| bleleadersto.com/s?VaADCpdr |  104.21.16.26 | 200 OK | 96 kB |
URL User Request GET bleleadersto.com/s?VaADCpdr IP104.21.16.26:443
CertificateIssuerGoogle Trust Services Subjectbleleadersto.com FingerprintB1:1C:BB:F2:95:91:A4:5B:87:41:B5:21:2E:F8:E0:8F:62:2F:E9:AD ValiditySun, 19 Jan 2025 17:09:06 GMT - Sat, 19 Apr 2025 18:06:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s?VaADCpdr HTTP/1.1
Host: bleleadersto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 08 Mar 2025 12:56:17 GMT
content-type: text/html
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-methods: POST, GET, OPTIONS, HEAD
access-control-allow-credentials: true
set-cookie: uid=2Sf6vTb8HHVqY5h1F90xMWytx2aivJGR; expires=Sun, 08 Mar 2026 12:56:17 GMT; Path=/; Secure
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mEIS%2BJqwDGQWOLWZh85YU9xdu0wIMOn4plM%2FQAjKZw0ESWU035vRaA76%2BGsZMdwEKNtVV4O4nZuRQtBVm9ZBJv0iXhMi3hBK%2Ftm2Uo2K0UAZH4ie9sxyJhvMu%2Fj9hi%2B7N223"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91d27de16b060b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5739&min_rtt=449&rtt_var=10604&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3287&recv_bytes=1262&delivery_rate=8258555&cwnd=254&unsent_bytes=0&cid=98ddb1b1664b5fdb&ts=259&x=0"
X-Firefox-Spdy: h2
|
|
| bleleadersto.com/favicon.ico | 104.21.16.26 | 404 Not Found | 159 B |
URL GET bleleadersto.com/favicon.ico IP104.21.16.26:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subjectbleleadersto.com FingerprintB1:1C:BB:F2:95:91:A4:5B:87:41:B5:21:2E:F8:E0:8F:62:2F:E9:AD ValiditySun, 19 Jan 2025 17:09:06 GMT - Sat, 19 Apr 2025 18:06:53 GMT
File typeHTML document, ASCII text, with no line terminators Hash047df4239d5e57f4c78db606a5859d7b 6f2a5da57c2a02837e19f8ac1158db728f3ad62c 45eda3cf633f023269cef5c11cf1c1d5dde3345afdc28610589ef3682ae5130a
GET /favicon.ico HTTP/1.1
Host: bleleadersto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bleleadersto.com/s?VaADCpdr
Cookie: uid=2Sf6vTb8HHVqY5h1F90xMWytx2aivJGR
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Sat, 08 Mar 2025 12:56:17 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fXdAwYDag%2BG0AV%2B7SaT7JhJWBtuBDz4RIEagyUMKm%2FTvmuQd%2Fd90sVU1SqfEs9A61R7Uu6NULIsFPccKcq%2FnAyTD1RevM%2F3X3e7Gi9pK8kn6xW%2BUHo4JK3UHMHk2vhkF%2BOY3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91d27de528081c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3192&min_rtt=1299&rtt_var=1839&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4134&recv_bytes=1248&delivery_rate=453363&cwnd=12000&unsent_bytes=0&cid=668ca62a4ef9087b&ts=601&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| sofoseveralyears.org/UkJ3a2p9fRQYVwAaJT4+FAhEOi0Iei4jOBAbRF4bNikhHwwFE1EfAzZ/RltbY3RGWUwiKxNWWWdkBB8LJjcEVlt0KxkNBW9kAVZafHVZUkRjZAJWW3Q2BwoNb3NRGx4mLkpaXWZzQ1hSZ3VPWVxj | 172.67.210.68 | 204 No Content | 0 B |
URL GET sofoseveralyears.org/UkJ3a2p9fRQYVwAaJT4+FAhEOi0Iei4jOBAbRF4bNikhHwwFE1EfAzZ/RltbY3RGWUwiKxNWWWdkBB8LJjcEVlt0KxkNBW9kAVZafHVZUkRjZAJWW3Q2BwoNb3NRGx4mLkpaXWZzQ1hSZ3VPWVxj IP172.67.210.68:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subjectsofoseveralyears.org FingerprintD2:9C:99:65:9B:45:C6:F8:6C:4F:AD:F3:26:7E:85:CA:9C:D5:07:04 ValidityMon, 17 Feb 2025 21:29:42 GMT - Sun, 18 May 2025 22:27:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /UkJ3a2p9fRQYVwAaJT4+FAhEOi0Iei4jOBAbRF4bNikhHwwFE1EfAzZ/RltbY3RGWUwiKxNWWWdkBB8LJjcEVlt0KxkNBW9kAVZafHVZUkRjZAJWW3Q2BwoNb3NRGx4mLkpaXWZzQ1hSZ3VPWVxj HTTP/1.1
Host: sofoseveralyears.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bleleadersto.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sat, 08 Mar 2025 12:56:18 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lSJdyd%2Fau2oojASiUHFOk35%2BXk%2BFsPaztqzhm%2FR4lZTTjWebfayQ7iSOxkz12SLnvatZDRdffvyb5tJG1D31fz3BUTBo2BSuhzYmiLwDw%2FAeIZVspgr18whPu3L9%2BC5knqR0je2y4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91d27deaa875b51d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=525&min_rtt=446&rtt_var=151&sent=8&recv=10&lost=0&retrans=0&sent_bytes=3225&recv_bytes=1200&delivery_rate=7400340&cwnd=254&unsent_bytes=0&cid=9d904daa697d9d9d&ts=144&x=0"
X-Firefox-Spdy: h2
|
|
| fingerprinting36542.s3.us-east-1.amazonaws.com/loadFingerPrint.js |  54.231.230.242 | 200 OK | 653 B |
URL GET fingerprinting36542.s3.us-east-1.amazonaws.com/loadFingerPrint.js IP54.231.230.242:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerAmazon Subjects3.amazonaws.com FingerprintA8:B7:0A:0A:76:F1:C8:90:EF:EA:E7:A8:8D:3D:31:36:31:27:2B:DF ValiditySat, 18 Jan 2025 00:00:00 GMT - Tue, 06 Jan 2026 23:59:59 GMT
File typeASCII text, with very long lines (668), with no line terminators Hashbacb40167a568832a4fed3c47f6fe051 4015ffe562d48e49ed0ce2909c56a6cf700fa811 fa733fd39c911de7f52016b752c6c2af57c1e42b397e371ed747ca5b0ba2bf21
GET /loadFingerPrint.js HTTP/1.1
Host: fingerprinting36542.s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bleleadersto.com
DNT: 1
Connection: keep-alive
Referer: https://bleleadersto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: gkib33rtRTeBGqNkVYPV/pYbszHb/X8Xy3Di2Y+HakC4ZfqqpU/ptdhBBZzY9f3MSba3tdClhR4=
x-amz-request-id: 3T5JN84Q8N1SMGEM
Date: Sat, 08 Mar 2025 12:56:20 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, DELETE
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Last-Modified: Mon, 09 Dec 2024 12:05:18 GMT
ETag: "6c2ea9c45e0053e2d4fe3eaeada5d896"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/javascript
Content-Length: 653
Server: AmazonS3
|
|
| nismscoldnesfspu.org/tc | 104.21.61.190 | 200 OK | 0 B |
IP104.21.61.190:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subjectnismscoldnesfspu.org Fingerprint85:47:D9:28:A1:E5:43:AA:77:27:75:1C:DF:F0:6D:33:76:76:60:EB ValidityThu, 06 Mar 2025 10:24:00 GMT - Wed, 04 Jun 2025 11:22:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /tc HTTP/1.1
Host: nismscoldnesfspu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bleleadersto.com/
Origin: https://bleleadersto.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 08 Mar 2025 12:56:19 GMT
content-type: application/json
server: cloudflare
access-control-allow-origin: https://bleleadersto.com
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-methods: POST, GET, OPTIONS, HEAD
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
content-encoding: br
set-cookie: ci=1106026366953796; SameSite=None; Secure; Max-Age=86400
cf-ray: 91d27df0dc725696-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 | 142.250.74.35 | 200 OK | 7.9 kB |
URL GET fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 IP142.250.74.35:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA4:5F:89:8D:68:B4:5F:99:BE:F5:66:6F:C1:5E:A5:8C:72:BF:1E:D5 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bleleadersto.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Mar 2025 11:01:13 GMT
expires: Fri, 06 Mar 2026 11:01:13 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:53:08 GMT
content-type: font/woff2
age: 179707
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap | 142.250.74.10 | 200 OK | 34 kB |
URL GET fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900&display=swap IP142.250.74.10:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintF1:11:17:AF:9C:89:34:EE:D5:CB:84:40:84:EA:01:19:A9:F6:ED:C2 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeASCII text, with very long lines (1572) Hash96bbf8b72a82b48af0dae5d748623ba5 298fbfe2e119d786f19a7414392bb2ee6f7dde64 1222c171f51afb03d90e701e6d1a9dbdbe31514f57c26b689f4e230ef328391f
GET /css2?family=Roboto:wght@100;300;400;500;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bleleadersto.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 08 Mar 2025 12:56:17 GMT
date: Sat, 08 Mar 2025 12:56:17 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d1wzdj81h1hubn.cloudfront.net/7472482d268fe2bd3b1d26d74862c441ab6802e4ef02d9ab3cb23660f8329d50.png | 54.230.245.70 | 200 OK | 385 kB |
URL GET d1wzdj81h1hubn.cloudfront.net/7472482d268fe2bd3b1d26d74862c441ab6802e4ef02d9ab3cb23660f8329d50.png IP54.230.245.70:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typePNG image data, 333 x 500, 8-bit/color RGB, non-interlaced Size385 kB (385149 bytes) Hash2b17e59e65364505a5d2ccfea9156ea6 be0d8c615f3277e493614d54e464a3f68380ee0d d5c0fd0ab8725697ca7cad65c74be83b6f5a76564f0f0427d33748e9a911866c
GET /7472482d268fe2bd3b1d26d74862c441ab6802e4ef02d9ab3cb23660f8329d50.png HTTP/1.1
Host: d1wzdj81h1hubn.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bleleadersto.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 385149
last-modified: Thu, 06 Mar 2025 06:15:29 GMT
x-amz-server-side-encryption: AES256
x-amz-meta-timestamp: 2025-03-06T00:46:42.041173
accept-ranges: bytes
server: AmazonS3
date: Sat, 08 Mar 2025 12:56:17 GMT
etag: "2b17e59e65364505a5d2ccfea9156ea6"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tKNOPfDrXl7YJ-g3jOMRQpei0RzY_8vFB87RGjJh4fweia6TMOZiYQ==
age: 11327
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/asd100.bin | 104.21.16.1 | 200 OK | 102 kB |
URL GET ukankingwithea.com/asd100.bin IP104.21.16.1:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
Size102 kB (102400 bytes) Hash4c6426ac7ef186464ecbb0d81cbfcb1e 5a6918eebd9d635e8f632e3ef34e3792b1b5ec13 f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bleleadersto.com/
Origin: https://bleleadersto.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 08 Mar 2025 12:56:18 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://bleleadersto.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sat, 08 Mar 2025 12:56:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DOKvlMznXAiL%2BFi6eeipi6vnJlQA%2FXDNRjPMr%2FMF2mIdrds9fTY6L2NSfhlEc6WfAlape7NLDxfUEPulHBtTjXY5wQj3zdE%2BMh77qrAZDRpylUsAqSRC1wYSFqLW2wUpDfRhyvw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91d27dea9a2d7129-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=555&min_rtt=367&rtt_var=314&sent=10&recv=12&lost=0&retrans=0&sent_bytes=4071&recv_bytes=1159&delivery_rate=8104477&cwnd=250&unsent_bytes=0&cid=9a3d11332ef6a3f3&ts=264&x=0"
X-Firefox-Spdy: h2
|
|
| undefined/RkZueXgnJA0URyd7DF8NNCpTXEoAY1w/HHQqBQ5BNncLFkAgNlxXGyopGx0eNCkADVYoIxpcSgAcI0kiLhBfFSkNF1YBIi0lGDsvNikvShwXHzkeOh8EKxUoABBZOAI1fjYANQcLFAE6CBQ7TRx3Bx49MAM8PzoTFgxcKyEKdz9PN3V2Fjo8AGNcPyo8MSgYFS0QJR45cxYJTB8EAgVPPCgiJjcSdxQLSC4+Cjs0CAUrAQogFQ8rNCwEIicOLj4KKDNPAgIJEy8vKSA3FjEELz8qcyc8I0gTHlYMLy8hKDY7cwc3SDYoCF4dEhN0ChY5dC48GhU2PjdIVQgoIhUXKRBcN0AHBzw8IhEqIho+ED8PFz4sE1waChQRICo+KyEvGhN/KA07InYTOjhAEwVeNhsrMl8dPgArDyg2dRM5I0AHHjcxKC8yOTA5cjAIOD0HEykrDA4eNDExKxctXxI1KQAJRS0vWxQaCDEHHw | 0.0.0.0 | | 0 B |
URL GET undefined/RkZueXgnJA0URyd7DF8NNCpTXEoAY1w/HHQqBQ5BNncLFkAgNlxXGyopGx0eNCkADVYoIxpcSgAcI0kiLhBfFSkNF1YBIi0lGDsvNikvShwXHzkeOh8EKxUoABBZOAI1fjYANQcLFAE6CBQ7TRx3Bx49MAM8PzoTFgxcKyEKdz9PN3V2Fjo8AGNcPyo8MSgYFS0QJR45cxYJTB8EAgVPPCgiJjcSdxQLSC4+Cjs0CAUrAQogFQ8rNCwEIicOLj4KKDNPAgIJEy8vKSA3FjEELz8qcyc8I0gTHlYMLy8hKDY7cwc3SDYoCF4dEhN0ChY5dC48GhU2PjdIVQgoIhUXKRBcN0AHBzw8IhEqIho+ED8PFz4sE1waChQRICo+KyEvGhN/KA07InYTOjhAEwVeNhsrMl8dPgArDyg2dRM5I0AHHjcxKC8yOTA5cjAIOD0HEykrDA4eNDExKxctXxI1KQAJRS0vWxQaCDEHHw IP0.0.0.0:0
Requested byhttps://bleleadersto.com/s?VaADCpdr
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /RkZueXgnJA0URyd7DF8NNCpTXEoAY1w/HHQqBQ5BNncLFkAgNlxXGyopGx0eNCkADVYoIxpcSgAcI0kiLhBfFSkNF1YBIi0lGDsvNikvShwXHzkeOh8EKxUoABBZOAI1fjYANQcLFAE6CBQ7TRx3Bx49MAM8PzoTFgxcKyEKdz9PN3V2Fjo8AGNcPyo8MSgYFS0QJR45cxYJTB8EAgVPPCgiJjcSdxQLSC4+Cjs0CAUrAQogFQ8rNCwEIicOLj4KKDNPAgIJEy8vKSA3FjEELz8qcyc8I0gTHlYMLy8hKDY7cwc3SDYoCF4dEhN0ChY5dC48GhU2PjdIVQgoIhUXKRBcN0AHBzw8IhEqIho+ED8PFz4sE1waChQRICo+KyEvGhN/KA07InYTOjhAEwVeNhsrMl8dPgArDyg2dRM5I0AHHjcxKC8yOTA5cjAIOD0HEykrDA4eNDExKxctXxI1KQAJRS0vWxQaCDEHHw HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bleleadersto.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| fonts.googleapis.com/css?family=Poppins:wght@300;400;500;600;700&display=swap | 142.250.74.10 | 200 OK | 838 B |
URL GET fonts.googleapis.com/css?family=Poppins:wght@300;400;500;600;700&display=swap IP142.250.74.10:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintF1:11:17:AF:9C:89:34:EE:D5:CB:84:40:84:EA:01:19:A9:F6:ED:C2 ValidityWed, 26 Feb 2025 15:33:59 GMT - Wed, 21 May 2025 15:33:58 GMT
File typeASCII text, with very long lines (856), with no line terminators Hash5156943b0db8129e5eab09b1c17ae5be 218739de99cdbb2473ec48ea85ab0a5a5366236e 77db9e438748081cb84e88d7caf4978e460a7f92e82c4839e86b3bbfa1eccd2b
GET /css?family=Poppins:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bleleadersto.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 08 Mar 2025 12:56:18 GMT
date: Sat, 08 Mar 2025 12:56:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js | 54.231.230.242 | 200 OK | 38 kB |
URL GET fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js IP54.231.230.242:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerAmazon Subjects3.amazonaws.com FingerprintA8:B7:0A:0A:76:F1:C8:90:EF:EA:E7:A8:8D:3D:31:36:31:27:2B:DF ValiditySat, 18 Jan 2025 00:00:00 GMT - Tue, 06 Jan 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fingerprint.js HTTP/1.1
Host: fingerprinting36542.s3.us-east-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bleleadersto.com
DNT: 1
Connection: keep-alive
Referer: https://fingerprinting36542.s3.us-east-1.amazonaws.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: rkxJ2i6WcCxQ7e/4Qk8wnMrgV0j64/+wG6uak2jXwXNPqVr80/fLGkKfJc2UMV2xw3cHazUfcrY=
x-amz-request-id: 3T5JJCX5P47W8JSZ
Date: Sat, 08 Mar 2025 12:56:20 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, PUT, POST, DELETE
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Last-Modified: Mon, 09 Dec 2024 12:08:59 GMT
ETag: "9ac06ba71cc5803c7515b3e8c3a2854d"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: application/javascript
Content-Length: 38143
Server: AmazonS3
|
|
| nismscoldnesfspu.org/tc | 104.21.61.190 | 200 OK | 496 B |
IP104.21.61.190:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subjectnismscoldnesfspu.org Fingerprint85:47:D9:28:A1:E5:43:AA:77:27:75:1C:DF:F0:6D:33:76:76:60:EB ValidityThu, 06 Mar 2025 10:24:00 GMT - Wed, 04 Jun 2025 11:22:28 GMT
File typeASCII text, with very long lines (546), with no line terminators Hasheced5c14f2e46e495af9ed41d95f2724 4d9cbf095569ffb747909d9a0d2e13cf1c915808 f2041c034d9421ededfbc26950655843657e264fb86763f58d79238ac07d6774
POST /tc HTTP/1.1
Host: nismscoldnesfspu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bleleadersto.com/
Content-Type: application/json
Content-Length: 263
Origin: https://bleleadersto.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 08 Mar 2025 12:56:20 GMT
content-type: application/json
set-cookie: ci=1331744490520400; Max-Age=86400; Secure; SameSite=None
access-control-allow-origin: https://bleleadersto.com
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-methods: POST, GET, OPTIONS, HEAD
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dQbUpSdsYiNq1%2FnfqQk6WLqczynM%2BZAO3ZwCxnqfHV%2FSZsNkMt2YcBnJW0J%2FN8LzJJpj3X%2FNF%2BuJeZRnTjR08mxeL1BRdCnJwKm5NAcoAATVZRrMIjGIDd7JLV2dYndH4opPZteGUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91d27df25d3256c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=517&min_rtt=446&rtt_var=178&sent=9&recv=11&lost=0&retrans=0&sent_bytes=3223&recv_bytes=1398&delivery_rate=7400340&cwnd=254&unsent_bytes=0&cid=94355afc8517fa31&ts=839&x=0"
X-Firefox-Spdy: h2
|
|
| dfdgfruitie.xyz/adserver/yzfdmoan.js | 104.21.13.114 | 200 OK | 0 B |
URL GET dfdgfruitie.xyz/adserver/yzfdmoan.js IP104.21.13.114:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subjectdfdgfruitie.xyz Fingerprint3D:5F:4C:09:3A:DE:03:B0:84:91:4A:78:4A:CA:F4:D5:20:44:2C:44 ValiditySat, 18 Jan 2025 22:23:44 GMT - Fri, 18 Apr 2025 23:23:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adserver/yzfdmoan.js HTTP/1.1
Host: dfdgfruitie.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bleleadersto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 08 Mar 2025 12:56:17 GMT
content-type: application/x-javascript
content-length: 0
last-modified: Fri, 03 Feb 2023 19:26:28 GMT
etag: "63dd5fe4-0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 387
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PtPBJcEJKiCVEdbP7x%2FgiOeIH3o%2FqwM4M3XJWsRY2Sx2TxLhtyE2r%2B7Yi2KLBs%2FPBkPy4TEfpc12QtVU%2FUowSvsCnw1k1B1zCJ49O1UwmHHic%2BwHbtrjbgIZQSUYVEJPLaY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91d27de62fba1c0a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=535&min_rtt=457&rtt_var=182&sent=6&recv=10&lost=0&retrans=0&sent_bytes=3211&recv_bytes=1075&delivery_rate=6862559&cwnd=253&unsent_bytes=0&cid=5854833a6e833f43&ts=27&x=0"
X-Firefox-Spdy: h2
|
|
| d2lkw9p1eo8fp2.cloudfront.net/?tid=1011612 | 54.230.245.40 | 200 OK | 269 kB |
URL GET d2lkw9p1eo8fp2.cloudfront.net/?tid=1011612 IP54.230.245.40:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1741) Size269 kB (269142 bytes) Hash332560264f87b276b267ed7ca54ca1c5 a69704bccde951fd0f74e1672fd256ec8f29892d 68192fe7466fd7a8e023b04d71840a37a78e7b90d3d105659f8287341e35d173
GET /?tid=1011612 HTTP/1.1
Host: d2lkw9p1eo8fp2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bleleadersto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 72714
date: Sat, 08 Mar 2025 12:56:17 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H0ev8iK4I47xy2K48B09qPwQ2aHKOFLiK0dtc-4EOhgvBhjM84trBw==
X-Firefox-Spdy: h2
|
|
| ukankingwithea.com/ | 104.21.16.1 | 200 OK | 26 B |
IP104.21.16.1:443
Requested byhttps://bleleadersto.com/s?VaADCpdr CertificateIssuerGoogle Trust Services Subjectukankingwithea.com Fingerprint02:7E:37:44:90:B9:05:B4:82:CD:5A:71:84:A1:C8:84:66:33:BC:78 ValiditySat, 01 Mar 2025 13:28:14 GMT - Fri, 30 May 2025 14:26:54 GMT
File typeASCII text, with no line terminators Hash9dbbe18646a0059e6a6dda19018a80f0 9ec522007957637ac097989a14c08a3ffb510f87 45e04f689b15a0d5ad4451d6944eaa404348d3bf69eb826d8cfdecad6a1ef065
GET / HTTP/1.1
Host: ukankingwithea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bleleadersto.com/
Origin: https://bleleadersto.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 08 Mar 2025 12:56:18 GMT
content-type: text/plain
set-cookie: csu=870197233408404@1@1741438578; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://bleleadersto.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XmFAFu0V5ZdZMSQ8Rh8Aa91k0vHSxpkU20HtJtSv%2FgXuNUK%2FJD%2Fb7z2y40AFeitIyibbA%2BudB6%2BxA1UqqE99SURo8g%2F9Vnaw0dbzI2ljHCPDQf8ZwVSfv71Xq8EP4eBPMz%2F366U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91d27dea9a2b7129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=448&min_rtt=367&rtt_var=134&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3219&recv_bytes=1159&delivery_rate=8104477&cwnd=248&unsent_bytes=0&cid=9a3d11332ef6a3f3&ts=166&x=0"
X-Firefox-Spdy: h2
|
|