upgrading-software.org/gs/private-disk.exe
15.197.172.60200 OK 1.2 kB URL User Request GET HTTP/1.1 upgrading-software.org/gs/private-disk.exe
IP 15.197.172.60:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1177), with no line terminators
Hash 37883aa7c0d6e92c04a350d04ea33fda
a3f52fc0e5e112190b2ff79528c3ff5bfd3d216b
72eb0b7d8ddb3f5f391cef068fd50b63fc0288846c36427a23b4e93c8ed431dc
GET /gs/private-disk.exe HTTP/1.1
Host: upgrading-software.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 19:43:52 GMT
Content-Type: text/html
Content-Length: 1177
Last-Modified: Mon, 13 Nov 2023 23:35:16 GMT
Connection: keep-alive
ETag: "6552b2b4-499"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_gUxZx72a5D4XGbvW7qqhfDcD6U6j9k+8n6mCjnCWOe3/l3pudTfJ9vxV9sWypBTEyTml1eRkSfhHnfqhQZumFg
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=10.116.88.163;Path=/;Max-Age=86400;
country=;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=enom.ACTIVE.5D3C3A1B-1A26-48DD-A7EC-02F11DDF874F;Path=/;Max-Age=86400;
Accept-Ranges: bytes
img1.wsimg.com/parking-lander/static/css/main.ba077a97.css
23.36.79.16200 OK 187 B URL GET HTTP/2 img1.wsimg.com/parking-lander/static/css/main.ba077a97.css
IP 23.36.79.16:443
ASN #20940 Akamai International B.V.
Requested by http://upgrading-software.org/gs/private-disk.exe
Certificate IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
Hash 92cc7bc9897bfb97adb18591dc4642cb
1c42dc26c819be8dd5f5ada83532d7982353e6b3
73cf1f3e2f04d158ad8de2ad926353b2ba0f1e25b145fe063f467120a1341ea8
GET /parking-lander/static/css/main.ba077a97.css HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://upgrading-software.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: hVbAf+7gM2hs36Ag33XHe7fO+0CTgKGXqo80SHegVu0xTx8rqccrPuEXRFHrKfUVzwyRYRPRwMc=
x-amz-request-id: PQPBQ8C3KHV43R4Q
last-modified: Mon, 13 Nov 2023 23:32:18 GMT
etag: "92cc7bc9897bfb97adb18591dc4642cb"
x-amz-server-side-encryption: AES256
x-amz-version-id: S.cohGeac3FUy_snjCsO9LOvUc0sPSaD
accept-ranges: bytes
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 19:43:52 GMT
date: Tue, 28 Nov 2023 19:43:52 GMT
content-length: 187
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
img1.wsimg.com/parking-lander/static/js/main.ed307b3c.js
23.36.79.16200 OK 202 kB URL GET HTTP/2 img1.wsimg.com/parking-lander/static/js/main.ed307b3c.js
IP 23.36.79.16:443
ASN #20940 Akamai International B.V.
Requested by http://upgrading-software.org/gs/private-disk.exe
Certificate IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File type ASCII text, with very long lines (65465)
Size 202 kB (201490 bytes)
Hash 12be8e7ca274474fda2d91c5d8be2866
a41a80ed51a84ae8973a9e2779489f419d12cc6a
5bb6b8410758c3743d0845a1923ec00bdc91cc116c52eb513bf23fb1adf6219e
GET /parking-lander/static/js/main.ed307b3c.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://upgrading-software.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: +XarIoVgW22OY6sAKw23AjF4JjB4KUWh5G6EvsRxRy+Kk1fwMnxeCq+k6w1F8xrURo5n7edf+IA=
x-amz-request-id: PQP55BSPK5WRC4WP
last-modified: Mon, 13 Nov 2023 23:32:12 GMT
etag: "12be8e7ca274474fda2d91c5d8be2866"
x-amz-server-side-encryption: AES256
x-amz-version-id: J9lW9zbdfJIPV6UpIMUQKyHI1xEGGym7
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 19:43:52 GMT
date: Tue, 28 Nov 2023 19:43:52 GMT
content-length: 201490
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
upgrading-software.org/px.js?ch=1&abp=1
15.197.172.60200 OK 476 B URL GET HTTP/1.1 upgrading-software.org/px.js?ch=1&abp=1
IP 15.197.172.60:80
Requested by http://upgrading-software.org/gs/private-disk.exe
Hash d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc
GET /px.js?ch=1&abp=1 HTTP/1.1
Host: upgrading-software.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://upgrading-software.org/gs/private-disk.exe
Cookie: caf_ipaddr=10.116.88.163; country=; city=""; expiry_partner=enom.ACTIVE.5D3C3A1B-1A26-48DD-A7EC-02F11DDF874F
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 19:43:52 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Mon, 13 Nov 2023 23:35:16 GMT
Connection: keep-alive
ETag: "6552b2b4-1dc"
Accept-Ranges: bytes
upgrading-software.org/px.js?ch=2&abp=1
15.197.172.60200 OK 476 B URL GET HTTP/1.1 upgrading-software.org/px.js?ch=2&abp=1
IP 15.197.172.60:80
Requested by http://upgrading-software.org/gs/private-disk.exe
Hash d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc
GET /px.js?ch=2&abp=1 HTTP/1.1
Host: upgrading-software.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://upgrading-software.org/gs/private-disk.exe
Cookie: caf_ipaddr=10.116.88.163; country=; city=""; expiry_partner=enom.ACTIVE.5D3C3A1B-1A26-48DD-A7EC-02F11DDF874F
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 19:43:52 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Mon, 13 Nov 2023 23:35:16 GMT
Connection: keep-alive
ETag: "6552b2b4-1dc"
Accept-Ranges: bytes
www.google.com/adsense/domains/caf.js?abp=1
142.250.74.100200 OK 150 kB URL GET HTTP/2 www.google.com/adsense/domains/caf.js?abp=1
IP 142.250.74.100:443
Requested by http://upgrading-software.org/gs/private-disk.exe
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (1888)
Size 150 kB (149642 bytes)
Hash d11e85092fe36d0a1ae88f5eb2e05964
a240cbbeb42b0792e3b6d088b20709e3d695115d
f70329dfc82cd5a228e13d12727572400f91a1a99af6ef002c6071000f50afa3
GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://upgrading-software.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 28 Nov 2023 19:43:52 GMT
expires: Tue, 28 Nov 2023 19:43:52 GMT
cache-control: private, max-age=3600
etag: "8049099343402813148"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2