appnee.com/tag/microsoft-net/
301 Moved Permanently 245 B URL HTTP/1.1 appnee.com/tag/microsoft-net/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1ef2dc42e2d35c7e49b07e1aec700712
490303d1844c56bdbb151611d2a65aad46f1b63d
dd5c451a16ea028c5ecbc750d7507b268c599ef5e81cc44557a00bb6d8b28746
GET /tag/microsoft-net/ HTTP/1.1
Host: appnee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 04 Apr 2023 08:48:14 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://appnee.com/tag/microsoft-net/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fETTwGboFb3ZKBKoyRw9SrIW%2FxxKxLEtpRh1RxqC47%2F47Gqyg9NO6qn4V0jHA26q67R50oylaVAG%2BfH25RCiuM4ABA4PJNaMw8W%2B1aMo3K4K1MfFtLfKFg75EjtI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b284a8948711c12-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1965860f5630f7dda817a236cb72ea24
beec8147d48911a007287014564ce544d296a5fd
00b4aafe530f6ceb3d6d4de42fffdaee0cb4e0a60834c85b1d21e42e5db2ef91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "00B4AAFE530F6CEB3D6D4DE42FFFDAEE0CB4E0A60834C85B1D21E42E5DB2EF91"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10358
Expires: Tue, 04 Apr 2023 11:40:52 GMT
Date: Tue, 04 Apr 2023 08:48:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c17f530e6db706fa5f9eb36a6cca4a4
446b60a425aae47b0adf5abd7e18e9f90f52c0bc
ccf1a90e945a18fb951654d29f128acdb3916d4dca315b0fad44ae8cc95be48e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CCF1A90E945A18FB951654D29F128ACDB3916D4DCA315B0FAD44AE8CC95BE48E"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14023
Expires: Tue, 04 Apr 2023 12:41:57 GMT
Date: Tue, 04 Apr 2023 08:48:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 29fdbcd53b5646cfcdd46510063734c4
85e3ceda5ef130219f4fe8a31e52e2690c8f7d8e
24c27586332c016685e6231fec5836e921048d8aaefbcd4cd6f88969f9d91e18
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 04 Apr 2023 08:28:44 GMT
content-type: application/json
age: 1170
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfa7240b39fdd332060e920c46349e55
4048b95ed6f1434eebbfd50296d21e3660c96448
53b261a56af518a9a5f27a6e08209e1c137d4c24947229567ee11f6b79cee7a4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "53B261A56AF518A9A5F27A6E08209E1C137D4C24947229567EE11F6B79CEE7A4"
Last-Modified: Sun, 02 Apr 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13908
Expires: Tue, 04 Apr 2023 12:40:02 GMT
Date: Tue, 04 Apr 2023 08:48:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain
IP
File type PEM certificate\012- , ASCII text
Hash 95f61d351f5fc9533cc78e255ce9bc06
fba284117f347782ac23c51d141d7e3ec15a867e
7fcc5f9e52e389d8d7c6df7f1f2a1291ae0aaae8e554f3022239ab092b2ef3c3
GET /chains/remote-settings.content-signature.mozilla.org-2023-05-20-17-04-38.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mpdoaDGHJsNEFWC8mxn8f2Hq/fA/NU0QM/dotB3uROB8Op6HVQahfYe0X8ZoeRC1Ktr7lIPMYrM=
x-amz-request-id: X7RQAD9VC903R0Q1
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 04 Apr 2023 07:53:04 GMT
age: 3310
last-modified: Fri, 31 Mar 2023 17:04:39 GMT
etag: "95f61d351f5fc9533cc78e255ce9bc06"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Apr 2023 08:48:14 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 27326a64990c6f698a83600491674790
a6bdb4743ace6be80673f6899605bf9177a75b69
e4a8d3c3016130e47580098183bcea5ae369697b7907eafd65ac3450dc2eb265
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E4A8D3C3016130E47580098183BCEA5AE369697B7907EAFD65AC3450DC2EB265"
Last-Modified: Mon, 03 Apr 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13404
Expires: Tue, 04 Apr 2023 12:31:38 GMT
Date: Tue, 04 Apr 2023 08:48:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Expires, Cache-Control, Content-Length, Retry-After, Last-Modified, Pragma, ETag, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 04 Apr 2023 08:14:45 GMT
age: 2010
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: TL1B4qQqjJCBIGW966dd7Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PMsq9xHlwsalMiN9U8ndA/htFHw=
Date: Tue, 04 Apr 2023 08:48:15 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2ccaf5c2e0620726d3ec879aac553986
a7fa265ff43d3c671a1da51a5a7c18c1aa1a8801
329b2a3fcf3374b23354ee55cb0b22bbc8a1b304dec2171a4c01fb4ba57523a4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "329B2A3FCF3374B23354EE55CB0B22BBC8A1B304DEC2171A4C01FB4BA57523A4"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8023
Expires: Tue, 04 Apr 2023 11:01:59 GMT
Date: Tue, 04 Apr 2023 08:48:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2ccaf5c2e0620726d3ec879aac553986
a7fa265ff43d3c671a1da51a5a7c18c1aa1a8801
329b2a3fcf3374b23354ee55cb0b22bbc8a1b304dec2171a4c01fb4ba57523a4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "329B2A3FCF3374B23354EE55CB0B22BBC8A1B304DEC2171A4C01FB4BA57523A4"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8049
Expires: Tue, 04 Apr 2023 11:02:25 GMT
Date: Tue, 04 Apr 2023 08:48:16 GMT
Connection: keep-alive
rambleconcernedscar.com/34c6e2cfaa7bc9c51be929ea9e1ad9eb/invoke.js
200 OK 9.3 kB URL HTTP/1.1 rambleconcernedscar.com/34c6e2cfaa7bc9c51be929ea9e1ad9eb/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25142), with no line terminators
Hash 337fa4e1674958e8b47fa742f81d00a8
b8e58191449f283816dbb5ccf680db3485fc39de
17f1de51e846bb678ec017f326bd5673085fa41c1d33a1183d53a356a176b586
GET /34c6e2cfaa7bc9c51be929ea9e1ad9eb/invoke.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b7961b5fdf5acfac578dd377b8873674
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
rambleconcernedscar.com/f0/a8/23/f0a8235a4ec678888bed22cea66aea43.js
200 OK 30 kB URL HTTP/1.1 rambleconcernedscar.com/f0/a8/23/f0a8235a4ec678888bed22cea66aea43.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash 82e28d1aad2de4d36e151c71d6e08b92
b48ccd8fc46fda379421dc1171f309c26d20fa3c
42b8d588f7adeee9011a215a07baf00ea639cde0ea03c6d056cbfe9e778d92f9
GET /f0/a8/23/f0a8235a4ec678888bed22cea66aea43.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_ebt1099=1; expires=Fri, 07 Apr 2023 08:48:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ad1b711c6ba3cb27b96cd21ebd54ae1a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 869fe4a8dc549ffa1023d3adc184e4f2
37b95d88dd3f6f251bb651b130e09b202850033f
9387d0291fa66cc98248bae7724ec34f884c766302d2a99e734585cc591ad304
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9387D0291FA66CC98248BAE7724EC34F884C766302D2A99E734585CC591AD304"
Last-Modified: Mon, 03 Apr 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2343
Expires: Tue, 04 Apr 2023 09:27:19 GMT
Date: Tue, 04 Apr 2023 08:48:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5a64c6f-4f76-4a92-92c4-1fa8cb48142e.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5a64c6f-4f76-4a92-92c4-1fa8cb48142e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fde7605b95c3ac6b8de339dbd12e17b1
b44d521b31be7b3fe378a0e070c49379a6eab26e
5496cf7c705ccc67dd13f86a07d9a352424d58591aa67afe1e1361c640f8d510
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5a64c6f-4f76-4a92-92c4-1fa8cb48142e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6803
x-amzn-requestid: 6c78179f-0d11-4a23-8e86-e4f05d7c7f90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0fq3HrioAMF7ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b4645-758850e07ef9b1512b684c35;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:33:57 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: fYzW2B9Nf5JLhQdDSzDsT7h-auY41wg3PSAaSI6U68BNGvtHI99W7A==
via: 1.1 ee32c7a76e2727d565413cc6c352ef48.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 21:51:49 GMT
age: 39387
etag: "b44d521b31be7b3fe378a0e070c49379a6eab26e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5ba0d24586872fbb887f9ace5b204a6
748b10c9a747a90adf10b8f8dedefe59a22ed072
5d50fe5859a98b867ef22fd65c4ab3652d46188813256d43ba7ac61e2b7c9a18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5ba0d24586872fbb887f9ace5b204a6
748b10c9a747a90adf10b8f8dedefe59a22ed072
5d50fe5859a98b867ef22fd65c4ab3652d46188813256d43ba7ac61e2b7c9a18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5f70c40-8b38-48db-b482-a5cc8f1580ef.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5f70c40-8b38-48db-b482-a5cc8f1580ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9d1360ec3cb182322e0a0c445f57e5b7
9f71e3cd002ca8116d917c3b7fb57291099269d1
e3d216e879d771bf2507928ba1b26465c87a4202a4cdc03483f002c2826a81b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa5f70c40-8b38-48db-b482-a5cc8f1580ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6912
x-amzn-requestid: 53fcdc8a-e064-4e81-b5ac-5d0ae4bcfdb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0fpuEZ-IAMFxaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b463d-3b7b43f30dd66fae5dc9ea6a;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:33:49 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: I29hcOKFN0L3ivDpD5pWg-Kg22Z10td_Vll6SRScTslvd__JZnJyTg==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 21:52:12 GMT
age: 39364
etag: "9f71e3cd002ca8116d917c3b7fb57291099269d1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd65dd010-da4c-41c5-b16e-d447c4d8deea.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd65dd010-da4c-41c5-b16e-d447c4d8deea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c7a7cc54be45f71ff09257402a9e4d84
ac1f3a44ce912d4bda9f5cbd66a7f222b85aa94a
f139a2d27fdfeb4a28cd50d6f8f9fb5c96717b2893f9ac8452db90272d2c78bd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd65dd010-da4c-41c5-b16e-d447c4d8deea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12548
x-amzn-requestid: b1a1ca64-3c21-48a9-8b76-6c00329d5925
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CyhPLGeWoAMF-3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642a7bfa-03c540665ae850bc0a880e5c;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 07:10:50 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: CBPM1TNfirOsf4AQNduJLyuhV9HnCm-jNF4l5Ikoz9iw3iP9AX2ADg==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Apr 2023 07:26:14 GMT
age: 4922
etag: "ac1f3a44ce912d4bda9f5cbd66a7f222b85aa94a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
rambleconcernedscar.com/01/46/a3/0146a36a64b48f7fe700fc194f0ad311.js
200 OK 13 kB URL HTTP/1.1 rambleconcernedscar.com/01/46/a3/0146a36a64b48f7fe700fc194f0ad311.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37152), with no line terminators
Hash fd6e1aa47a51bedc3c55c9580a94e36f
e94fb595b50fedcd2b994990c76d5ed7f3ff06a3
2c3b85c43ade225ddea744ae1262563bff4746a78dac0be5e5074d18f93a7d96
GET /01/46/a3/0146a36a64b48f7fe700fc194f0ad311.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3e3da1c6df4f440de10b22bcf95adbb3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81b22292-2571-4b3d-aeae-f84b72b36391.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81b22292-2571-4b3d-aeae-f84b72b36391.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0e87dbffda284dbb0008567a8d4dee30
8edeb9deea0d64ca580af16c44b99d37e918fd58
023247190546b5da51b52c452cf0ce7fe2c4a5b640d5ed682b27e80ee1b3f850
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81b22292-2571-4b3d-aeae-f84b72b36391.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6134
x-amzn-requestid: d72d8ddc-ed19-402a-b1e7-3392eacd9230
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0fpsGPIoAMFppA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b463d-4099b9bc35b52bd3297c0bbb;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:33:49 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: sGdeT2q8lkX5OCuHS456z_5v7gQ-TUwyLnp3e9bE7TmOjG6SsJjLxg==
via: 1.1 5502255f9557c1e2c098b94110b6151c.cloudfront.net (CloudFront), 1.1 ae06b19943a6bad1c1b12b79f7339498.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 21:52:05 GMT
age: 39371
etag: "8edeb9deea0d64ca580af16c44b99d37e918fd58"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bfb42fa-a742-48e1-9e04-5a6dd253e7c3.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bfb42fa-a742-48e1-9e04-5a6dd253e7c3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa38adb609929dd640969cf7fdac34e0
2f6376d861ae95e83cd65f47f0ad99f73ecc519b
f83c9e3dd084b6148accb41f7b234e93d4e53a12f0a92846a1a7234159f6567e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bfb42fa-a742-48e1-9e04-5a6dd253e7c3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8717
x-amzn-requestid: 18f7e80a-b9df-4ece-86f2-59330cbda055
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0fpsGk6IAMFbdw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b463d-37906ba06871532364672b8a;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:33:49 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: qQTCrriLVnk_YyWMTS_FjDAkQLLZPvKJnF3Si9tTPTB5hBJ6_IchRQ==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 f268a165a18929fd0a24a3189fbd16b2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 21:53:48 GMT
age: 39268
etag: "2f6376d861ae95e83cd65f47f0ad99f73ecc519b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86274a5c-15b7-49b6-a8ee-01546eb3817c.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86274a5c-15b7-49b6-a8ee-01546eb3817c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 968835dc12a7fcd43dd43ce155b857f4
a5d938ee5166c39a3cd73a2a85469f06338341e6
369095e1c0c06d202d9b4a199017193aa08d114eebe18dbe4192d28046f0b3ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86274a5c-15b7-49b6-a8ee-01546eb3817c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7652
x-amzn-requestid: d3a5499f-5194-4521-96d0-580f8582fb1e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: C0fpsHO_oAMFjEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642b463d-7ad0993b235ba1933683c3ae;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Mon, 03 Apr 2023 21:33:49 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: zsw_k7p9lQ0dI6SoWv5oKshdfUlNOi87fNS99mF1dXNv9EnQpt2CWg==
via: 1.1 ba490acb2ea716cd57876286ed686786.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Apr 2023 21:53:44 GMT
age: 39272
etag: "a5d938ee5166c39a3cd73a2a85469f06338341e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 0b74a5ddf249dbae89b02dac19c6ca42
96bc02cfbd8ab7305f590e5b6031cfb5192d1eca
09b7afdb950135abceb240d8b3061b92c2ffbddf754d245dd68654df2af3d8f2
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Apr 2023 08:48:16 GMT
Last-Modified: Tue, 04 Apr 2023 07:22:29 GMT
Server: ECAcc (nya/78C0)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: z-d7tU-_3QA-G3uq427I4UyuwBORry7Lr5ykargJhcC13t9DFGIqqg==
Age: 5147
cse.google.com/cse.js?cx=013013290873966176362:95o1jilldgw
200 OK 3.0 kB URL HTTP/2 cse.google.com/cse.js?cx=013013290873966176362:95o1jilldgw
IP
File type ASCII text, with very long lines (3486)
Hash 8b26ac22f600817bd2909c04f71ae8f0
21f1bf7603fb65d4fa24ce89a10015218fc0e5f5
ee67b15820954f1d14e10430507bcf667536748db9f634a1e6407e3bd76ef2e7
GET /cse.js?cx=013013290873966176362:95o1jilldgw HTTP/1.1
Host: cse.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-QNm4lzTqnfD5ElJ5fyxwWg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Tue, 04 Apr 2023 08:48:16 GMT
server: gws
content-length: 3033
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+674; expires=Thu, 03-Apr-2025 08:48:16 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Tue, 04 Apr 2023 08:48:16 GMT
cache-control: private
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 0b74a5ddf249dbae89b02dac19c6ca42
96bc02cfbd8ab7305f590e5b6031cfb5192d1eca
09b7afdb950135abceb240d8b3061b92c2ffbddf754d245dd68654df2af3d8f2
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=119167
Date: Tue, 04 Apr 2023 08:48:16 GMT
Etag: "642aff59-1d7"
Expires: Wed, 05 Apr 2023 17:54:23 GMT
Last-Modified: Mon, 03 Apr 2023 16:31:21 GMT
Server: ECAcc (nya/7970)
X-Cache: Miss from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Flt79d3SuNHw6jhpxeiDsgqXytLBvM0byduj9ttfixhmCu_wF3EwxQ==
Age: 4982
simplewebanalysis.com/stats
200 OK 370 B URL HTTP/2 simplewebanalysis.com/stats
IP
Hash 3fc3c129a15768f3743cd4ca490f1788
8c7ffaae9b1a777e822c152bf2e2e5499cef39e3
05ad11311feed79066553d1d097310c3884a574484ea9754afce920bbd1a2215
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://appnee.com
access-control-allow-credentials: true
set-cookie: uid_id2=f81afd5b-2c29-42bc-a4a7-e32490d39aff:3:1; expires=Fri, 01 Apr 2033 08:48:16 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash d3698368b79527a528cf461fa610e7d8
a93bcb63960228c6afb2e47e55ee85ebc58d719c
6151dae42c6679e9af760b77a54e4158194f9d7310303033d387231d77adbf43
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://appnee.com
access-control-allow-credentials: true
set-cookie: uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Fri, 01 Apr 2033 08:48:16 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5ba0d24586872fbb887f9ace5b204a6
748b10c9a747a90adf10b8f8dedefe59a22ed072
5d50fe5859a98b867ef22fd65c4ab3652d46188813256d43ba7ac61e2b7c9a18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5ba0d24586872fbb887f9ace5b204a6
748b10c9a747a90adf10b8f8dedefe59a22ed072
5d50fe5859a98b867ef22fd65c4ab3652d46188813256d43ba7ac61e2b7c9a18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e4e28ec4f8c63b357c3aea9e6f33bb73
0dd9b6fc83005492436a6934b63a63b37c6ae84c
f7550404aff70915b7e52c795bc8b4688d9d29a31774d595041660e857124a98
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7550404AFF70915B7E52C795BC8B4688D9D29A31774D595041660E857124A98"
Last-Modified: Mon, 03 Apr 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16068
Expires: Tue, 04 Apr 2023 13:16:05 GMT
Date: Tue, 04 Apr 2023 08:48:17 GMT
Connection: keep-alive
static.addtoany.com/menu/sm.24.html
200 OK 392 B URL HTTP/2 static.addtoany.com/menu/sm.24.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (677), with no line terminators
Hash 5683ff79e5da42d61eeaee3ef8b87674
dbae01f0f905e3d94b4f8d7f177a7fbeb79e8d19
4cb372ab3d27a1e85b1f1c7528957ff4eac5c6adddb3999f778b8e17a0d5f8d9
GET /menu/sm.24.html HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:15 GMT
content-type: text/html; charset=utf-8
last-modified: Fri, 18 Nov 2022 00:47:55 GMT
etag: W/"2a5-5edb40e6d10d8"
cache-control: max-age=315360000, immutable
vary: Accept-Encoding
via: e2s
cf-cache-status: HIT
age: 1685490
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7b284a92b8fdb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5d69d429d775405726c3e782964dd9f
d8f5d6e3ec3300a37857a66ff27b7ba47e7bf98c
00055157596a44e9ea7813af9b8f68295537a87df534debb62ff9ff2379e3e14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "00055157596A44E9EA7813AF9B8F68295537A87DF534DEBB62FF9FF2379E3E14"
Last-Modified: Tue, 04 Apr 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21533
Expires: Tue, 04 Apr 2023 14:47:10 GMT
Date: Tue, 04 Apr 2023 08:48:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 49472b109a5570e79d8cac70f4c21480
f181f86f2639f8e7f5982791d3c204636f595d09
8504226db796b579db665cdf5a30023b4056a470054ce949c997782a0acbdd26
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8504226DB796B579DB665CDF5A30023B4056A470054CE949C997782A0ACBDD26"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11444
Expires: Tue, 04 Apr 2023 11:59:01 GMT
Date: Tue, 04 Apr 2023 08:48:17 GMT
Connection: keep-alive
poshhateful.com/advertisers.js
200 OK 0 B URL HTTP/1.1 poshhateful.com/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: poshhateful.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:17 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 468e2f1e5cbc583a8257f6dfdde849b9
Strict-Transport-Security: max-age=0; includeSubdomains
static.addtoany.com/menu/modules/core.26680508.js
200 OK 31 kB URL HTTP/2 static.addtoany.com/menu/modules/core.26680508.js
IP
File type ASCII text, with very long lines (5292), with no line terminators
Hash 7b8973b9adfaba216b591f0f197bc1e0
816dd84671255c4092dc212aceed26e02e4cf530
e4d2631dc9e6d1b8e60015fdf199379bf623429c5b0f2d4a84130c4508029f1a
GET /menu/modules/core.26680508.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:15 GMT
content-type: application/javascript; charset=utf-8
cache-control: max-age=315360000, immutable
cf-bgj: minify
access-control-allow-origin: *
etag: W/"11452-5f1f2ae24215b"
last-modified: Wed, 11 Jan 2023 01:11:29 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3618531
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284a92b901b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
figuredreconsiderinvest.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXtfLelL04EXmJIoy6Z4fSdo9BOMaCcYk%2B0Nyrl89KVNd1VR1T09yCi7IHjyMnlQQOm%2BSDa6LuH%2BAECZeloCwIyIRzUUvnoU9y0wGRj%2Fo%2Ft6r9x3e%2B6o%2BOSguSIiCnm9%2BYPeU1nSuXQ9rr20pI2zpa%2Bt3alFYD6%2FXtpSZb12v9cY%2F130rCtv18PXae5Lv2LlGGIVhFEa1FeVkYntzExUqexhH9Tistxr1qN1Cz%2F2f%2ByKApwFE94K8ACVGz24%2FfgTFhzDp9zek38lt9ua7aaFpbh264vhDs2NsaZDOYOICJOZ4Og3rR4R8cQXWHE8TwHYPxwnA1IgEv0Zg5nhqE6x7dOmUaUgDJp5D2R1C6iEUHYLbu1DiCQG4wPoGTHp%2F3bqS7l6qdKyOyNWn%2F0CVI3L1jxdh0u%2BWterVbltd5Moaj15SQfWGUJ0hsuIU%2Bd4VqPIUPP8YSvxE5p6uwaSHG15bKFFN0is1hEqG0LIP6gMU408FKJIARRYgFec12o6TMFxIWNJsLrY4580m5%2B3FedEWzdZiEqLgY3t95FkfXPfB3T4yt48d1YcrTuC3K3gRwOcjEtzcR1dUKCVB6QlKSlAqgjInKLvVkdC%2B4av7QvuCRdPemPZmNbB554Ae2bwjDTnILsjzk738efIqduR5rdni87LBE0oXGI95O2IybsSSxjKiIpYMXlVQ%2Fsok6p4aEfL358jG%2FWQJjJ7C61Nw9RJoEYGWg4VGCLo9aC2G2DMPaJYZKevcphC2QpZfRb4bHOgL8vLERfzL15D8bOnn5qTAXYXMVfhI%2FUjQ0fcGt2xJDm%2FZ0pNHG1muUrVHxzd3O6e5fObB%2B3K3tE6s3vD9b97mY2EMH96RPl%2BjRijT8eTbZSWEdCvWcUl%2BWPVbkm0Wfnu5cKbI1jbfWVlNMye9V9YMQdUT%2Fym4GpFr6W%2BTN%2FnK710oN4QrKqTFGZkWlB2CZ%2Fvw2cy9twROz2ZYFqAsqoFrsNmhVgRazjhlFfx%2FOJvhA38PHReA5ndh0gpdV6GrK1Ddhy%2BuDfLMnS09%2FnJcX4HpYMC0Cw6Zdvqzy9V6dV6T7SRMZNiQLIlZskBDESetmNE4kgusTSPkfiTe%2BOvmvwAAAP%2F%2FAQAA%2F%2F87uJdOawQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 figuredreconsiderinvest.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXtfLelL04EXmJIoy6Z4fSdo9BOMaCcYk%2B0Nyrl89KVNd1VR1T09yCi7IHjyMnlQQOm%2BSDa6LuH%2BAECZeloCwIyIRzUUvnoU9y0wGRj%2Fo%2Ft6r9x3e%2B6o%2BOSguSIiCnm9%2BYPeU1nSuXQ9rr20pI2zpa%2Bt3alFYD6%2FXtpSZb12v9cY%2F130rCtv18PXae5Lv2LlGGIVhFEa1FeVkYntzExUqexhH9Tistxr1qN1Cz%2F2f%2ByKApwFE94K8ACVGz24%2FfgTFhzDp9zek38lt9ua7aaFpbh264vhDs2NsaZDOYOICJOZ4Og3rR4R8cQXWHE8TwHYPxwnA1IgEv0Zg5nhqE6x7dOmUaUgDJp5D2R1C6iEUHYLbu1DiCQG4wPoGTHp%2F3bqS7l6qdKyOyNWn%2F0CVI3L1jxdh0u%2BWterVbltd5Moaj15SQfWGUJ0hsuIU%2Bd4VqPIUPP8YSvxE5p6uwaSHG15bKFFN0is1hEqG0LIP6gMU408FKJIARRYgFec12o6TMFxIWNJsLrY4580m5%2B3FedEWzdZiEqLgY3t95FkfXPfB3T4yt48d1YcrTuC3K3gRwOcjEtzcR1dUKCVB6QlKSlAqgjInKLvVkdC%2B4av7QvuCRdPemPZmNbB554Ae2bwjDTnILsjzk738efIqduR5rdni87LBE0oXGI95O2IybsSSxjKiIpYMXlVQ%2Fsok6p4aEfL358jG%2FWQJjJ7C61Nw9RJoEYGWg4VGCLo9aC2G2DMPaJYZKevcphC2QpZfRb4bHOgL8vLERfzL15D8bOnn5qTAXYXMVfhI%2FUjQ0fcGt2xJDm%2FZ0pNHG1muUrVHxzd3O6e5fObB%2B3K3tE6s3vD9b97mY2EMH96RPl%2BjRijT8eTbZSWEdCvWcUl%2BWPVbkm0Wfnu5cKbI1jbfWVlNMye9V9YMQdUT%2Fym4GpFr6W%2BTN%2FnK710oN4QrKqTFGZkWlB2CZ%2Fvw2cy9twROz2ZYFqAsqoFrsNmhVgRazjhlFfx%2FOJvhA38PHReA5ndh0gpdV6GrK1Ddhy%2BuDfLMnS09%2FnJcX4HpYMC0Cw6Zdvqzy9V6dV6T7SRMZNiQLIlZskBDESetmNE4kgusTSPkfiTe%2BOvmvwAAAP%2F%2FAQAA%2F%2F87uJdOawQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXtfLelL04EXmJIoy6Z4fSdo9BOMaCcYk%2B0Nyrl89KVNd1VR1T09yCi7IHjyMnlQQOm%2BSDa6LuH%2BAECZeloCwIyIRzUUvnoU9y0wGRj%2Fo%2Ft6r9x3e%2B6o%2BOSguSIiCnm9%2BYPeU1nSuXQ9rr20pI2zpa%2Bt3alFYD6%2FXtpSZb12v9cY%2F130rCtv18PXae5Lv2LlGGIVhFEa1FeVkYntzExUqexhH9Tistxr1qN1Cz%2F2f%2ByKApwFE94K8ACVGz24%2FfgTFhzDp9zek38lt9ua7aaFpbh264vhDs2NsaZDOYOICJOZ4Og3rR4R8cQXWHE8TwHYPxwnA1IgEv0Zg5nhqE6x7dOmUaUgDJp5D2R1C6iEUHYLbu1DiCQG4wPoGTHp%2F3bqS7l6qdKyOyNWn%2F0CVI3L1jxdh0u%2BWterVbltd5Moaj15SQfWGUJ0hsuIU%2Bd4VqPIUPP8YSvxE5p6uwaSHG15bKFFN0is1hEqG0LIP6gMU408FKJIARRYgFec12o6TMFxIWNJsLrY4580m5%2B3FedEWzdZiEqLgY3t95FkfXPfB3T4yt48d1YcrTuC3K3gRwOcjEtzcR1dUKCVB6QlKSlAqgjInKLvVkdC%2B4av7QvuCRdPemPZmNbB554Ae2bwjDTnILsjzk738efIqduR5rdni87LBE0oXGI95O2IybsSSxjKiIpYMXlVQ%2Fsok6p4aEfL358jG%2FWQJjJ7C61Nw9RJoEYGWg4VGCLo9aC2G2DMPaJYZKevcphC2QpZfRb4bHOgL8vLERfzL15D8bOnn5qTAXYXMVfhI%2FUjQ0fcGt2xJDm%2FZ0pNHG1muUrVHxzd3O6e5fObB%2B3K3tE6s3vD9b97mY2EMH96RPl%2BjRijT8eTbZSWEdCvWcUl%2BWPVbkm0Wfnu5cKbI1jbfWVlNMye9V9YMQdUT%2Fym4GpFr6W%2BTN%2FnK710oN4QrKqTFGZkWlB2CZ%2Fvw2cy9twROz2ZYFqAsqoFrsNmhVgRazjhlFfx%2FOJvhA38PHReA5ndh0gpdV6GrK1Ddhy%2BuDfLMnS09%2FnJcX4HpYMC0Cw6Zdvqzy9V6dV6T7SRMZNiQLIlZskBDESetmNE4kgusTSPkfiTe%2BOvmvwAAAP%2F%2FAQAA%2F%2F87uJdOawQAAA%3D%3D HTTP/1.1
Host: figuredreconsiderinvest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Cookie: u_pl=14925862; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c6263f00111ddffce5113e8d3f72ef2b
Strict-Transport-Security: max-age=0; includeSubdomains
rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
200 OK 9.9 kB URL HTTP/1.1 rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash 40ebe2baf4c1cc1c6a6798feee8ab5bb
8a082c3ccdf92466dfcbc206b453245dfe8bbdd3
9d928ecab34f3eaf03af32220ad177b3c616b8305d861034ac40e4bac23fc1f4
GET /89ed111dc7633df620ed792e7fb6678a/invoke.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 86f230676da9ab4ceba411ed15b90609
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae63d4a06539a8a6b518f02927f7adbd
5f645cf8459230c0a48bf3f934a212bdce588af5
56f0f4f3d2e34344b564bc5503481fe324ab9698fae70b796eafa5b9b125a772
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56F0F4F3D2E34344B564BC5503481FE324AB9698FAE70B796EAFA5B9B125A772"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12738
Expires: Tue, 04 Apr 2023 12:20:35 GMT
Date: Tue, 04 Apr 2023 08:48:17 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3e18ab4ca97f7339957b43db660cfd1a
762deec33262d66e27a74faa8e4c894f56204559
492dc3540f5c32f203158d75df28bf7da92b30f650307d6756ad11a44126752a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 1.1 kB IP
Hash 9e6360277d6fc28719f33b8936e70f0d
8ad7d7b7038c5f5a8e1d48ff05eb79daedc90b12
7801dedbcdfccb7c8c1f87dc1ec3162a8a857eab9028e6bf3e7813e9a9495086
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/cse/static/element/11b6937ae69e441f/default+en.css
200 OK 9.1 kB URL HTTP/2 www.google.com/cse/static/element/11b6937ae69e441f/default+en.css
IP
Hash 6b3110003f6d375f164a81ce80a9f3b1
ae3c926847423f743a849751c7cf1b0982245ddc
43c7228af0ccf5b3bf3de12a714ce673f61ed8815e1a05d6f889afb0a53e8fb0
GET /cse/static/element/11b6937ae69e441f/default+en.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 9086
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Mar 2023 19:58:13 GMT
expires: Fri, 29 Mar 2024 19:58:13 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 27 Mar 2023 18:22:12 GMT
content-type: text/css
vary: Accept-Encoding
age: 391804
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/cse/static/style/look/v4/default.css
200 OK 1.3 kB URL HTTP/2 www.google.com/cse/static/style/look/v4/default.css
IP
Hash b33c65c5c815696bed8292c172185bcc
d2c0eceacad1f57b25621dcdb32659c5dc6b8d9b
f5ab6924cf65ae4dc61dca35d096fa272f8b4937b733b5eb46d36af396884132
GET /cse/static/style/look/v4/default.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1345
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 04 Apr 2023 08:00:22 GMT
expires: Tue, 04 Apr 2023 08:50:22 GMT
cache-control: public, max-age=3000
age: 2875
last-modified: Wed, 17 Jun 2020 00:00:00 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/28/80/ff/2880ff40cd55fcd3dccbf0b5a4550082/1668496177.png
200 OK 123 kB URL HTTP/2 cdn.cloudimagesb.com/si/28/80/ff/2880ff40cd55fcd3dccbf0b5a4550082/1668496177.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 123 kB (123291 bytes)
Hash 1c26658a8e0980350d9b1ddd575fa2e1
99514e6f4091235f9ea4ba0933edd20f31c9d031
3b43b009a295edad0eb4c0617671b86f5bb68c732bd57fa090adcdb5807f99a3
GET /si/28/80/ff/2880ff40cd55fcd3dccbf0b5a4550082/1668496177.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:17 GMT
content-type: image/png
content-length: 123291
server: nginx/1.17.6
last-modified: Tue, 15 Nov 2022 07:09:43 GMT
etag: "63733b37-1e19b"
expires: Thu, 06 Apr 2023 08:48:17 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
200 OK 9.8 kB URL HTTP/1.1 rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26973), with no line terminators
Hash fadb00e5aa36a46e0b426474cdda98b6
3935662c64da605b5d5e2f58b2bd4d495c5e404c
6269ef5a7ec9515215225a2fc7dac9e6b6d5ede41f517ff989710daaaebf3f91
GET /89ed111dc7633df620ed792e7fb6678a/invoke.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1fef2202b2ff6bf8b4c6ee70a07e46da
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0196063f1903edd62228f1a7ee528553
a2d0c776403da98a44658af3159e9c838b8d18ad
e1607f66a87bda33e62bc48d02f274db0a2456a483dd1494a3ea20422883cc40
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E1607F66A87BDA33E62BC48D02F274DB0A2456A483DD1494A3EA20422883CC40"
Last-Modified: Sat, 01 Apr 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=664
Expires: Tue, 04 Apr 2023 08:59:21 GMT
Date: Tue, 04 Apr 2023 08:48:17 GMT
Connection: keep-alive
rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
200 OK 9.8 kB URL HTTP/1.1 rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26973), with no line terminators
Hash fadb00e5aa36a46e0b426474cdda98b6
3935662c64da605b5d5e2f58b2bd4d495c5e404c
6269ef5a7ec9515215225a2fc7dac9e6b6d5ede41f517ff989710daaaebf3f91
GET /89ed111dc7633df620ed792e7fb6678a/invoke.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1756bd4311764ad3ad186d556754bda5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
200 OK 9.8 kB URL HTTP/1.1 rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26973), with no line terminators
Hash fadb00e5aa36a46e0b426474cdda98b6
3935662c64da605b5d5e2f58b2bd4d495c5e404c
6269ef5a7ec9515215225a2fc7dac9e6b6d5ede41f517ff989710daaaebf3f91
GET /89ed111dc7633df620ed792e7fb6678a/invoke.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cfe5c75cc299a4e7ab1e4678ea80d155
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.profitabledisplaycontent.com/watch.1107912987280.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 www.profitabledisplaycontent.com/watch.1107912987280.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.1107912987280.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com
Access-Control-Allow-Origin: https://appnee.com
Access-Control-Allow-Credentials: true
Location: https://www.profitabledisplaycontent.com/watch.1107912987280.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=d3cdab76c6f088642616db7c190ca27f95412719c8792f7ca9778a4a8a16da5aa0d88317344af328e3bb9a935360556590d72769d27d0c4a88cc2975f053f1ec8fe27048b9a18eafc590524f1c101f0f48836b4aa9769e1cf03394db36970a776b&pst=1680598158&rmtc=t
Set-Cookie: u_pl=13336275; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.eTd4PfIn9qBIjmqsTC6Hgv2gSaVcHgzPa3YyOoMZwbc; expires=Tue, 04 Apr 2023 08:49:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5ada3f76d4eacf6c6ed7ca277b6c7744
Strict-Transport-Security: max-age=0; includeSubdomains
www.profitabledisplaycontent.com/watch.404873259834.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 www.profitabledisplaycontent.com/watch.404873259834.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.404873259834.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com
Access-Control-Allow-Origin: https://appnee.com
Access-Control-Allow-Credentials: true
Location: https://www.profitabledisplaycontent.com/watch.404873259834.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=89d35a0a72c28587ce3764b3258fa898594b1ec671dc484499a93740fb454d45e5fb3245afe996aa91e53e6eee955944a3a2ae684eced294b82479624961204f59aa299463960e37991546e78bf62169ea063a96cdc615a987397c34f594&pst=1680598158&rmtc=t
Set-Cookie: u_pl=13336275; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.eTd4PfIn9qBIjmqsTC6Hgv2gSaVcHgzPa3YyOoMZwbc; expires=Tue, 04 Apr 2023 08:49:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bf04a029633d58b4c05fbc0dbae92aae
Strict-Transport-Security: max-age=0; includeSubdomains
www.profitabledisplaycontent.com/watch.376838859122.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 www.profitabledisplaycontent.com/watch.376838859122.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.376838859122.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://appnee.com/
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.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.eTd4PfIn9qBIjmqsTC6Hgv2gSaVcHgzPa3YyOoMZwbc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com
Access-Control-Allow-Origin: https://appnee.com
Access-Control-Allow-Credentials: true
Location: https://www.profitabledisplaycontent.com/watch.376838859122.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=e74f5a35f7b8778dc47f965681b20a77680eae21ca07efba00e116413f0d96671885628682891cd6f9abd84c48054674564ec84d676fab8e9996b75f3dbf3a646a50d9eebf1947b8feaddb613c2e54a6f43c6f9f1a230c3336a0e5001f6f1fbdf0&pst=1680598158&rmtc=t
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.Hce8_T4XtTVh4UH8ABrdeXCUjGEO73pNDqhT3MvJOjk; expires=Tue, 04 Apr 2023 08:49:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8b0faf0f9afa1aa3120ebd3100fb54a4
Strict-Transport-Security: max-age=0; includeSubdomains
rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
200 OK 9.8 kB URL HTTP/1.1 rambleconcernedscar.com/89ed111dc7633df620ed792e7fb6678a/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26973), with no line terminators
Hash fadb00e5aa36a46e0b426474cdda98b6
3935662c64da605b5d5e2f58b2bd4d495c5e404c
6269ef5a7ec9515215225a2fc7dac9e6b6d5ede41f517ff989710daaaebf3f91
GET /89ed111dc7633df620ed792e7fb6678a/invoke.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e09bc8e43247ff43e00a49996d7df01f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 1.5 kB IP
Hash 5a5c3b3f154fcc31aa03e28edeee128e
9889245e889197bd813e289f2031c313509da831
0f680e0312275367ddc094693cd69763e1bf216151761e6f0950e9c6dece2232
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
200 OK 4.2 kB URL HTTP/2 www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css
IP
File type ASCII text, with very long lines (23228), with no line terminators
Hash 8f89ebd6757f0474347497a9545d3cc2
014d050331fcdbcff8cbf854b4c926286e0c104a
015111236a8db21de30b2af7d2d24221a9f358fe83137f4651707f4728043585
GET /_/translate_http/_/ss/k=translate_http.tr.vneFu3d_4ck.L.F4.O/d=0/rs=AN8SPfrNa1b9K5rCmaIpu9SqE3A5sBDBfg/m=el_main_css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 4205
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Mar 2023 15:31:01 GMT
expires: Fri, 29 Mar 2024 15:31:01 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 12 Mar 2023 00:11:57 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
age: 407837
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.profitabledisplaycontent.com/watch.404873259834.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=89d35a0a72c28587ce3764b3258fa898594b1ec671dc484499a93740fb454d45e5fb3245afe996aa91e53e6eee955944a3a2ae684eced294b82479624961204f59aa299463960e37991546e78bf62169ea063a96cdc615a987397c34f594&pst=1680598158&rmtc=t
200 OK 635 B URL HTTP/1.1 www.profitabledisplaycontent.com/watch.404873259834.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=89d35a0a72c28587ce3764b3258fa898594b1ec671dc484499a93740fb454d45e5fb3245afe996aa91e53e6eee955944a3a2ae684eced294b82479624961204f59aa299463960e37991546e78bf62169ea063a96cdc615a987397c34f594&pst=1680598158&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (582)
Hash 14794c4c60f9a661a6172407397cda6d
3ccd0a04e118c965863a76a97d79203b0babfde5
4564bdf11d441480b96a9daa64653e061ccc1e919d5cfe10a75acef4e7977092
GET /watch.404873259834.js?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=89d35a0a72c28587ce3764b3258fa898594b1ec671dc484499a93740fb454d45e5fb3245afe996aa91e53e6eee955944a3a2ae684eced294b82479624961204f59aa299463960e37991546e78bf62169ea063a96cdc615a987397c34f594&pst=1680598158&rmtc=t HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Referer: https://appnee.com/
Connection: keep-alive
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.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.eTd4PfIn9qBIjmqsTC6Hgv2gSaVcHgzPa3YyOoMZwbc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com
Access-Control-Allow-Origin: https://appnee.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:18 GMT; secure; SameSite=None
iprc9bc01598058bc4380ff8fd7a321a3199=2717340; expires=Wed, 05 Apr 2023 10:48:18 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs=1; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
pdhtkv5=true; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs5=1; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 38358df8440fd6432a220ded5f632913
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c5855af789369a9b0da3ae3d0ff5b7f0
393f65405b0231d85849bb2de71f53e4a935e14b
216bda1ec06919da765b408640b1841f048a3ac507a3c25786f0ec8b938837fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rambleconcernedscar.com/236ae4a58f1fd2df2e19cd1891936576/invoke.js
200 OK 9.8 kB URL HTTP/1.1 rambleconcernedscar.com/236ae4a58f1fd2df2e19cd1891936576/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26949), with no line terminators
Hash ef2ab125f66edd6e63c88946ffdf9f9d
bb84f67671ad6b08ba438f8d86b0b61804e5687f
e04139dfb68d29dfed0fc57c29993aaae2cfc3eefdc755097134f91c4d09258b
GET /236ae4a58f1fd2df2e19cd1891936576/invoke.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9984d8ae777c170427e5498e01d5c29a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.profitabledisplaycontent.com/watch.1107912987280?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
200 OK 5.1 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.1107912987280?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
File type ASCII text, with very long lines (12331)
Hash 1bbd60893b9be7a82f8eae82effca0c8
ca9e6a05f33d533a3c7acd4865a84d55887bc30d
8d2766c8c69098145cb0eb7411d984daf1b7d273b2d396130001f6369f32835a
GET /watch.1107912987280?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxMzMzNjI3NSwiayI6Ijg5ZWQxMTFkYzc2MzNkZjYyMGVkNzkyZTdmYjY2NzhhIiwic2lkIjoiIiwiaXNpZCI6NCwiYXNpZCI6MSwiemlkIjo1OTc5NCwicGlkIjo0OTIxNSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjo1LCJwdCI6NCwicGsiOiJ1eTNiOXlzYiIsImNwa3MiOnsgIjQ2IjoiMWFhM2MyMTEyYzZjZTk2YTlhM2Y3N2MxNzY2YjNkMjUifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6ZmFsc2UsInIiOiJodHRwczovL2FwcG5lZS5jb20vdGFnL21pY3Jvc29mdC1uZXQvIn19.Hce8_T4XtTVh4UH8ABrdeXCUjGEO73pNDqhT3MvJOjk; uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; iprc9bc01598058bc4380ff8fd7a321a3199=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.LHZxgLAlbPDYJ48QFl9DCTF0S0OmxYfgC2cmk7sJvkU; expires=Tue, 04 Apr 2023 08:49:18 GMT; secure; SameSite=None
uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e26496428a0c4e2ca3226a563eabad52
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
rambleconcernedscar.com/236ae4a58f1fd2df2e19cd1891936576/invoke.js
200 OK 9.8 kB URL HTTP/1.1 rambleconcernedscar.com/236ae4a58f1fd2df2e19cd1891936576/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26959), with no line terminators
Hash 1263afd5024aac819b2cdbbd607d361a
e587675cc4809518b8fed1caca78a1338ae313f8
bb84044d08658be5eccf1034401980d01a4b64a1bb7261932b6c8b0b9d3a2f0e
GET /236ae4a58f1fd2df2e19cd1891936576/invoke.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 01015f05156f9186be86ee157cc33670
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.profitabledisplaycontent.com/watch.56834774802?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
200 OK 1.2 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.56834774802?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (487)
Hash 1ecbca54c162382c588e960849a5a835
1c5216b732a2438ae4d81c58e368af08948f2fd8
6992e0eaa735d9f6c62a95858ca3d577d5f9b168124e747f197803758d1cf112
GET /watch.56834774802?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.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.Hce8_T4XtTVh4UH8ABrdeXCUjGEO73pNDqhT3MvJOjk; uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; iprc9bc01598058bc4380ff8fd7a321a3199=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.LHZxgLAlbPDYJ48QFl9DCTF0S0OmxYfgC2cmk7sJvkU; expires=Tue, 04 Apr 2023 08:49:18 GMT; secure; SameSite=None
uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 17c3a7bca0c6a55457c1ae6ccfe3f06c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.profitabledisplaycontent.com/watch.94846456666?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
200 OK 1.2 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.94846456666?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (487)
Hash 932b424a99c43dd330864d7a7a0f9134
fb3a2e362a3709b3931a8aebc2108b76d61dcbb8
9d4329d8a2aeaed82333cc297fc3aa67899628aa7018221f7c394186d17db3d7
GET /watch.94846456666?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.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.Hce8_T4XtTVh4UH8ABrdeXCUjGEO73pNDqhT3MvJOjk; uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; iprc9bc01598058bc4380ff8fd7a321a3199=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.LHZxgLAlbPDYJ48QFl9DCTF0S0OmxYfgC2cmk7sJvkU; expires=Tue, 04 Apr 2023 08:49:18 GMT; secure; SameSite=None
uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1940f67a9ed8edb2016f2aefe6fd4fe2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.profitabledisplaycontent.com/watch.376838859122?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
200 OK 5.0 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.376838859122?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
Hash 536cb6d324814090d16f60f1077bc13d
9f533f16a0c1b52bc7ccc1bdc2ad04586cb42dad
45cea1b65ff8102b3331dd25793af85cbbdf2913fd874b3e4abde5e5b17f8b4f
GET /watch.376838859122?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.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.Hce8_T4XtTVh4UH8ABrdeXCUjGEO73pNDqhT3MvJOjk; uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; iprc9bc01598058bc4380ff8fd7a321a3199=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.LHZxgLAlbPDYJ48QFl9DCTF0S0OmxYfgC2cmk7sJvkU; expires=Tue, 04 Apr 2023 08:49:18 GMT; secure; SameSite=None
uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f76f29aeb537eea0110b5f27b460cb31
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f1aa62acceb69b6b9a7fd01330eb1deb
9b958b6b64f7b64a7dfc2502790bb7d90a3ff81a
2c9f5f66c6f1cafd85b4ea4433198df7de527788d2c90867d973ab6cda647c89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C9F5F66C6F1CAFD85B4EA4433198DF7DE527788D2C90867D973AB6CDA647C89"
Last-Modified: Mon, 03 Apr 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17140
Expires: Tue, 04 Apr 2023 13:33:58 GMT
Date: Tue, 04 Apr 2023 08:48:18 GMT
Connection: keep-alive
www.profitabledisplaycontent.com/watch.1107912987280?shu=7fb28ef5519dee45b8d331ba96b66a7bbcf5ac4e6b38883fbb41dec2b0a7b8ad18d7d69c233a10d964cc1221a1b43402cf908be3e1fc1cf5af6b1e5c32fe8c4af24e19ce6e9f7e9baaa4e76a8e878be42314fa0bd16debbfccc0cb0afda4&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&tz=0&dev=e&res=12.1055
200 OK 2.2 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.1107912987280?shu=7fb28ef5519dee45b8d331ba96b66a7bbcf5ac4e6b38883fbb41dec2b0a7b8ad18d7d69c233a10d964cc1221a1b43402cf908be3e1fc1cf5af6b1e5c32fe8c4af24e19ce6e9f7e9baaa4e76a8e878be42314fa0bd16debbfccc0cb0afda4&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&tz=0&dev=e&res=12.1055
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2939)
Hash b5f59ec40e705bf0f3bf7bb505c6ce2c
7619cf8c4157bbbd6d5a05c20af68ce776fd89bd
fa1905b0c3b0a75504152fa02f334421cc719cc1e109c59326eaaa272a484432
GET /watch.1107912987280?shu=7fb28ef5519dee45b8d331ba96b66a7bbcf5ac4e6b38883fbb41dec2b0a7b8ad18d7d69c233a10d964cc1221a1b43402cf908be3e1fc1cf5af6b1e5c32fe8c4af24e19ce6e9f7e9baaa4e76a8e878be42314fa0bd16debbfccc0cb0afda4&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&tz=0&dev=e&res=12.1055 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitabledisplaycontent.com/watch.1107912987280?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxMzMzNjI3NSwiayI6Ijg5ZWQxMTFkYzc2MzNkZjYyMGVkNzkyZTdmYjY2NzhhIiwic2lkIjoiIiwiaXNpZCI6NCwiYXNpZCI6MSwiemlkIjo1OTc5NCwicGlkIjo0OTIxNSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjo1LCJwdCI6NCwicGsiOiJ1eTNiOXlzYiIsImNwa3MiOnsgIjQ2IjoiMWFhM2MyMTEyYzZjZTk2YTlhM2Y3N2MxNzY2YjNkMjUifSwidCI6MX0sInUiOnsidSI6MiwiYXUiOjIsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6ZmFsc2UsInIiOiJodHRwczovL2FwcG5lZS5jb20vdGFnL21pY3Jvc29mdC1uZXQvIn19.LHZxgLAlbPDYJ48QFl9DCTF0S0OmxYfgC2cmk7sJvkU; uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; iprc9bc01598058bc4380ff8fd7a321a3199=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com/tag/microsoft-net/
Access-Control-Allow-Origin: https://appnee.com/tag/microsoft-net/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs=2; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs5=2; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 28786140398c98395a4351a378e44bce
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
rambleconcernedscar.com/236ae4a58f1fd2df2e19cd1891936576/invoke.js
200 OK 9.8 kB URL HTTP/1.1 rambleconcernedscar.com/236ae4a58f1fd2df2e19cd1891936576/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26961), with no line terminators
Hash 1623fee25b625b84d53279fdb9a2a09d
3af799d042ea048a81b9ee53efef16c36d1a00bf
027f1ceec4349bac64dea25606072952e5b36d31319b491fe045fb2f0937cb2f
GET /236ae4a58f1fd2df2e19cd1891936576/invoke.js HTTP/1.1
Host: rambleconcernedscar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ee86fa8783bf9d3fa4685aca16c163eb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7642eef6b387ae0e1b60714002c70c87
f708984cfd3ff957700552f5f6c8990efa74ef6d
8024db53f01375767d851947c41abf7b1cde174ad147853b4934abee2b080057
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8024DB53F01375767D851947C41ABF7B1CDE174AD147853B4934ABEE2B080057"
Last-Modified: Mon, 03 Apr 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6677
Expires: Tue, 04 Apr 2023 10:39:35 GMT
Date: Tue, 04 Apr 2023 08:48:18 GMT
Connection: keep-alive
www.profitabledisplaycontent.com/watch.56834774802?shu=cf814e11b66a8513e79e9e868a9a3e0232bd3a3720c666418a7827a2b712615c445951b1a0a806de1431b2f94d10382fc03e4265d48cc9336c836c319310aef247c3706e96a986e95c9241782ba8da407d8fe4212945f20a9dabf7964e934fb38a29a2&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D
200 OK 1.9 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.56834774802?shu=cf814e11b66a8513e79e9e868a9a3e0232bd3a3720c666418a7827a2b712615c445951b1a0a806de1431b2f94d10382fc03e4265d48cc9336c836c319310aef247c3706e96a986e95c9241782ba8da407d8fe4212945f20a9dabf7964e934fb38a29a2&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2574)
Hash bd0a728e7f20a55e6408e32e1f9e664f
dc79d1b51e1465ba14e466cc0d2ac87910641f30
f1ec3bf95ae166aeae324b72451fcce2304578ce3c5cbb4dddf1c65abbb27525
GET /watch.56834774802?shu=cf814e11b66a8513e79e9e868a9a3e0232bd3a3720c666418a7827a2b712615c445951b1a0a806de1431b2f94d10382fc03e4265d48cc9336c836c319310aef247c3706e96a986e95c9241782ba8da407d8fe4212945f20a9dabf7964e934fb38a29a2&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitabledisplaycontent.com/watch.56834774802?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxMzMzNjI3NSwiayI6Ijg5ZWQxMTFkYzc2MzNkZjYyMGVkNzkyZTdmYjY2NzhhIiwic2lkIjoiIiwiaXNpZCI6NCwiYXNpZCI6MSwiemlkIjo1OTc5NCwicGlkIjo0OTIxNSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjo1LCJwdCI6NCwicGsiOiJ1eTNiOXlzYiIsImNwa3MiOnsgIjQ2IjoiMWFhM2MyMTEyYzZjZTk2YTlhM2Y3N2MxNzY2YjNkMjUifSwidCI6MX0sInUiOnsidSI6MiwiYXUiOjIsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6ZmFsc2UsInIiOiJodHRwczovL2FwcG5lZS5jb20vdGFnL21pY3Jvc29mdC1uZXQvIn19.LHZxgLAlbPDYJ48QFl9DCTF0S0OmxYfgC2cmk7sJvkU; uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; iprc9bc01598058bc4380ff8fd7a321a3199=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com/tag/microsoft-net/
Access-Control-Allow-Origin: https://appnee.com/tag/microsoft-net/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs=2; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs5=2; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b90fbb21ce2439e1be8f172cd1eeb108
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/cti/79/07/d3/7907d3ed952513392cee300bc6f8ad4f/1627979066.png
200 OK 166 kB URL HTTP/2 cdn.cloudimagesb.com/cti/79/07/d3/7907d3ed952513392cee300bc6f8ad4f/1627979066.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 166 kB (165898 bytes)
Hash 2e39c81ce4ae6b75e778515ee4fb89cf
103bdca2ed274a7561c28234f1f7e339af7687e5
288b3a857f9cff99b1425cfc54346aeee3af567185b0001c2acf414897d8b059
GET /cti/79/07/d3/7907d3ed952513392cee300bc6f8ad4f/1627979066.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitabledisplaycontent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: image/png
content-length: 165898
server: nginx/1.17.6
last-modified: Tue, 03 Aug 2021 08:24:35 GMT
etag: "6108fd43-2880a"
expires: Thu, 06 Apr 2023 08:48:18 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.profitabledisplaycontent.com/watch.94846456666?shu=8b1613ecd01d416e20cbe1902a273c45c30deecf576ec169ef1abc8a5e027645ac4b7ead188bfccb2ea076cca8be0b7c1187b1e01dac0986c8d764005d4341d599b1d7f90cebf4c0ce273ef5f88b30f0921590d10235413b14d187b57cc6&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&tz=0&dev=e&res=12.1055
200 OK 1.9 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.94846456666?shu=8b1613ecd01d416e20cbe1902a273c45c30deecf576ec169ef1abc8a5e027645ac4b7ead188bfccb2ea076cca8be0b7c1187b1e01dac0986c8d764005d4341d599b1d7f90cebf4c0ce273ef5f88b30f0921590d10235413b14d187b57cc6&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&tz=0&dev=e&res=12.1055
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2611)
Hash 7f023e18900e0b0e61266f7aab1f1c4a
e22b15b09fe4fe95611114e43742162f52a5bc92
11d230067101bfe33477da81878699f545e9bd1582a643fd76ebafa192aad831
GET /watch.94846456666?shu=8b1613ecd01d416e20cbe1902a273c45c30deecf576ec169ef1abc8a5e027645ac4b7ead188bfccb2ea076cca8be0b7c1187b1e01dac0986c8d764005d4341d599b1d7f90cebf4c0ce273ef5f88b30f0921590d10235413b14d187b57cc6&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&tz=0&dev=e&res=12.1055 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitabledisplaycontent.com/watch.94846456666?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.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.LHZxgLAlbPDYJ48QFl9DCTF0S0OmxYfgC2cmk7sJvkU; uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; iprc9bc01598058bc4380ff8fd7a321a3199=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com/tag/microsoft-net/
Access-Control-Allow-Origin: https://appnee.com/tag/microsoft-net/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs=2; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs5=2; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fc548f006e7b9a12943d8d42405c0587
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.profitabledisplaycontent.com/watch.376838859122?shu=9bcbbe6df5c1a055fd6f8363d60596c994f6bd93d4fc905e558e520510e833cb4547cf52316e6e2d48b0de510801b3744e136be86a86ab5a2c6bfec13f426d917684f6615c3a44f0cc3177acb3919622f10b28f65941549dcf09cfffc10c8926&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&tz=0&dev=e&res=12.1055
200 OK 1.9 kB URL HTTP/1.1 www.profitabledisplaycontent.com/watch.376838859122?shu=9bcbbe6df5c1a055fd6f8363d60596c994f6bd93d4fc905e558e520510e833cb4547cf52316e6e2d48b0de510801b3744e136be86a86ab5a2c6bfec13f426d917684f6615c3a44f0cc3177acb3919622f10b28f65941549dcf09cfffc10c8926&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&tz=0&dev=e&res=12.1055
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2567)
Hash 2eedb716b94e008c17bc6739d2069e3b
d825e8d5ba008678cd1497e23c0f9a025ac9e75b
bc613f3eb6fee41d2de8e37ee1bedafcfea05f5ea0b20f6ad8fe394e9d8ba6f3
GET /watch.376838859122?shu=9bcbbe6df5c1a055fd6f8363d60596c994f6bd93d4fc905e558e520510e833cb4547cf52316e6e2d48b0de510801b3744e136be86a86ab5a2c6bfec13f426d917684f6615c3a44f0cc3177acb3919622f10b28f65941549dcf09cfffc10c8926&pst=1680598158&rmtc=t&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&pii=&in=false&key=89ed111dc7633df620ed792e7fb6678a&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&tz=0&dev=e&res=12.1055 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitabledisplaycontent.com/watch.376838859122?key=89ed111dc7633df620ed792e7fb6678a&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
Cookie: u_pl=13336275; ain=eyJhbGciOiJIUzI1NiJ9.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.LHZxgLAlbPDYJ48QFl9DCTF0S0OmxYfgC2cmk7sJvkU; uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; iprc9bc01598058bc4380ff8fd7a321a3199=2717340; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com/tag/microsoft-net/
Access-Control-Allow-Origin: https://appnee.com/tag/microsoft-net/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs=2; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
uncs5=2; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 72e9bd87372eae9f8e0d2dcf8518a819
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4197dbc0e4a4cc1cea889d8e133f6622
c90ac4d1362c373e4606c791019bae85bc5466cd
a99b188c4277bb53ca52f361b9632699ca822e6fac5c04d2535bd3e67f0ef7cc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B188C4277BB53CA52F361B9632699CA822E6FAC5C04D2535BD3E67F0EF7CC"
Last-Modified: Tue, 04 Apr 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13586
Expires: Tue, 04 Apr 2023 12:34:44 GMT
Date: Tue, 04 Apr 2023 08:48:18 GMT
Connection: keep-alive
soldergeological.com/watch.55709770467.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 soldergeological.com/watch.55709770467.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.55709770467.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: soldergeological.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:18 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com
Access-Control-Allow-Origin: https://appnee.com
Access-Control-Allow-Credentials: true
Location: https://soldergeological.com/watch.55709770467.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=5ffda9f9a77d73de8322a14a9d0c8d2992ac0abcf1aca75ccb7b47481c3d49da48691052af7afe3d495af6f1fae74d981f9f92497567dbb73c337a715584a1426b98401121b498360fcc3ba51c0fc4e76ed55b73b37df1fc5388025222eda5a36d1b&pst=1680598158&rmtc=t
Set-Cookie: u_pl=17061911; expires=Wed, 05 Apr 2023 08:48:18 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.D8F7tTwkzM5LX2xMd9l_zc5aAOebXUodAPW8WFyJijQ; expires=Tue, 04 Apr 2023 08:49:18 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8c11a3c84d7105e737fa796a7bd8b8d9
Strict-Transport-Security: max-age=0; includeSubdomains
jennyvisits.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=13336275
200 OK 1.2 kB URL HTTP/1.1 jennyvisits.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=13336275
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cf0f194c7f42e5edd341b829f758b95d
e70b4d2170d0c63abe0a6e45381deb863a0a98f0
bbd18c9fb527fa435fdce87dbe5d61dbca3194fbdf8266ea1b9eb68493969fb3
GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=13336275 HTTP/1.1
Host: jennyvisits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 04 Apr 2023 08:48:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122660; expires=Wed, 05 Apr 2023 08:48:19 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.t2RCGU8kunE803oeUVFcwcvXph_z-PwenGZwUsAs0l4; expires=Tue, 04 Apr 2023 08:49:19 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7176037cb687b8285742520eafc8dca4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/bi/1e/a6/3f/1ea63f420658afe32927a98311d8590a/1647435948.gif
200 OK 67 kB URL HTTP/2 cdn.cloudimagesb.com/bi/1e/a6/3f/1ea63f420658afe32927a98311d8590a/1647435948.gif
IP
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 300 x 250\012- data
Hash 8dbf64e772ef7a88e0ee22d26c741f7f
1cd21a53aece75c7e7e26beb3675f7bc89715bf3
352f0975727521620d719a36d2e72ea05c68584d385605ff555048daebe31222
GET /bi/1e/a6/3f/1ea63f420658afe32927a98311d8590a/1647435948.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitabledisplaycontent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:19 GMT
content-type: image/gif
content-length: 67216
server: nginx/1.17.6
last-modified: Wed, 16 Mar 2022 13:05:54 GMT
etag: "6231e0b2-10690"
expires: Thu, 06 Apr 2023 08:48:19 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 88482cbce3a954cfd13edf6b57e8b2ea
084725fad1ee9a79b7bcba79f03981ee635bcd69
f3635eaee78aa3e01e58b4951a46c4c32846e0af24421aa7b649ae6aa7f5fd32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3635EAEE78AA3E01E58B4951A46C4C32846E0AF24421AA7B649AE6AA7F5FD32"
Last-Modified: Sun, 02 Apr 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5438
Expires: Tue, 04 Apr 2023 10:18:57 GMT
Date: Tue, 04 Apr 2023 08:48:19 GMT
Connection: keep-alive
cdn.cloudimagesb.com/bi/7e/57/80/7e5780f0d7e569532a94262a14a07b38/1645038995.gif
200 OK 65 kB URL HTTP/2 cdn.cloudimagesb.com/bi/7e/57/80/7e5780f0d7e569532a94262a14a07b38/1645038995.gif
IP
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 300 x 250\012- data
Hash b626c3a8eaaaf3d6abe50822d7095422
79dff08feaeac18d9b92c10d18ea287e2dea79c4
404f4df41f48497ea3ffa115c26f76bc01a3e3e838ee912fe7461a59b576eae7
GET /bi/7e/57/80/7e5780f0d7e569532a94262a14a07b38/1645038995.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitabledisplaycontent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:19 GMT
content-type: image/gif
content-length: 64564
server: nginx/1.17.6
last-modified: Wed, 16 Feb 2022 19:16:41 GMT
etag: "620d4d99-fc34"
expires: Thu, 06 Apr 2023 08:48:19 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
soldergeological.com/watch.55709770467.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=5ffda9f9a77d73de8322a14a9d0c8d2992ac0abcf1aca75ccb7b47481c3d49da48691052af7afe3d495af6f1fae74d981f9f92497567dbb73c337a715584a1426b98401121b498360fcc3ba51c0fc4e76ed55b73b37df1fc5388025222eda5a36d1b&pst=1680598158&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 soldergeological.com/watch.55709770467.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=5ffda9f9a77d73de8322a14a9d0c8d2992ac0abcf1aca75ccb7b47481c3d49da48691052af7afe3d495af6f1fae74d981f9f92497567dbb73c337a715584a1426b98401121b498360fcc3ba51c0fc4e76ed55b73b37df1fc5388025222eda5a36d1b&pst=1680598158&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2540)
Hash b18bd8f5d252751ac76e3ef2077bda0e
7a8d0004d01e750cb927820fa20ee0d87ebef7a7
223a09988f13df725c21b67fe4f4515723a875cc7164c87044748499c8e7fea6
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.55709770467.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=5ffda9f9a77d73de8322a14a9d0c8d2992ac0abcf1aca75ccb7b47481c3d49da48691052af7afe3d495af6f1fae74d981f9f92497567dbb73c337a715584a1426b98401121b498360fcc3ba51c0fc4e76ed55b73b37df1fc5388025222eda5a36d1b&pst=1680598158&rmtc=t HTTP/1.1
Host: soldergeological.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Referer: https://appnee.com/
Connection: keep-alive
Cookie: u_pl=17061911; ain=eyJhbGciOiJIUzI1NiJ9.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.D8F7tTwkzM5LX2xMd9l_zc5aAOebXUodAPW8WFyJijQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com
Access-Control-Allow-Origin: https://appnee.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=766966b9-2956-4565-937c-13534559c011:3:1; expires=Tue, 11 Apr 2023 08:48:19 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 05 Apr 2023 08:48:19 GMT; secure; SameSite=None
uncs=1; expires=Wed, 05 Apr 2023 08:48:19 GMT; secure; SameSite=None
pdhtkv25=true; expires=Wed, 05 Apr 2023 08:48:19 GMT; secure; SameSite=None
uncs25=1; expires=Wed, 05 Apr 2023 08:48:19 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 43f04ab2cd0c5f159c05eeb8d86e5e4f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
seatedparanoiaenslave.com/watch.1123795839968.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 seatedparanoiaenslave.com/watch.1123795839968.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.1123795839968.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: seatedparanoiaenslave.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Tue, 04 Apr 2023 08:48:19 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com
Access-Control-Allow-Origin: https://appnee.com
Access-Control-Allow-Credentials: true
Location: https://seatedparanoiaenslave.com/watch.1123795839968.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=66d41003c2e52642b5c644ccf03f9ef4e5b7d3db01293116fe1d097438f8ab7b3093a7eb556f30dc88c7d7c885d70369b1cb35b6444d931423bbf5a109f790ac6f476c5c040e8ee63dbc46893468198a127e1af7&pst=1680598159&rmtc=t
Set-Cookie: u_pl=17061911; expires=Wed, 05 Apr 2023 08:48:19 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.D8F7tTwkzM5LX2xMd9l_zc5aAOebXUodAPW8WFyJijQ; expires=Tue, 04 Apr 2023 08:49:19 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b0fe751970843508bab80db5e54fd3b6
Strict-Transport-Security: max-age=0; includeSubdomains
immenseatrociousrested.com/watch.1124048957773.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 immenseatrociousrested.com/watch.1124048957773.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1124048957773.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1 HTTP/1.1
Host: immenseatrociousrested.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Tue, 04 Apr 2023 08:48:19 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://appnee.com
Access-Control-Allow-Origin: https://appnee.com
Access-Control-Allow-Credentials: true
Location: https://immenseatrociousrested.com/watch.1124048957773.js?key=236ae4a58f1fd2df2e19cd1891936576&kw=%5B%22microsoft%22%2C%22net%22%2C%22appnee%22%2C%22freeware%22%2C%22group%22%5D&refer=https%3A%2F%2Fappnee.com%2Ftag%2Fmicrosoft-net%2F&tz=0&dev=e&res=12.1055&uuid=766966b9-2956-4565-937c-13534559c011%3A3%3A1&shu=27486cfa4cd37df80fff49697fa26cfe05fc777efcad9ba7c903192aa0f56a8dadf2fcbb59327b5247a61001838333d90b9ab88e6f2e8da6886076d36a4029faf8e863646e036421d3699db3f7d97087d28af8ac&pst=1680598159&rmtc=t
Set-Cookie: u_pl=17061911; expires=Wed, 05 Apr 2023 08:48:19 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzA2MTkxMSwiayI6IjIzNmFlNGE1OGYxZmQyZGYyZTE5Y2QxODkxOTM2NTc2Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1OTc5NCwicGlkIjo0OTIxNSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjoyNSwicHQiOjQsInBrIjoibjBqY3ZzdDE2IiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vYXBwbmVlLmNvbS90YWcvbWljcm9zb2Z0LW5ldC8ifX0.D8F7tTwkzM5LX2xMd9l_zc5aAOebXUodAPW8WFyJijQ; expires=Tue, 04 Apr 2023 08:49:19 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a9243f09d4dd6184534f082dded201e8
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30735a8260b9c875d42add2d33a9a6c0
ea1076f012420c6d3ae054f07a6948352c96a598
995b7ad71da6aa8933947de9bd441a5c4a366e143864ad4fc5a9af3c6f193aca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Lato:300,400,700,900,300italic,400italic,700italic&subset=latin,latin-ext&display=fallback
200 OK 975 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:300,400,700,900,300italic,400italic,700italic&subset=latin,latin-ext&display=fallback
IP
Hash 63ca7be61c54837bc65750a874e83eb1
7148ff5be011d2d9b8cd6e6670ad850fbbe429c1
41b0910b16cd3083e422882b7585b3e6dd8d45b844aa81d7d7e925ac9387fe04
GET /css?family=Lato:300,400,700,900,300italic,400italic,700italic&subset=latin,latin-ext&display=fallback HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Apr 2023 08:48:19 GMT
date: Tue, 04 Apr 2023 08:48:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/22/6d/cb/226dcb4b1253c22c4aa708fe04b06fed/1678970557.jpg
200 OK 23 kB URL HTTP/2 cdn.cloudimagesb.com/bi/22/6d/cb/226dcb4b1253c22c4aa708fe04b06fed/1678970557.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash 6fc1ee179b5886c42aca1e185106e0b8
fa5786eddc8f9663461f7f7bbfd48dcdcbba437a
b879dd5ba24181d305e2705732840e12bf26a087f7c03653e1d46856d0d46ef8
GET /bi/22/6d/cb/226dcb4b1253c22c4aa708fe04b06fed/1678970557.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitabledisplaycontent.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:19 GMT
content-type: image/jpeg
content-length: 22824
server: nginx/1.17.6
last-modified: Thu, 16 Mar 2023 12:42:46 GMT
etag: "64130ec6-5928"
expires: Thu, 06 Apr 2023 08:48:19 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
jennyvisits.com/dyfc1k09?shu=8d7ab5ee330d68a795620f1002ac00d863c7dd66ad62009e8dc39240098cd9d3b55dda8426277c16f7807ee9dc72da3201637664a23766f4689d410f5c3d2e5168ede1cb193d0148345e8a4f7f50ee149c68c649&pst=1680598159&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fappnee.com%2F&psid=13336275
302 Found 6 B URL HTTP/1.1 jennyvisits.com/dyfc1k09?shu=8d7ab5ee330d68a795620f1002ac00d863c7dd66ad62009e8dc39240098cd9d3b55dda8426277c16f7807ee9dc72da3201637664a23766f4689d410f5c3d2e5168ede1cb193d0148345e8a4f7f50ee149c68c649&pst=1680598159&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fappnee.com%2F&psid=13336275
IP
ASN #39572 DataWeb Global Group B.V.
Hash 7d14c6d06a6075d413d43d381c992eba
49bdfc1145f7c7a7bf870f069b9d23a97966cb30
f48bd14f1f30b485d99a2904d06cbd9fa03ccaa5779105a3d3cf963edb2ac385
GET /dyfc1k09?shu=8d7ab5ee330d68a795620f1002ac00d863c7dd66ad62009e8dc39240098cd9d3b55dda8426277c16f7807ee9dc72da3201637664a23766f4689d410f5c3d2e5168ede1cb193d0148345e8a4f7f50ee149c68c649&pst=1680598159&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fappnee.com%2F&psid=13336275 HTTP/1.1
Host: jennyvisits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jennyvisits.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; ain=eyJhbGciOiJIUzI1NiJ9.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.t2RCGU8kunE803oeUVFcwcvXph_z-PwenGZwUsAs0l4; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx/1.17.6
Date: Tue, 04 Apr 2023 08:48:20 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://red-track.xyz/c9b2l0k.php?key=kleztor6pomtsxm9la4n&SUB_ID_SHORT=20d67081ba4fecf59c45ee6581f431dd&COST_CPM=2.360000&PLACEMENT_ID=16122660&CAMPAIGN_ID=760474&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2241546&COUNTRY_CODE=NO
Set-Cookie: iprc9d13a9183fb4e499ce6844f49f75a16a=4118559; expires=Wed, 05 Apr 2023 08:48:20 GMT
pdhtkv=true; expires=Wed, 05 Apr 2023 08:48:20 GMT
uncs=1; expires=Wed, 05 Apr 2023 08:48:20 GMT
pdhtkv28=true; expires=Wed, 05 Apr 2023 08:48:20 GMT
uncs28=1; expires=Wed, 05 Apr 2023 08:48:20 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3b63900cb7327df5368ac518b24e95ae
Strict-Transport-Security: max-age=0; includeSubdomains
red-track.xyz/c9b2l0k.php?key=kleztor6pomtsxm9la4n&SUB_ID_SHORT=20d67081ba4fecf59c45ee6581f431dd&COST_CPM=2.360000&PLACEMENT_ID=16122660&CAMPAIGN_ID=760474&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2241546&COUNTRY_CODE=NO
302 Found 0 B URL HTTP/1.1 red-track.xyz/c9b2l0k.php?key=kleztor6pomtsxm9la4n&SUB_ID_SHORT=20d67081ba4fecf59c45ee6581f431dd&COST_CPM=2.360000&PLACEMENT_ID=16122660&CAMPAIGN_ID=760474&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2241546&COUNTRY_CODE=NO
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=kleztor6pomtsxm9la4n&SUB_ID_SHORT=20d67081ba4fecf59c45ee6581f431dd&COST_CPM=2.360000&PLACEMENT_ID=16122660&CAMPAIGN_ID=760474&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2241546&COUNTRY_CODE=NO HTTP/1.1
Host: red-track.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jennyvisits.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Tue, 04 Apr 2023 08:48:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=e8j6qdp2wj; expires=Wed, 05-Apr-2023 08:48:20 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=e8j6qdp2wj-e8j6qdp2wj-9ly9-hqu3-gxy96o-7sy9bl-7sy9wj-ebecf9; expires=Wed, 05-Apr-2023 08:48:20 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjY-cOpnrj7AhWDh_0HHTt1BRIQFnoECAkQAQ&url=http%3A%2F%2Fspotmytour.com%2Fthe-10-best-cities-to-check-out-in-south-america%2F&usg=AOvVaw3iq2bYGdadGqfCKorSYnAo
Strict-Transport-Security: max-age=31536000
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3e18ab4ca97f7339957b43db660cfd1a
762deec33262d66e27a74faa8e4c894f56204559
492dc3540f5c32f203158d75df28bf7da92b30f650307d6756ad11a44126752a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Apr 2023 08:48:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjY-cOpnrj7AhWDh_0HHTt1BRIQFnoECAkQAQ&url=http%3A%2F%2Fspotmytour.com%2Fthe-10-best-cities-to-check-out-in-south-america%2F&usg=AOvVaw3iq2bYGdadGqfCKorSYnAo
200 OK 590 B URL HTTP/2 www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjY-cOpnrj7AhWDh_0HHTt1BRIQFnoECAkQAQ&url=http%3A%2F%2Fspotmytour.com%2Fthe-10-best-cities-to-check-out-in-south-america%2F&usg=AOvVaw3iq2bYGdadGqfCKorSYnAo
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1097)
Hash e17e380570d5ca79ce9a9e73363c51d6
23ffd2c33d00c23a685825a3aed28e27abe7b198
58d73d9f6191e239320b3c40dea6c21e4fc7218bd7eb440551a491e841d73756
GET /url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwjY-cOpnrj7AhWDh_0HHTt1BRIQFnoECAkQAQ&url=http%3A%2F%2Fspotmytour.com%2Fthe-10-best-cities-to-check-out-in-south-america%2F&usg=AOvVaw3iq2bYGdadGqfCKorSYnAo HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jennyvisits.com/
Connection: keep-alive
Cookie: __Secure-ENID=5.SE=WgoywoGOUEmJadxoIB0r2lkzXHeKVqth1xGOa4ffzT7dUHt-ZXjx-iHV7oK7BCuj96T6WcNdOxtcPrvT6hvt4NQxsLWhAuRLpweU30AweJoV-BgqMIIyysdeq33RUY6ph26qQ9jBKSd0XSV6yoBSxOS9PmgWEsI53hUDjv_5qeI; CONSENT=PENDING+883
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-NeujURP-iD1vkUNBX8asFA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
content-encoding: br
server: gws
content-length: 590
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=initializeGoogleTranslateElement
200 OK 0 B URL HTTP/2 translate.google.com/translate_a/element.js?cb=initializeGoogleTranslateElement
IP
GET /translate_a/element.js?cb=initializeGoogleTranslateElement HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 04 Apr 2023 08:48:16 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+131; expires=Thu, 03-Apr-2025 08:48:16 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/whatsapp.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/whatsapp.js
IP
GET /menu/svg/icons/whatsapp.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"471-5edb43f896478"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 750216
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679ceb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/a2a.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/a2a.js
IP
GET /menu/svg/icons/a2a.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"b6-5edb43f58ee38"
last-modified: Fri, 18 Nov 2022 01:01:36 GMT
vary: Accept-Encoding
via: e1s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 139375
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa689e0b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/twitter.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/twitter.js
IP
GET /menu/svg/icons/twitter.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:19 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"2b7-5edb43f86f378"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e3s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679ccb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/email.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/email.js
IP
GET /menu/svg/icons/email.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"189-5edb43f5e5cd8"
last-modified: Fri, 18 Nov 2022 01:01:36 GMT
vary: Accept-Encoding
via: e4s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 139375
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679d3b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/viber.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/viber.js
IP
GET /menu/svg/icons/viber.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"3f1-5edb43f877078"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 139375
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679ddb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/skype.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/skype.js
IP
GET /menu/svg/icons/skype.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"51f-5edb43f80aa18"
last-modified: Fri, 18 Nov 2022 01:01:38 GMT
vary: Accept-Encoding
via: e1s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 139375
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679d2b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 0 B URL HTTP/2 friendshipmale.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:19 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 1aaefeb75967df8649939fa484ae8ea7
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 04 Apr 2023 08:48:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5TFKH20m%2FyATOclKuiICHg%2BW6%2FgUKx8xpb%2BnKxVBDE8rzXnXuCStkvT4haDcvTD5DRKzZbdEk%2FOD588FYOjObin1%2BnJohoqmSVhCGcSORExWRm%2FUjC8g7l6%2FpeOub8LeD%2BDXsQs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b284aa6ca7f74a9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/page.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/page.js
IP
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://appnee.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:15 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
age: 113452
etag: W/"c04-5f1f2ae2e431b"
last-modified: Wed, 11 Jan 2023 01:11:30 GMT
vary: Accept-Encoding
via: e1s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284a9278b6b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/telegram.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/telegram.js
IP
GET /menu/svg/icons/telegram.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
age: 11465735
etag: W/"168-5edb43f8443f8"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e4s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679dab505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/wechat.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/wechat.js
IP
GET /menu/svg/icons/wechat.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"4b1-5edb43f896478"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e1s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 750216
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679d0b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/facebook.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/facebook.js
IP
GET /menu/svg/icons/facebook.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"13e-5edb43f5ee978"
last-modified: Fri, 18 Nov 2022 01:01:36 GMT
vary: Accept-Encoding
via: e4s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3618519
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa689e1b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
appnee.com/tag/microsoft-net/
200 OK 0 B URL HTTP/2 appnee.com/tag/microsoft-net/
IP
GET /tag/microsoft-net/ HTTP/1.1
Host: appnee.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.28
link: <https://appnee.com/wp-json/>; rel="https://api.w.org/", <https://appnee.com/wp-json/wp/v2/tags/3798>; rel="alternate"; type="application/json"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TWgzjDHGmqIk%2BSuPTJACjvPZ7l4xo%2F%2BaHom7E4uQUCI7%2BC%2FENp1oFL5CrAzbJ7h8Hoz%2FdebDzl6FvOVEFRnfxXDeaOdxERNnwLpudr8EHHx7m%2FMhqbGkhSAwc6tA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b284a8b4f9f1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/link.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/link.js
IP
GET /menu/svg/icons/link.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"6f8-5edb43f695958"
last-modified: Fri, 18 Nov 2022 01:01:37 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 949115
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679cab505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/vk.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/vk.js
IP
GET /menu/svg/icons/vk.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"3f4-5edb43f896478"
last-modified: Fri, 18 Nov 2022 01:01:39 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 949115
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679cfb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.addtoany.com/menu/svg/icons/printfriendly.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/svg/icons/printfriendly.js
IP
GET /menu/svg/icons/printfriendly.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://appnee.com
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Apr 2023 08:48:18 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=7776000
cf-bgj: minify
access-control-allow-origin: *
etag: W/"1ca-5edb43f7ca2d8"
last-modified: Fri, 18 Nov 2022 01:01:38 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2915993
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b284aa679d9b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.47.216
23.33.119.27
192.243.61.225
188.114.98.234
18.194.180.164