zdYOBR26hIy5qmJVT8ZTxPnpNUChg4bjw5EcopM%2Bl8sGJpvyNHC0PBy3u%2FDKQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770e885cc8bdb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widgets.outbrain.com/images/widgetIcons/achoice.svg
23.38.201.81200 OK 2.7 kB URL HTTP/2 widgets.outbrain.com/images/widgetIcons/achoice.svg
IP 23.38.201.81:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2290)
Hash 9d26fa4e7238ed94f1d0d92afb453b3e
ae18efe7d09337bf2f580b3f5bc912284aad7821
2c87952cc1c23627496c7874271042bdb6af21efdf7cbf36ec4d98e6cec34d04
GET /images/widgetIcons/achoice.svg HTTP/1.1
Host: widgets.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/svg+xml
etag: "9d26fa4e7238ed94f1d0d92afb453b3e:1662969032.874716"
last-modified: Mon, 12 Sep 2022 07:37:47 GMT
server: AkamaiNetStorage
content-length: 2735
cache-control: max-age=2592000
expires: Tue, 27 Dec 2022 23:09:39 GMT
date: Sun, 27 Nov 2022 23:09:39 GMT
timing-allow-origin: *, *
access-control-allow-credentials: false
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=GTM-NPLC9ST
142.250.74.168200 OK 47 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=GTM-NPLC9ST
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash 84b4558a86b96ce0df1e6cccb6327db7
6ce6a2428be0cd030304a012d43dc8a2625d3ab8
f8793b7cf5cc713be46cab0ebd91456247f06f25d132acdce5c7f6aa6879bea1
GET /gtag/js?id=GTM-NPLC9ST HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://track.adtrue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 23:09:39 GMT
expires: Sun, 27 Nov 2022 23:09:39 GMT
cache-control: private, max-age=900
last-modified: Sun, 27 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 47044
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9cff2c2ad4207e09e07c017987177850
833082ded91a1983a1367c48c8076949e079ce95
82b03e92d004f116875ba023a7e8782d3c124a1c499a6328f29cff70f397a6cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
142.250.74.102200 OK 104 B URL HTTP/2 ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
IP 142.250.74.102:0
File type MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors\012- data
Hash 32ac8a9b81788b981a3a7e13c14082d4
fbfd48a2bfe8d4247a975176f88d18c3c2ad1952
00cc7617e054596ff0aaabd8a93a9214dc5304bfe317316022dbf4fb3ea073d2
GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1
Host: ad.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
content-length: 104
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sun, 27 Nov 2022 11:00:31 GMT
expires: Mon, 28 Nov 2022 11:00:31 GMT
cache-control: public, max-age=86400
age: 43748
last-modified: Tue, 08 May 2012 13:08:06 GMT
content-type: image/x-icon
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash fccdc9d595df75bfa103ba6c111345e1
55f48f6d8e5ed539b8feaa9fbeceb23edf23561b
15b3fb717cf37be0bf3a9da7e5fdf720b1124d2ea13c2afa01e9edc37c5c5b2e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3563
Cache-Control: max-age=132991
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Etag: "638344c7-139"
Expires: Tue, 29 Nov 2022 12:06:10 GMT
Last-Modified: Sun, 27 Nov 2022 11:06:47 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
142.250.74.163200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 21:26:04 GMT
expires: Sun, 26 Nov 2023 21:26:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 92615
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 004a45df479192682009ac4c30050167
80357e614fd6b26ac4555bc68a75ac047678c342
92150b792f3aa0c105e8a969b4d38c212fdd4514a8dece626ef827e03103b594
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4101
Cache-Control: max-age=147207
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Etag: "63837a36-1d7"
Expires: Tue, 29 Nov 2022 16:03:06 GMT
Last-Modified: Sun, 27 Nov 2022 14:54:46 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash efcf392f1072119318357b01bd77f81b
3ea91881e886432891f4a7fce7adbfbc9b44b313
7395c328f9c0ab9a0699818885ece40ff960d727d32f518c613a9e530d98e609
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2339
Cache-Control: max-age=126356
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Etag: "63832fa4-1d7"
Expires: Tue, 29 Nov 2022 10:15:35 GMT
Last-Modified: Sun, 27 Nov 2022 09:36:36 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 9cff2c2ad4207e09e07c017987177850
833082ded91a1983a1367c48c8076949e079ce95
82b03e92d004f116875ba023a7e8782d3c124a1c499a6328f29cff70f397a6cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fptadtrue-d.openx.net/w/1.0/arj?ju=http%3A%2F%2Fouo.press%2FrX618eN&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=f3ddcbc9-6131-4381-9349-f8ad387c958c&nocache=1669590579105&aus=300x250&divids=adtrue_ads_12953_w6qmgc70o230bpqy5a&aucs=adtrue_ads_12953_w6qmgc70o230bpqy5a&auid=558223497&aumfs=100
34.98.64.218200 OK 79 B URL HTTP/2 fptadtrue-d.openx.net/w/1.0/arj?ju=http%3A%2F%2Fouo.press%2FrX618eN&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=f3ddcbc9-6131-4381-9349-f8ad387c958c&nocache=1669590579105&aus=300x250&divids=adtrue_ads_12953_w6qmgc70o230bpqy5a&aucs=adtrue_ads_12953_w6qmgc70o230bpqy5a&auid=558223497&aumfs=100
IP 34.98.64.218:0
File type JSON data\012- , ASCII text
Hash a110a82d3a4350b6112135d5d2d5de9c
249c3c53de289014b3e131839d3996a8eabbd75c
8146644c929a5182c4a8543cbcede9758c21b30285a82d667ec8f09da6eb7f94
GET /w/1.0/arj?ju=http%3A%2F%2Fouo.press%2FrX618eN&ch=UTF-8&res=1280x1024x24&ifr=true&tz=0&tws=1280x939&be=1&bc=hb_pb_3.0.3&dddid=f3ddcbc9-6131-4381-9349-f8ad387c958c&nocache=1669590579105&aus=300x250&divids=adtrue_ads_12953_w6qmgc70o230bpqy5a&aucs=adtrue_ads_12953_w6qmgc70o230bpqy5a&auid=558223497&aumfs=100 HTTP/1.1
Host: fptadtrue-d.openx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept, Accept-Encoding
server: OXGW/0.0.0
pragma: no-cache
p3p: CP="CUR ADM OUR NOR STA NID"
expires: Mon, 26 Jul 1997 05:00:00 GMT
date: Sun, 27 Nov 2022 23:09:39 GMT
content-type: application/json
content-length: 79
content-encoding: gzip
cache-control: private, max-age=0, no-cache
access-control-allow-origin: http://ouo.press
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://track.adtrue.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 27 Nov 2022 22:41:08 GMT
expires: Mon, 28 Nov 2022 00:41:08 GMT
cache-control: public, max-age=7200
age: 1711
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
status.geotrust.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 004a45df479192682009ac4c30050167
80357e614fd6b26ac4555bc68a75ac047678c342
92150b792f3aa0c105e8a969b4d38c212fdd4514a8dece626ef827e03103b594
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 873
Cache-Control: max-age=143980
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:39 GMT
Etag: "63837a36-1d7"
Expires: Tue, 29 Nov 2022 15:09:19 GMT
Last-Modified: Sun, 27 Nov 2022 14:54:46 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0-pre&cb=97375966411&lsavail=0
178.250.0.165204 No Content 0 B URL HTTP/2 bidder.criteo.com/cdb?profileId=207&av=34&wv=7.12.0-pre&cb=97375966411&lsavail=0
IP 178.250.0.165:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdb?profileId=207&av=34&wv=7.12.0-pre&cb=97375966411&lsavail=0 HTTP/1.1
Host: bidder.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 404
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 27 Nov 2022 23:09:39 GMT
vary: Origin
server: Finatra
timing-allow-origin: *
access-control-allow-origin: http://ouo.press
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
hbopenbid.pubmatic.com/translator?source=prebid-client
185.64.190.77204 No Content 0 B URL HTTP/2 hbopenbid.pubmatic.com/translator?source=prebid-client
IP 185.64.190.77:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /translator?source=prebid-client HTTP/1.1
Host: hbopenbid.pubmatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 972
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: http://ouo.press
cache-control: no-cache, no-store, must-revalidate
date: Sun, 27 Nov 2022 23:09:39 GMT
X-Firefox-Spdy: h2
ib.adnxs.com/ut/v3/prebid
185.83.142.19200 OK 145 B URL HTTP/1.1 ib.adnxs.com/ut/v3/prebid
IP 185.83.142.19:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 2920e83e25b4a957bc03884e82de0b8e
c19f28e5a90f61c53ec5968b41a4ac43ffde4386
d17a7a85d6a17d6faefaf38f9454e62bfc1d03207d7835d0403eebf5fa17eb92
POST /ut/v3/prebid HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 534
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 27 Nov 2022 23:09:39 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 145
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://ouo.press
AN-X-Request-Uuid: 4496d9f1-0ed2-4171-a800-d8023dc78e55
Set-Cookie: icu=ChkItZqGARAKGAEgASgBMLPcj5wGOAFAAUgBELPcj5wGGAA.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 23:09:39 GMT; Domain=.adnxs.com; Secure; HttpOnly
uuid2=6267546492958762952; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 25-Feb-2023 23:09:39 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 960.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
cdn.adtrue.com/rtb/passback.js
104.21.81.154301 Moved Permanently 0 B URL HTTP/1.1 cdn.adtrue.com/rtb/passback.js
IP 104.21.81.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/passback.js HTTP/1.1
Host: cdn.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 23:09:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 28 Nov 2022 00:09:40 GMT
Location: https://cdn.adtrue.com/rtb/passback.js
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RFMSnJkHs5adD2a%2FxFD9pdnhxTTkkfYjH33kWLil%2Fqs5vhNu%2FqDsunA1GPxfzm%2FjsopsKfdWw5tJgt5NnKok2cObhry2mrU2rOeBCp7Asm9lcydHAPiCY0b5VCiK5%2B8aMg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e88652b98b50b-OSL
alt-svc: h2=":443"; ma=60
simplewebanalysis.com/stats
18.185.190.54200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 18.185.190.54:0
File type ASCII text, with no line terminators
Hash 1ac8a4d46120dd744b5e807254aa546a
956ad5a00e2a045277a67f7a204948034fd27a52
8b6ad7964123858c6d45565d773e07ba306da50477f7022886c79dd04a7658a8
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Cookie: uid_id2=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:40 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://ouo.press
access-control-allow-credentials: true
X-Firefox-Spdy: h2
exchange.adtrue.com/tag/passback?adtrue_pzoneid=12953&divid=1508690045&ref=undefined
172.67.144.172301 Moved Permanently 0 B URL HTTP/1.1 exchange.adtrue.com/tag/passback?adtrue_pzoneid=12953&divid=1508690045&ref=undefined
IP 172.67.144.172:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag/passback?adtrue_pzoneid=12953&divid=1508690045&ref=undefined HTTP/1.1
Host: exchange.adtrue.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 23:09:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 28 Nov 2022 00:09:40 GMT
Location: https://exchange.adtrue.com/tag/passback?adtrue_pzoneid=12953&divid=1508690045&ref=undefined
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZuQ9YFAi1G7WTFsPy7BMJFJZyZLtA87DjGdyyLGCeVfZ91JS9LfWrhFfE%2FXmdZXRdat1OK5KsQPaUfbmtwQm%2B5DOBQ%2FnDQkomSD%2F8ZUmkJiiu1FPW7rg%2BkS3Irv%2FrRjGdhvyszHA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770e88661d7f0b55-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash fc776f23c673fc08ff8e261e846b629c
4742986a4b0d42b1ef77b483930242a57183a1dc
c3b4efa57b7ca697da7adaadefd9292742f2c589b1cb9763a8bb0d7d82fe8f38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2937
Cache-Control: max-age=110036
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:40 GMT
Etag: "6382ed8f-118"
Expires: Tue, 29 Nov 2022 05:43:36 GMT
Last-Modified: Sun, 27 Nov 2022 04:54:39 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
jsc.adskeeper.com/a/d/adtrue.ouo.press.991771.js
172.64.151.192200 OK 921 B URL HTTP/2 jsc.adskeeper.com/a/d/adtrue.ouo.press.991771.js
IP 172.64.151.192:0
File type ASCII text, with very long lines (2361)
Hash dc406d72b5d7cb505ff0f720a76f333c
e848a1e516384718b9319acc891ff2f7d5d707b6
e92fc567697445a7896a332abf07536107c7b96112d287748ef9234292c80c58
GET /a/d/adtrue.ouo.press.991771.js HTTP/1.1
Host: jsc.adskeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:40 GMT
content-type: text/javascript
content-length: 921
x-amz-id-2: feXPNfpFaacSm8lt6RhzCbec1+gHhzZ+DriZQVNyKgZogPAFPtddKynKrrt3LGH5NtYxJR+TKjM=
x-amz-request-id: BSY1ZH442MF2G462
last-modified: Wed, 23 Nov 2022 08:34:07 GMT
etag: "dc406d72b5d7cb505ff0f720a76f333c"
content-encoding: gzip
x-amz-version-id: Nv3tnKsQJJFloLFD8ccmmePhVOX9ZV_J
cf-cache-status: HIT
age: 2874
expires: Mon, 28 Nov 2022 03:09:40 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 770e88670df4b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash fc776f23c673fc08ff8e261e846b629c
4742986a4b0d42b1ef77b483930242a57183a1dc
c3b4efa57b7ca697da7adaadefd9292742f2c589b1cb9763a8bb0d7d82fe8f38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2937
Cache-Control: max-age=110036
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:40 GMT
Etag: "6382ed8f-118"
Expires: Tue, 29 Nov 2022 05:43:36 GMT
Last-Modified: Sun, 27 Nov 2022 04:54:39 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 87d3b4bbaf74168d1ee04c5634573540
9f730b4cd1ec071713c44c34ca2e81708fe5512c
e739c2ca19ce2c1836d43031e132d133f616f7db8d800c5419711bb72d9ece15
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5314
Cache-Control: max-age=86541
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:40 GMT
Etag: "6382887f-139"
Expires: Mon, 28 Nov 2022 23:12:01 GMT
Last-Modified: Sat, 26 Nov 2022 21:43:27 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
93.184.220.29200 OK 314 B IP 93.184.220.29:0
Hash 9f018ceccb2163a7089025014a17bf7d
d64256bd91f2d7c1a4f75ba360a0b03154ce1884
8fe7a3e1acbf4b648ba43e1dca8bb8b23cbf570e62598e5c0db1508d9b7f10e3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3469
Cache-Control: max-age=156685
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:40 GMT
Etag: "6383a1b4-13a"
Expires: Tue, 29 Nov 2022 18:41:05 GMT
Last-Modified: Sun, 27 Nov 2022 17:43:16 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 314
unseenreport.com/pxf.gif?uuid=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=ed36014633829dc70a42dccaefdf3f11&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=23
192.243.59.13200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=ed36014633829dc70a42dccaefdf3f11&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=23
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=ed36014633829dc70a42dccaefdf3f11&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=23 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 23:09:40 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9010e5d7c9acf096efa61cb141366246
Strict-Transport-Security: max-age=0; includeSubdomains
static.criteo.net/js/ld/publishertag.prebid.123.js
178.250.0.130200 OK 29 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.123.js
IP 178.250.0.130:0
File type ASCII text, with very long lines (65354)
Hash 20ac2c4462879de5e87bb093a87877fb
0f5424e096ba541b4789ed910e7257493be343cd
cd064793ed5ae178ceaee41fc363174391f70a5813e33124c8483ecf68c0268b
GET /js/ld/publishertag.prebid.123.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 23:09:40 GMT
content-type: text/javascript
last-modified: Tue, 03 May 2022 11:21:03 GMT
etag: W/"6271101f-15b58"
expires: Mon, 28 Nov 2022 23:09:40 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash dea991c1d09c99b91ba05fad7b52c62f
1abc5b534af33b0f18342a4783be8bcbf733b797
cb6e2ab43549e6794412d0ea9b1ffe314cf203f5234939c5acdd88b36262e63e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5328
Cache-Control: max-age=130809
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:41 GMT
Etag: "6383355e-138"
Expires: Tue, 29 Nov 2022 11:29:50 GMT
Last-Modified: Sun, 27 Nov 2022 10:01:02 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 312
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash dea991c1d09c99b91ba05fad7b52c62f
1abc5b534af33b0f18342a4783be8bcbf733b797
cb6e2ab43549e6794412d0ea9b1ffe314cf203f5234939c5acdd88b36262e63e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5328
Cache-Control: max-age=130809
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 23:09:41 GMT
Etag: "6383355e-138"
Expires: Tue, 29 Nov 2022 11:29:50 GMT
Last-Modified: Sun, 27 Nov 2022 10:01:02 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 312
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1a66501e7fc18e24bad9790b36e2d929
10ffaa12636fdd2582df141ee0039cdda54c874f
c6ee1c60f9a854653de37238f7e791a9dfee4c8b5b64398c19354417b4d69151
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6EE1C60F9A854653DE37238F7E791A9DFEE4C8B5B64398C19354417B4D69151"
Last-Modified: Sat, 26 Nov 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2331
Expires: Sun, 27 Nov 2022 23:48:32 GMT
Date: Sun, 27 Nov 2022 23:09:41 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7a4ad623b80e46c36daea4e37670538d
497b2300e3207ed1589887556ea66c7357b80cc8
598661f425f8ec09228a7e8aeb651f0374652b78bace87f1ce458633428550a6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "598661F425F8EC09228A7E8AEB651F0374652B78BACE87F1CE458633428550A6"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4666
Expires: Mon, 28 Nov 2022 00:27:27 GMT
Date: Sun, 27 Nov 2022 23:09:41 GMT
Connection: keep-alive
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash ca2206b6f7cbdb64d7f538591385ed32
597c7ea3483bd3a6e65716106fde158e03d55970
43c26ba30720e9537cc189beefe7dc98f9c847fc4007372bbd45a7083127d207
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:41 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 01:42:56 GMT
Expires: Sun, 04 Dec 2022 01:42:55 GMT
Etag: "597c7ea3483bd3a6e65716106fde158e03d55970"
Cache-Control: max-age=526993,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770e886e9a2db4e8-OSL
id5-sync.com/g/v2/806.json
141.95.98.65200 216 B URL HTTP/1.1 id5-sync.com/g/v2/806.json
IP 141.95.98.65:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 9f1d7e1fb09383030d78ec4d12291d04
801f675c3e358180baacedc38e97e15619940302
fd547a76e85f107ffaf4f2d6d7810a3d8db5c02bcbbd64bf32db1a375c33ce15
POST /g/v2/806.json HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 193
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin
access-control-allow-origin: http://ouo.press
access-control-allow-credentials: true
content-type: application/json;charset=UTF-8
transfer-encoding: chunked
date: Sun, 27 Nov 2022 23:09:41 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
3.33.220.150301 Moved Permanently 134 B URL HTTP/1.1 match.adsrvr.org/track/rid?ttd_pid=pubmatic&fmt=json
IP 3.33.220.150:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /track/rid?ttd_pid=pubmatic&fmt=json HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sun, 27 Nov 2022 23:09:41 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://match.adsrvr.org:443/track/rid?ttd_pid=pubmatic&fmt=json
api.rlcdn.com/api/identity/envelope?pid=1258
34.120.133.55401 Unauthorized 19 B URL HTTP/2 api.rlcdn.com/api/identity/envelope?pid=1258
IP 34.120.133.55:0
Hash 63dfbd2b39fe4f536a04e7b32ada47b4
207298c4a215ad5d97d888522927910ae772ba48
26e51290d12b4fea0bb98da3ed118837b744555ba723061771ab3df30000b6b7
GET /api/identity/envelope?pid=1258 HTTP/1.1
Host: api.rlcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
date: Sun, 27 Nov 2022 23:09:41 GMT
content-length: 19
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
whiskerssituationdisturb.com/sbar.json?key=ed36014633829dc70a42dccaefdf3f11&uuid=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319%3A1%3A1
173.233.139.164200 OK 4.3 kB URL HTTP/1.1 whiskerssituationdisturb.com/sbar.json?key=ed36014633829dc70a42dccaefdf3f11&uuid=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319%3A1%3A1
IP 173.233.139.164:0
File type JSON data\012- , ASCII text, with very long lines (6169), with no line terminators
Hash 5058f58c2b7166236db609fceab93a15
e4784bac7426a424ee2a93db8291dd0bfd6fb66e
69660bb131bb525315a88ede2893936bad75072725182d873e8ddded8aed571c
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=ed36014633829dc70a42dccaefdf3f11&uuid=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319%3A1%3A1 HTTP/1.1
Host: whiskerssituationdisturb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 23:09:41 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://ouo.press
Access-Control-Allow-Origin: http://ouo.press
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=15424691; expires=Mon, 28 Nov 2022 23:09:41 GMT; secure; SameSite=None
uid_id2=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319:1:1; expires=Sun, 04 Dec 2022 23:09:41 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 23:09:41 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 23:09:41 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 28 Nov 2022 23:09:41 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 28 Nov 2022 23:09:41 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0385e8dfc7d99f2ac1ebd4d8f051d806
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
static.criteo.net/js/ld/publishertag.prebid.js
178.250.0.130200 OK 31 kB URL HTTP/2 static.criteo.net/js/ld/publishertag.prebid.js
IP 178.250.0.130:0
Hash 293792cf6c96f0418708470b9fa329d7
14a6bca73fbb909517d7dd5fb925f62a6af0b483
72bcffdd6a292d4bf552e045d49347234d45ec370d53f6c203302725147d8477
GET /js/ld/publishertag.prebid.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 23:09:40 GMT
content-type: text/javascript
last-modified: Mon, 24 Oct 2022 11:21:19 GMT
etag: W/"6356752f-16294"
expires: Mon, 28 Nov 2022 23:09:40 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
id.crwdcntrl.net/id
3.248.128.187200 OK 43 B IP 3.248.128.187:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 90eeff5111bbbdce769d4130cc3cca3c
d62886c1a85d51814cb7f124761c5e6aca6d8933
a96e1e97d62ab9747678b947bdf0a0ea5f81790b1e3a1df2d4607a86bf802596
GET /id HTTP/1.1
Host: id.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:41 GMT
content-type: application/json;charset=utf-8
content-length: 43
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.2.112
access-control-allow-credentials: true
access-control-allow-origin: http://ouo.press
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
whiskerssituationdisturb.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3p%2BDCoLixYMyiAcFM%2Bme7smk3cPi7rqyGJOwuxoQL%2FXXk3Jqupqq7ulJ8BAMyF6E8aTHzptkw%2BoiLp4FmXiRgJDxsORgvIkgeBH2LDMZGP2g%2B%2Fteve%2Fw3qv6bK84Iz4Kerr%2BntlWWtPFZt2vvbahUmFKV1u9Wwv8un%2BltqHSpehKrT%2F52d6bgd%2Bs%2B6%2FX3pG8YxYbfuD7gR%2FUbiorE9NfnLJQ2cM4qMd%2BPWrUg2aEvv0%2FdoUHRz2I3hl5HkqML2%2F%2B%2FAiKj5B2v7shXSc32RtvdwtNc2PRE4fvp53UlCm68zGxHpL0cLYN48aEfHUBJj2cOYDp7U8cgKkx8R4HYOnhTCZY7%2BBcKdOQKZh4BmVvBKlHUHQEbnahxAkBuMDqGtLu%2FVVjS7p1ztIJOyaXnvwDVY7Jpd9eQNr99ppW%2Fdodo4tcmdShn1RQ%2FRFUe4SsOEK%2B7UGVR%2BD5p1DiF7L4ZAVpd3%2FNaQMlTl9tJpzFvgwX4tBfWogkDRZYxFoLPKKNRkuKZhjE04iUGkElI2g5AHUeismnPBSJhyLz0BWnNdqME99vJSwJw%2BWIcx6GnDeXl0RThNFy4qPgEw8D5NkAXA%2FA7Q4yu4OOGsAWP8JtVnDCg8sJeqJCKQlKR1BSglIRlDlB2asOhHYNV90X2hUsmPXGrIfV0OTtPXpg8rZMyV52Rp6bBvfXR9%2BjI09rUoRLfhAtheFyIxa85dOoITinMhFJmAQBnKqg3IWpzW118uxjZOrkqQqMHsHpI3D1CmjxEmg5bDV80M1htOxjO31gClPPrHQOwlTI8svIt7w9fUZenAqI%2F7gIyY%2Bvfvn52u9XxIfgtkJmK3ysfiJo63vD26Yk%2B7dN6cijtSxXXbVNJ7d6J6e5vPj1u3KrNFbcuuEGD97iE2IyPrwrXb5CU6HStiPfXFNCSHvTWC7JD7fchmTrhdu8Vti0yFbWr9%2B81Z0KVCYdgaqTDz4BV2PytO1M3%2BvLf16HsiPYokK3OCazgjIj8GwHLpurd4bA6vkOyzyURTW0DTY%2F1IpAyzmmrIL7D2bzec%2FdQ9t6oPku0m6Fnq3Q0xWoHsAVF4d5Zo%2Bv%2FhpOC0x7Q6att8%2B01V%2BcR%2BvUaU02Ez%2BRfkOyJGZJi%2FoiTqKY0TiQLdakAXI35rt%2FN%2F8FAAD%2F%2FwEAAP%2F%2FwMT9ZIcEAAA%3D
173.233.139.164200 OK 7 B URL HTTP/1.1 whiskerssituationdisturb.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3p%2BDCoLixYMyiAcFM%2Bme7smk3cPi7rqyGJOwuxoQL%2FXXk3Jqupqq7ulJ8BAMyF6E8aTHzptkw%2BoiLp4FmXiRgJDxsORgvIkgeBH2LDMZGP2g%2B%2Fteve%2Fw3qv6bK84Iz4Kerr%2BntlWWtPFZt2vvbahUmFKV1u9Wwv8un%2BltqHSpehKrT%2F52d6bgd%2Bs%2B6%2FX3pG8YxYbfuD7gR%2FUbiorE9NfnLJQ2cM4qMd%2BPWrUg2aEvv0%2FdoUHRz2I3hl5HkqML2%2F%2B%2FAiKj5B2v7shXSc32RtvdwtNc2PRE4fvp53UlCm68zGxHpL0cLYN48aEfHUBJj2cOYDp7U8cgKkx8R4HYOnhTCZY7%2BBcKdOQKZh4BmVvBKlHUHQEbnahxAkBuMDqGtLu%2FVVjS7p1ztIJOyaXnvwDVY7Jpd9eQNr99ppW%2Fdodo4tcmdShn1RQ%2FRFUe4SsOEK%2B7UGVR%2BD5p1DiF7L4ZAVpd3%2FNaQMlTl9tJpzFvgwX4tBfWogkDRZYxFoLPKKNRkuKZhjE04iUGkElI2g5AHUeismnPBSJhyLz0BWnNdqME99vJSwJw%2BWIcx6GnDeXl0RThNFy4qPgEw8D5NkAXA%2FA7Q4yu4OOGsAWP8JtVnDCg8sJeqJCKQlKR1BSglIRlDlB2asOhHYNV90X2hUsmPXGrIfV0OTtPXpg8rZMyV52Rp6bBvfXR9%2BjI09rUoRLfhAtheFyIxa85dOoITinMhFJmAQBnKqg3IWpzW118uxjZOrkqQqMHsHpI3D1CmjxEmg5bDV80M1htOxjO31gClPPrHQOwlTI8svIt7w9fUZenAqI%2F7gIyY%2Bvfvn52u9XxIfgtkJmK3ysfiJo63vD26Yk%2B7dN6cijtSxXXbVNJ7d6J6e5vPj1u3KrNFbcuuEGD97iE2IyPrwrXb5CU6HStiPfXFNCSHvTWC7JD7fchmTrhdu8Vti0yFbWr9%2B81Z0KVCYdgaqTDz4BV2PytO1M3%2BvLf16HsiPYokK3OCazgjIj8GwHLpurd4bA6vkOyzyURTW0DTY%2F1IpAyzmmrIL7D2bzec%2FdQ9t6oPku0m6Fnq3Q0xWoHsAVF4d5Zo%2Bv%2FhpOC0x7Q6att8%2B01V%2BcR%2BvUaU02Ez%2BRfkOyJGZJi%2FoiTqKY0TiQLdakAXI35rt%2FN%2F8FAAD%2F%2FwEAAP%2F%2FwMT9ZIcEAAA%3D
IP 173.233.139.164:0
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3p%2BDCoLixYMyiAcFM%2Bme7smk3cPi7rqyGJOwuxoQL%2FXXk3Jqupqq7ulJ8BAMyF6E8aTHzptkw%2BoiLp4FmXiRgJDxsORgvIkgeBH2LDMZGP2g%2B%2Fteve%2Fw3qv6bK84Iz4Kerr%2BntlWWtPFZt2vvbahUmFKV1u9Wwv8un%2BltqHSpehKrT%2F52d6bgd%2Bs%2B6%2FX3pG8YxYbfuD7gR%2FUbiorE9NfnLJQ2cM4qMd%2BPWrUg2aEvv0%2FdoUHRz2I3hl5HkqML2%2F%2B%2FAiKj5B2v7shXSc32RtvdwtNc2PRE4fvp53UlCm68zGxHpL0cLYN48aEfHUBJj2cOYDp7U8cgKkx8R4HYOnhTCZY7%2BBcKdOQKZh4BmVvBKlHUHQEbnahxAkBuMDqGtLu%2FVVjS7p1ztIJOyaXnvwDVY7Jpd9eQNr99ppW%2Fdodo4tcmdShn1RQ%2FRFUe4SsOEK%2B7UGVR%2BD5p1DiF7L4ZAVpd3%2FNaQMlTl9tJpzFvgwX4tBfWogkDRZYxFoLPKKNRkuKZhjE04iUGkElI2g5AHUeismnPBSJhyLz0BWnNdqME99vJSwJw%2BWIcx6GnDeXl0RThNFy4qPgEw8D5NkAXA%2FA7Q4yu4OOGsAWP8JtVnDCg8sJeqJCKQlKR1BSglIRlDlB2asOhHYNV90X2hUsmPXGrIfV0OTtPXpg8rZMyV52Rp6bBvfXR9%2BjI09rUoRLfhAtheFyIxa85dOoITinMhFJmAQBnKqg3IWpzW118uxjZOrkqQqMHsHpI3D1CmjxEmg5bDV80M1htOxjO31gClPPrHQOwlTI8svIt7w9fUZenAqI%2F7gIyY%2Bvfvn52u9XxIfgtkJmK3ysfiJo63vD26Yk%2B7dN6cijtSxXXbVNJ7d6J6e5vPj1u3KrNFbcuuEGD97iE2IyPrwrXb5CU6HStiPfXFNCSHvTWC7JD7fchmTrhdu8Vti0yFbWr9%2B81Z0KVCYdgaqTDz4BV2PytO1M3%2BvLf16HsiPYokK3OCazgjIj8GwHLpurd4bA6vkOyzyURTW0DTY%2F1IpAyzmmrIL7D2bzec%2FdQ9t6oPku0m6Fnq3Q0xWoHsAVF4d5Zo%2Bv%2FhpOC0x7Q6att8%2B01V%2BcR%2BvUaU02Ez%2BRfkOyJGZJi%2FoiTqKY0TiQLdakAXI35rt%2FN%2F8FAAD%2F%2FwEAAP%2F%2FwMT9ZIcEAAA%3D HTTP/1.1
Host: whiskerssituationdisturb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Cookie: u_pl=15424691; uid_id2=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 23:09:41 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b63db974ab0ac2cfac20bc25d015b270
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash ca2206b6f7cbdb64d7f538591385ed32
597c7ea3483bd3a6e65716106fde158e03d55970
43c26ba30720e9537cc189beefe7dc98f9c847fc4007372bbd45a7083127d207
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 23:09:41 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 01:42:56 GMT
Expires: Sun, 04 Dec 2022 01:42:55 GMT
Etag: "597c7ea3483bd3a6e65716106fde158e03d55970"
Cache-Control: max-age=526993,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 770e886f6ae8b4e8-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f3a3efe248a599bcccf04881f3d686cb
10e5741399303e7c20f334d8dd72b4b8c968c0d4
cef064183db51cefadcca610b91c5ea86154ae2024029d60e59a152a7a3b1723
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEF064183DB51CEFADCCA610B91C5EA86154AE2024029D60E59A152A7A3B1723"
Last-Modified: Sat, 26 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6423
Expires: Mon, 28 Nov 2022 00:56:45 GMT
Date: Sun, 27 Nov 2022 23:09:42 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3a1eb8e3d7b5e963c21e1905e849e570
fff8193edc6218562c5612b0e02f73dbcca98c0c
12db50941a08926a1f14146c52b53cfc6acc1dcb6ac858f6fcfb421330dfb12f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12DB50941A08926A1F14146C52B53CFC6ACC1DCB6AC858F6FCFB421330DFB12F"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14538
Expires: Mon, 28 Nov 2022 03:12:00 GMT
Date: Sun, 27 Nov 2022 23:09:42 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3a1eb8e3d7b5e963c21e1905e849e570
fff8193edc6218562c5612b0e02f73dbcca98c0c
12db50941a08926a1f14146c52b53cfc6acc1dcb6ac858f6fcfb421330dfb12f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12DB50941A08926A1F14146C52B53CFC6ACC1DCB6AC858F6FCFB421330DFB12F"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14538
Expires: Mon, 28 Nov 2022 03:12:00 GMT
Date: Sun, 27 Nov 2022 23:09:42 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3a1eb8e3d7b5e963c21e1905e849e570
fff8193edc6218562c5612b0e02f73dbcca98c0c
12db50941a08926a1f14146c52b53cfc6acc1dcb6ac858f6fcfb421330dfb12f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12DB50941A08926A1F14146C52B53CFC6ACC1DCB6AC858F6FCFB421330DFB12F"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14538
Expires: Mon, 28 Nov 2022 03:12:00 GMT
Date: Sun, 27 Nov 2022 23:09:42 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.74.10200 OK 660 B URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP 142.250.74.10:0
Hash 55130bf120bd75a4bba7d678be617cdf
77b172c0cc1d15e60ab95edccf3ac1e640d16812
262b9e8c2eeba18bdc3dd53ac7bbacdbbec713a9443ff5dc34e359de56ea040d
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sun, 27 Nov 2022 23:09:42 GMT
Date: Sun, 27 Nov 2022 23:09:42 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
whiskerssituationdisturb.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fd3%2F55%2Ffb%2Fd355fb06fa4f4907609b7d285fa07f7a%2F1664530003.html&l=1175&fd=400
173.233.139.164200 OK 0 B URL HTTP/1.1 whiskerssituationdisturb.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fd3%2F55%2Ffb%2Fd355fb06fa4f4907609b7d285fa07f7a%2F1664530003.html&l=1175&fd=400
IP 173.233.139.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fd3%2F55%2Ffb%2Fd355fb06fa4f4907609b7d285fa07f7a%2F1664530003.html&l=1175&fd=400 HTTP/1.1
Host: whiskerssituationdisturb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ouo.press/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 23:09:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d02308d366e622aa26e632ea017600cc
c16673d53c20ac70efbda483ca12b4374a76105c
ad8ccb9b049120b7e44a79dcbc9caab326567933cfce70608bc812237319a0ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD8CCB9B049120B7E44A79DCBC9CAAB326567933CFCE70608BC812237319A0EC"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4719
Expires: Mon, 28 Nov 2022 00:28:21 GMT
Date: Sun, 27 Nov 2022 23:09:42 GMT
Connection: keep-alive
dnacdn.net/dna
178.250.0.157200 OK 474 B IP 178.250.0.157:0
Hash ef7e1542b58f88a7a2fcf9d725343f5e
9b6c7d52f4fba8f6b8d219cff2f4bd4d58b26be8
dfb5bfb1479b1c571e4bd5ec1c256ba834bf92d3fb77c2690916313223771a2d
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=knnwOl80M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyQkdQMnNOSWlNdEVHaDlQYTZWVUp5MTZLVFRVRG4wOGtxMllsNGhacUl2dg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:40 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=XvTR6V80M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyQkdQMnNOSWlNdEVHaDlQYTZWVUp5M2RPV01nbThrTnlXdkpvOFJqJTJCWmJZ; expires=Fri, 22 Dec 2023 23:09:40 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 302319
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/62/99/91/6299919f2727e6f79b6f7ad60ebd36aa/1667590484.png
45.133.44.10200 OK 33 kB URL HTTP/2 cdn.cloudimagesb.com/si/62/99/91/6299919f2727e6f79b6f7ad60ebd36aa/1667590484.png
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb2500acb00f247ef19403c3a0f89e1
7c57e8b84b2bb0003810ffae7a14e24869155464
7efcd5082673b787603d2a0b8d768fb26807cf2ab79771a69886a916d0cda3ce
GET /si/62/99/91/6299919f2727e6f79b6f7ad60ebd36aa/1667590484.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:42 GMT
content-type: image/png
content-length: 32763
server: nginx/1.17.6
last-modified: Fri, 04 Nov 2022 19:34:52 GMT
etag: "6365695c-7ffb"
expires: Tue, 29 Nov 2022 23:09:42 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=publishertag&domain=ouo.press&sn=FirefoxSyncframe&so=3&topUrl=ouo.press&bundle=IGTsYV9KbTl2Y3FEN2ZhOVF0cVVoNzBkYk5wUSUyRkY3SyUyRnhJNzNpR3Z1QWM5VklEMFdoVldmaEVDbkl1S0ZSNWxqd3lzZnZKTWZzOGUwNmRyNSUyQlZ5dHIwd29ibG5UaHBVa0hnTTRlZlRqSWRGdWxKbFN3UGdUdU5YMHgzJTJCRmFCOWcyaXo4&info=XvTR6V80M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyQkdQMnNOSWlNdEVHaDlQYTZWVUp5M2RPV01nbThrTnlXdkpvOFJqJTJCWmJZ&idsd=-791792496,-2083565991&cw=1&lsw=1
178.250.0.157200 OK 2.2 kB URL HTTP/2 gum.criteo.com/sid/json?origin=publishertag&domain=ouo.press&sn=FirefoxSyncframe&so=3&topUrl=ouo.press&bundle=IGTsYV9KbTl2Y3FEN2ZhOVF0cVVoNzBkYk5wUSUyRkY3SyUyRnhJNzNpR3Z1QWM5VklEMFdoVldmaEVDbkl1S0ZSNWxqd3lzZnZKTWZzOGUwNmRyNSUyQlZ5dHIwd29ibG5UaHBVa0hnTTRlZlRqSWRGdWxKbFN3UGdUdU5YMHgzJTJCRmFCOWcyaXo4&info=XvTR6V80M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyQkdQMnNOSWlNdEVHaDlQYTZWVUp5M2RPV01nbThrTnlXdkpvOFJqJTJCWmJZ&idsd=-791792496,-2083565991&cw=1&lsw=1
IP 178.250.0.157:0
Hash cc7fc54ed189c3586b672403c787d7ce
c61768c782b83ae020b9064d68598526c503a8d8
5a01f1a21fe56ebecf6ad2dcac64515d41845afe74415a4f429e1a1da9eabfac
GET /sid/json?origin=publishertag&domain=ouo.press&sn=FirefoxSyncframe&so=3&topUrl=ouo.press&bundle=IGTsYV9KbTl2Y3FEN2ZhOVF0cVVoNzBkYk5wUSUyRkY3SyUyRnhJNzNpR3Z1QWM5VklEMFdoVldmaEVDbkl1S0ZSNWxqd3lzZnZKTWZzOGUwNmRyNSUyQlZ5dHIwd29ibG5UaHBVa0hnTTRlZlRqSWRGdWxKbFN3UGdUdU5YMHgzJTJCRmFCOWcyaXo4&info=XvTR6V80M0RITmhlJTJCZkMwOUJGQlhaMUN2cyUyQkdQMnNOSWlNdEVHaDlQYTZWVUp5M2RPV01nbThrTnlXdkpvOFJqJTJCWmJZ&idsd=-791792496,-2083565991&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=ouo.press
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:40 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1167395
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/css/animate.css
172.64.109.13200 OK 4.8 kB URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/css/animate.css
IP 172.64.109.13:0
Hash 21eb7a65c17a2c22ba104a7ecbf1dc0f
ea8c53be54889c7489aed04e30e3eb83af64dec9
090bd9ceb9a58da038e5ed4a39dfbb63ece49ed4f4f0656ce35f7faa41a3b237
GET /sb/ssp/utility/social-media/instagram/new/4/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:42 GMT
content-type: text/css
last-modified: Mon, 26 Sep 2022 10:05:22 GMT
etag: W/"63317962-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WsqSHBNViY%2BRsCf0v26UopWrBxRmOHec7HGbMZPemmWrreq5xpSJyVA6Qu3YaOcYsPZ%2Fn9VmGhiXk9FT2H0CmwDQ01k9a34MUPs%2Fzu86udRVVtbmpTwCIH3UcDPXp3%2FxVKZSe9JL%2BRwe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770e8872db6071ba-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/js/script.js
172.64.109.13200 OK 210 B URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/js/script.js
IP 172.64.109.13:0
Hash 14c6a15c2c7729c885b33c990f37d2a5
865d9621a3a4c2b446ec535471412bf491a1e60e
bd7b0405bc197d2564e68c4366fdbfc06c0711a10231877d33c8c6cdd05fe7f0
GET /sb/ssp/utility/social-media/instagram/new/4/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:42 GMT
content-type: application/javascript
last-modified: Mon, 26 Sep 2022 10:05:24 GMT
etag: W/"63317964-1bc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VDPbAcQpNHcQ9Cei0f4VPFwNoeeXDgwdPWDeZmQXqJX6Atr2BbLAl6pbyRRdutPNUuBNTxxge01Kx%2FFFPVAvZMWtcF%2FUI5%2FBMPPWpscBdJ2VRShwrqdV53qYsqnYvD17T6RiH8vyy%2FF2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770e8872fb8071ba-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
whiskerssituationdisturb.com/err.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3p%2BDCoLixYMyiAcFM%2Bm%2F%2BTOHxewaCcYk7K4GxEt1VfWknJqupqp7ehI8BAOyF2E86bHzJtmwuoiLZ0EmXiQgZDwsORhvIghehD3LTAZGP%2Bj%2BvlfvO7z3qj47yC%2BIi5yeb76nd6VSdLFWdSuvbcmE68JW1u9WPLfqLlW2ZFIPlyr9yc%2F03vTcWtV9vfKOYB296Lue63quV1mRRsS6vzhlIdOHLa%2FacquhX%2FVqIfrm%2F9jmDix1wHsX5HlIPr6%2B%2FfMjSDZC0v3ulrCdTKdvvN3NFc20QY8fv590El0k6M7H2DiIk%2BPZNrQdE%2FLVFejkeOYAunc4cYBIjonz2EOUHM9kIuodXSqNFESCiD%2BDojeCUCNIOgLT%2B5D8jACMY30DSff%2BujYF3blk6YQdk2tP%2FoEsxuTaby8g6X67rGS%2FckerPJM6sejHJWR%2FBNkeIc1PkO06kMUJWPYpJP%2BFLD5ZQ9I93LBKQ%2FLzV2sxi1quCBZagVtfCAX1FqIwaiywkPp%2BQ%2FBa4LWmEUk5goxHUGIAah3kk086yGMHeeqgy88rtNaKXbcRR3EQNEPGWBAwVmvWeY0HYTN2kbOJhwGydACmBmBmD6nZQ0cOYPIfYbdLWO7AZgQ9XqIQBIUlKChBIQmKjKDolUdcWd%2BW97myeeTNuj%2FrQTnUWfuAHumsLRJykF6Q56bB%2FfXR9%2BiI84rgQd31wnoQNP0WZw2Xhj5njIqYx0HsebCyhLRXpjZ35dmzj5HKs6dKRPQEVp2AyVdA85dAi2HDd0G3h2HTxW7yQOe6mhphLbgukWbXke04B%2BqCvDgV0PrjKgQ7vfHl5xu%2FL%2FEPwUyJ1JT4WP5E0Fb3hrd1QQ5v68KSRxtpJrtyl05u9U5GM3H163fFTqENX71lBw%2FeYhNiMj68K2y2RhMuk7Yl3yxLzoVZ0YYJ8sOq3RLRZm63l3OT5Ona5s2V1e5UoNTJCFSeffAJmByTp01n%2Bl5f%2FvMmpBnB5CW6%2BSmZFaQegaV7sOlcvdUERs13otRBkZdD40fzQyUJlJhjGpWw%2F8HRfD6w99A2Dmi2j6RbomdK9FQJqgaw%2BdVhlprTG78G00KknGGkjHMYKaO%2BuIzWyvMKdxsNl%2FmsFjcD3gybolXnccP3mw0a1YTrIbNjtv937V8AAAD%2F%2FwEAAP%2F%2F4RmZeYcEAAA%3D&errd=no%20impr%20and%20no%20err
173.233.139.164200 OK 0 B URL HTTP/1.1 whiskerssituationdisturb.com/err.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3p%2BDCoLixYMyiAcFM%2Bm%2F%2BTOHxewaCcYk7K4GxEt1VfWknJqupqp7ehI8BAOyF2E86bHzJtmwuoiLZ0EmXiQgZDwsORhvIghehD3LTAZGP%2Bj%2BvlfvO7z3qj47yC%2BIi5yeb76nd6VSdLFWdSuvbcmE68JW1u9WPLfqLlW2ZFIPlyr9yc%2F03vTcWtV9vfKOYB296Lue63quV1mRRsS6vzhlIdOHLa%2FacquhX%2FVqIfrm%2F9jmDix1wHsX5HlIPr6%2B%2FfMjSDZC0v3ulrCdTKdvvN3NFc20QY8fv590El0k6M7H2DiIk%2BPZNrQdE%2FLVFejkeOYAunc4cYBIjonz2EOUHM9kIuodXSqNFESCiD%2BDojeCUCNIOgLT%2B5D8jACMY30DSff%2BujYF3blk6YQdk2tP%2FoEsxuTaby8g6X67rGS%2FckerPJM6sejHJWR%2FBNkeIc1PkO06kMUJWPYpJP%2BFLD5ZQ9I93LBKQ%2FLzV2sxi1quCBZagVtfCAX1FqIwaiywkPp%2BQ%2FBa4LWmEUk5goxHUGIAah3kk086yGMHeeqgy88rtNaKXbcRR3EQNEPGWBAwVmvWeY0HYTN2kbOJhwGydACmBmBmD6nZQ0cOYPIfYbdLWO7AZgQ9XqIQBIUlKChBIQmKjKDolUdcWd%2BW97myeeTNuj%2FrQTnUWfuAHumsLRJykF6Q56bB%2FfXR9%2BiI84rgQd31wnoQNP0WZw2Xhj5njIqYx0HsebCyhLRXpjZ35dmzj5HKs6dKRPQEVp2AyVdA85dAi2HDd0G3h2HTxW7yQOe6mhphLbgukWbXke04B%2BqCvDgV0PrjKgQ7vfHl5xu%2FL%2FEPwUyJ1JT4WP5E0Fb3hrd1QQ5v68KSRxtpJrtyl05u9U5GM3H163fFTqENX71lBw%2FeYhNiMj68K2y2RhMuk7Yl3yxLzoVZ0YYJ8sOq3RLRZm63l3OT5Ona5s2V1e5UoNTJCFSeffAJmByTp01n%2Bl5f%2FvMmpBnB5CW6%2BSmZFaQegaV7sOlcvdUERs13otRBkZdD40fzQyUJlJhjGpWw%2F8HRfD6w99A2Dmi2j6RbomdK9FQJqgaw%2BdVhlprTG78G00KknGGkjHMYKaO%2BuIzWyvMKdxsNl%2FmsFjcD3gybolXnccP3mw0a1YTrIbNjtv937V8AAAD%2F%2FwEAAP%2F%2F4RmZeYcEAAA%3D&errd=no%20impr%20and%20no%20err
IP 173.233.139.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /err.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRit3p%2BDCoLixYMyiAcFM%2Bm%2F%2BTOHxewaCcYk7K4GxEt1VfWknJqupqp7ehI8BAOyF2E86bHzJtmwuoiLZ0EmXiQgZDwsORhvIghehD3LTAZGP%2Bj%2BvlfvO7z3qj47yC%2BIi5yeb76nd6VSdLFWdSuvbcmE68JW1u9WPLfqLlW2ZFIPlyr9yc%2F03vTcWtV9vfKOYB296Lue63quV1mRRsS6vzhlIdOHLa%2FacquhX%2FVqIfrm%2F9jmDix1wHsX5HlIPr6%2B%2FfMjSDZC0v3ulrCdTKdvvN3NFc20QY8fv590El0k6M7H2DiIk%2BPZNrQdE%2FLVFejkeOYAunc4cYBIjonz2EOUHM9kIuodXSqNFESCiD%2BDojeCUCNIOgLT%2B5D8jACMY30DSff%2BujYF3blk6YQdk2tP%2FoEsxuTaby8g6X67rGS%2FckerPJM6sejHJWR%2FBNkeIc1PkO06kMUJWPYpJP%2BFLD5ZQ9I93LBKQ%2FLzV2sxi1quCBZagVtfCAX1FqIwaiywkPp%2BQ%2FBa4LWmEUk5goxHUGIAah3kk086yGMHeeqgy88rtNaKXbcRR3EQNEPGWBAwVmvWeY0HYTN2kbOJhwGydACmBmBmD6nZQ0cOYPIfYbdLWO7AZgQ9XqIQBIUlKChBIQmKjKDolUdcWd%2BW97myeeTNuj%2FrQTnUWfuAHumsLRJykF6Q56bB%2FfXR9%2BiI84rgQd31wnoQNP0WZw2Xhj5njIqYx0HsebCyhLRXpjZ35dmzj5HKs6dKRPQEVp2AyVdA85dAi2HDd0G3h2HTxW7yQOe6mhphLbgukWbXke04B%2BqCvDgV0PrjKgQ7vfHl5xu%2FL%2FEPwUyJ1JT4WP5E0Fb3hrd1QQ5v68KSRxtpJrtyl05u9U5GM3H163fFTqENX71lBw%2FeYhNiMj68K2y2RhMuk7Yl3yxLzoVZ0YYJ8sOq3RLRZm63l3OT5Ona5s2V1e5UoNTJCFSeffAJmByTp01n%2Bl5f%2FvMmpBnB5CW6%2BSmZFaQegaV7sOlcvdUERs13otRBkZdD40fzQyUJlJhjGpWw%2F8HRfD6w99A2Dmi2j6RbomdK9FQJqgaw%2BdVhlprTG78G00KknGGkjHMYKaO%2BuIzWyvMKdxsNl%2FmsFjcD3gybolXnccP3mw0a1YTrIbNjtv937V8AAAD%2F%2FwEAAP%2F%2F4RmZeYcEAAA%3D&errd=no%20impr%20and%20no%20err HTTP/1.1
Host: whiskerssituationdisturb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Cookie: u_pl=15424691; uid_id2=5fcb90e3-9306-4ea1-b4b7-c4a227ed5319:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 23:09:42 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cbc413474c87b890639f5455398527b6
Strict-Transport-Security: max-age=0; includeSubdomains
challenges.cloudflare.com/turnstile/v0/75e640aa/api.js?onload=_cf_chl_turnstile_l&render=explicit
104.18.7.185200 OK 0 B URL HTTP/2 challenges.cloudflare.com/turnstile/v0/75e640aa/api.js?onload=_cf_chl_turnstile_l&render=explicit
IP 104.18.7.185:0
GET /turnstile/v0/75e640aa/api.js?onload=_cf_chl_turnstile_l&render=explicit HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:35 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 770e8848cb32b4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1
178.250.0.157200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1
IP 178.250.0.157:0
OPTIONS /sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: http://ouo.press/
Origin: http://ouo.press
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:38 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET
access-control-allow-origin: http://ouo.press
server-processing-duration-in-ticks: 434092
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1
178.250.0.157200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1
IP 178.250.0.157:0
GET /sid/json?origin=prebid&topUrl=http%3A%2F%2Fouo.press%2F&domain=ouo.press&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:39 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: http://ouo.press
server-processing-duration-in-ticks: 919027
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
185.235.84.248200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP 185.235.84.248:0
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:40 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 138843
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cloudflare.hcaptcha.com/1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload
104.18.18.132200 OK 0 B URL HTTP/2 cloudflare.hcaptcha.com/1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload
IP 104.18.18.132:0
GET /1/api.js?endpoint=https%3A%2F%2Fcloudflare.hcaptcha.com&assethost=https%3A%2F%2Fcf-assets.hcaptcha.com&imghost=https%3A%2F%2Fcf-imgs.hcaptcha.com&render=explicit&recaptchacompat=off&onload=_cf_chl_hload HTTP/1.1
Host: cloudflare.hcaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:34 GMT
content-type: application/javascript
cf-ray: 770e88418d8a0b41-OSL
access-control-allow-origin: *
age: 0
cache-control: max-age=120
etag: W/"4a87133d7cfb9f9797187d43ffdd5417"
last-modified: Fri, 25 Nov 2022 11:46:32 GMT
strict-transport-security: max-age=0
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
cf-cache-status: HIT
x-amz-cf-id: e-vtjjiTuJNWqympaO3s7V_aWlOK4yXOIyZWB7ZnvSo2w49xVfwmGQ==
x-amz-cf-pop: OSL50-P1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?origin=publishertag&topUrl=ouo.press
178.250.0.157200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?origin=publishertag&topUrl=ouo.press
IP 178.250.0.157:0
GET /syncframe?origin=publishertag&topUrl=ouo.press HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ouo.press/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:40 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=e7dee1de-cdb4-4fd4-8c98-6a39c651ae2d; expires=Fri, 22 Dec 2023 23:09:40 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 533597
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/d3/55/fb/d355fb06fa4f4907609b7d285fa07f7a/1664530003.html
45.133.44.3200 OK 0 B URL HTTP/2 cdn.barscreative1.com/sb/au/d3/55/fb/d355fb06fa4f4907609b7d285fa07f7a/1664530003.html
IP 45.133.44.3:0
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert fortinet Phishing
GET /sb/au/d3/55/fb/d355fb06fa4f4907609b7d285fa07f7a/1664530003.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ouo.press
Connection: keep-alive
Referer: http://ouo.press/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:42 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Fri, 30 Sep 2022 09:26:48 GMT
etag: W/"6336b658-497"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Mon, 28 Nov 2022 00:09:42 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/img/close.svg
172.64.109.13200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/instagram/new/4/img/close.svg
IP 172.64.109.13:0
GET /sb/ssp/utility/social-media/instagram/new/4/img/close.svg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 23:09:42 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Sep 2022 21:49:43 GMT
etag: W/"6334c177-52a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1070329
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gTVJiIvaiJpCOMxNlliIOycc7h%2B2YBp50BEjQlq20ZreZlDTjYcqSebNSvUyTmG3GXD0NMb%2FPdAHfbjxq0NpSMyO9moOdR0lwZnMPeznsH5eibouB2Cxe43Pq03j6m0nIu2PbOAp4Uxh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 770e8872fb8271ba-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2