Report - www.poisonfool.co/ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML

Report Overview

Submitted URL
www.poisonfool.co/ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY
IP
172.67.171.64
ASN
#13335 CLOUDFLARENET
Submitted
2022-11-25 23:16:18
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	3.1 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	385 B	44 kB	142.250.74.168
connect.facebook.net	139	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	374 B	29 kB	31.13.72.12
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	63 kB	34.120.237.76
www.facebook.com	99	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	513 B	373 B	31.13.72.36
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
www.poisonfool.co	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.2 kB	179 kB	104.21.29.18
www.google.no	25607	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	514 B	694 B	142.250.74.3
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.76.226
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	5.6 kB	142.250.74.3
stats.g.doubleclick.net	96	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	604 B	711 B	142.250.150.154
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.215.56.181
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	373 B	21 kB	142.250.74.174
www.google.com	7	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	515 B	694 B	142.250.74.164

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-25	medium	www.poisonfool.co/ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	connect.facebook.net/signals/config/936966913435799?v=2.9.89&r=stable	304 kB	2023-03-11	2023-03-11
Pretty URL connect.facebook.net/signals/config/936966913435799?v=2.9.89&r=stable IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 20:19:07 Last Seen2023-03-11 20:19:07 Times Seen1 Hash 4eac6684cb6e59bf5825e01dcbcbface 1102eef6abc430ab58dd21a9b007c57be39a857a bdde2e7375a044719c2cfa762c238a63d770ad9e043aaa0b1b21b3d5b1988f5b Loading...

	www.poisonfool.co/ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY	337 B	2023-03-11	2023-03-11
Pretty URL www.poisonfool.co/ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY IP 104.21.29.18 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 20:19:07 Last Seen2023-03-11 20:19:07 Times Seen1 Hash 41911db19372c76571ddbfc6256cf662 8e0200ead16eb0e7cbfcfbd3cbf84d46a6aea2a5 bf573b02789dd36b5db6732fa4c34aecc6a4cb7b4741de67a1bb2200890d9836 Loading...

	www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY	154 B	2023-03-07	2024-03-13
Pretty URL www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY IP 104.21.29.18 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:24 Last Seen2024-03-13 17:48:30 Times Seen54 Hash ea6fb5829b8b3345ad595b21c0eaedb0 2c6c4609804f99e09ad777a308eaf4f26ec04474 5be5ed06f4b849d7af02562365acb798fac639c00cf9e2e2dd1fbb0df5068cad Loading...

	www.poisonfool.co/clicks/steetbitepro2_files/fbevents.js	93 kB	2023-03-07	2023-12-26
Pretty URL www.poisonfool.co/clicks/steetbitepro2_files/fbevents.js IP 104.21.29.18 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:42:28 Last Seen2023-12-26 08:25:40 Times Seen151 Hash 1de516a5b6b1c6033b92ee5f5d50c140 9e37da5d5d789074d1dadd60977a9575a6332dd5 9e7ea2b4ba8e2bcc4a964d6192e4671dc5f6863a1c7e35b52b229a3c1e67a68d Loading...

	connect.facebook.net/en_US/fbevents.js	105 kB	2023-03-08	2023-11-28
Pretty URL connect.facebook.net/en_US/fbevents.js IP 31.13.72.12 ASN #32934 FACEBOOK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:10 Last Seen2023-11-28 17:55:58 Times Seen32 Hash a6ef7927128284961f4cadd572969f09 57e21033749687e69de710a0be6d4244edf1fe51 d5c905d7ce4679b183eb11f7c6811682ddffbf0f037590360ae2b1a84a51ef1b Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-08	2024-04-20
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:22:31 Last Seen2024-04-20 17:36:09 Times Seen1522 Hash fda30e8a22c9bcd954fd8d0fadd0e77c ae47cd34cbde081a48d7f92fc80aaf06a1381193 b42e4a056cb5b80c5a315040826866445ec9332f0749e184509ab2d9d3b86719 Loading...

	www.poisonfool.co/jquery-1.11.0.min.js	96 kB	2023-03-07	2024-04-23
Pretty URL www.poisonfool.co/jquery-1.11.0.min.js IP 104.21.29.18 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:10 Last Seen2024-04-23 23:22:33 Times Seen18496 Hash 8fc25e27d42774aeae6edbc0a18b72aa b66ed708717bf0b4a005a4d0113af8843ef3b8ff b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682 Loading...

	www.googletagmanager.com/gtag/js?id=UA-22484186-3	112 kB	2023-03-11	2023-03-11
Pretty URL www.googletagmanager.com/gtag/js?id=UA-22484186-3 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 20:19:07 Last Seen2023-03-11 20:19:07 Times Seen1 Hash 04d80d74e72da20526b3969b997d762c 328d3e8f3897e9db63777929c14a88a94dae4b62 db74d7f7e090c1216be90e30929e64f98442f4195df973dc944f243bd7f7e5e3 Loading...

	www.poisonfool.co/clicks/steetbitepro2_files/rocket-loader.js	12 kB	2023-03-07	2024-03-03
Pretty URL www.poisonfool.co/clicks/steetbitepro2_files/rocket-loader.js IP 104.21.29.18 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:40:10 Last Seen2024-03-03 15:13:42 Times Seen29 Hash 3631cb75af1a858878871ff4fe621e43 894134b313e90d037807a18583aa0dd17089c43e b08cdbc2d30e656a86b20f8342428d5863f70f4b30135b4f4061f754ce932f5e Loading...

	www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY	514 B	2023-03-11	2023-03-11
Pretty URL www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY IP 104.21.29.18 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 20:19:07 Last Seen2023-03-11 20:19:07 Times Seen1 Hash b34098afcd48d46fcdc09cbe0c2a78cf 1e1569cdeb7a100ac3bf4ae364b2635d3bb10bfe 00ec6c4e33bee31ceddbc1e162de87800b4a6bd02dfa744cb1b94574322dd7fb Loading...

HTTP Transactions (52)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4946
Expires: Sat, 26 Nov 2022 00:38:33 GMT
Date: Fri, 25 Nov 2022 23:16:07 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5261
Cache-Control: max-age=132168
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:07 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 11:58:55 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 22:19:10 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3417
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4837
Expires: Sat, 26 Nov 2022 00:36:44 GMT
Date: Fri, 25 Nov 2022 23:16:07 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: XAcTDmZtXWn8nWqXAZTjPbgTvYSulrnb/5lCpFD2+AcB7gSwzsToZgFdiupSxfHqlTlO92zsVpY=
x-amz-request-id: S0ZG66PY7PEM2MTQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 22:40:58 GMT
age: 2109
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

www.poisonfool.co/ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

104.21.29.18

200 OK

570 B

URL HTTP/1.1
www.poisonfool.co/ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (315)
Size
570 B (570 bytes)
Hash
a3d6be05e5d5b4962f922c60caaa4e1b
e8e858e2454fcab5798505f82de4fb7b0e1e3dfb
e61810de978f4b31fc08b7f39f9aa97e63c15a62d1ef0303f2b21d9574415376

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pgzzhnUazRxOOYZeZv2VBCCL3bt8NUbhvyyHgQI6hxhqrmTo0lUYPGAzZ7bNV6cCQIOeSqFHYkjl7DAA1x1bmQiLCxhDF5GZOcNu3Z0cI2tdy8fTVGAS6N%2ByfpG2tAfSELRKhg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76fe17188b09b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 23:16:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

www.poisonfool.co/jquery-1.11.0.min.js

104.21.29.18

200 OK

33 kB

URL HTTP/1.1
www.poisonfool.co/jquery-1.11.0.min.js
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32341)
Size
33 kB (33436 bytes)
Hash
95fe3f4dd117c33f6015e1c3d6df1d0d
d5b8856932d1ea63f51824de0bb50670d2e960bc
e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16

HTTP Headers

GET /jquery-1.11.0.min.js HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 07:16:06 GMT
ETag: W/"636a0236-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 120
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cdUPIm5rZHMlFG80Qs69Oc7oz7jpmYLRGp54K6tJ5YHBpLc8NEYJ7zOjO%2B0RN0sTyeJG4974HIoXWPmC6TMmqhMTwgUkL1ZcVaLFZlLh5LpN0kKsXCMQwBTk9xcHv8qAaAcWsw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe171b2ebdb524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.poisonfool.co/offer.php?id=287&sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

104.21.29.18

200 OK

364 B

URL HTTP/1.1
www.poisonfool.co/offer.php?id=287&sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (334)
Size
364 B (364 bytes)
Hash
95d6291836d8b28d9955ff0ad20a3cff
e21ca7279fb84fc8906ed9d62bcdf3bdda3e6cb3
dadfeccaff6cc7894e04379cd0319260103838f28f1ccbf40f51e3df67a219b2

HTTP Headers

GET /offer.php?id=287&sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/ppcbd/scjikew470xkti/JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RiqEKKc94FkAOhyb5x7quksu4BiJ%2FX%2Brf%2FTC0QOyLaju1kofFP653Isyw8w3gR0N2VRi7FPw%2FxRvUagrKNUDMia0UZ5J0lg2ZAsOYDlQUCOwBn8wxPTc2YdtXcsflfS%2FsxOw%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76fe171bcf83b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 23:08:53 GMT
cache-control: public,max-age=3600
age: 434
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1875
Cache-Control: max-age=123718
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:08 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 09:38:06 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

104.21.29.18

200 OK

3.5 kB

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (730), with CRLF line terminators
Size
3.5 kB (3542 bytes)
Hash
1849bd1253bae93ff11942eadbe37dbb
53efb1b04ad4e11cd8985055d50a375b9c3d20dd
41ca0eb4e029b690ee5091f8feb156b1d4bcf85189837472a19682d59fc85ae7

HTTP Headers

GET /clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x%2FnuTO33PrHOXw7eRNM9x1Pe9tXmAcEXumJ2UAsP3rJPCNR4eknTDzU3LjDVp2AxPw31xDR5%2Fa9Wpd8Ffy5%2F%2F%2FtrcD5cLgVp0o8YziY8bREi80L4r20%2BUoPR3JYjXSdwCC4KdA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76fe171db9e0b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

www.googletagmanager.com/gtag/js?id=UA-22484186-3

142.250.74.168

200 OK

44 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=UA-22484186-3
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1921)
Size
44 kB (43605 bytes)
Hash
dfc20070b6c3e81af8376d828363661e
16928aa355fce494246091ba075a4289bcbbae12
561d36d88d0bc64abc81e847178c06b8255ade67267e5bdcd08b8cf509bf6bbf

HTTP Headers

GET /gtag/js?id=UA-22484186-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.poisonfool.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 23:16:08 GMT
expires: Fri, 25 Nov 2022 23:16:08 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43605
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

push.services.mozilla.com/

34.215.56.181

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.215.56.181:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fnwkCiWOd30AAuB4Bn0TCw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7f2wW4NFV6/6NGlW5GXGYgN/U3I=

www.poisonfool.co/clicks/steetbitepro2_files/base.css

104.21.29.18

200 OK

2.0 kB

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2_files/base.css
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (8731)
Size
2.0 kB (2004 bytes)
Hash
905c1b997eadefb5eb84e2cd3d217e4b
0b0ee12f4ccab5955ef0ecdd86b10b6418ab6e7e
8ac6eac6cc9e8856003fa1afddc453b61c9210a4a83950991fdc8afa45d03720

HTTP Headers

GET /clicks/steetbitepro2_files/base.css HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:08 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:24 GMT
ETag: W/"6369f3fc-221c"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K4oy2SiOEReroqcPidS3x3aVB1D6UEHlCu2HezTPnmIKCV2MC75s5n%2B644Q2Gr78o%2FN3UeEVt3M84%2BrVi9e1FNjChV41TmKBSXP2dsIRixgtmZLY3BLJr1EbxVSX6BDzZfS1Ew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe171efb55b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

www.poisonfool.co/clicks/steetbitepro2_files/rocket-loader.js

104.21.29.18

200 OK

3.9 kB

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2_files/rocket-loader.js
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (12309)
Size
3.9 kB (3860 bytes)
Hash
97a5b3ddc4e130ed3624f02380ec31fa
111d5e702a22a33cec980004a2ff3784235b7c9c
71bb2495165df6b66a4d5465d731118c449e57aca316098ca9c0d51950dc4814

HTTP Headers

GET /clicks/steetbitepro2_files/rocket-loader.js HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:24 GMT
ETag: W/"6369f3fc-3016"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IO0HyKmw2YcO7Ya7gPSQF20RKAZYj%2FujFrPCPz%2FyynvVE8kuNop791jTh%2B6AkMqYQfJcgvoJEHsAlHc89KM5DOF2OB7DU0RNu1RvZKm9%2FE2n4B0Bf4DUmSZFxMtw%2Bt9aIrdu6A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe171f0a0dfac0-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

www.poisonfool.co/clicks/steetbitepro2_files/fbevents.js

104.21.29.18

200 OK

24 kB

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2_files/fbevents.js
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (64379)
Size
24 kB (23799 bytes)
Hash
d9151d21df83c6c2c77e3c16fe91774f
23ecd1d07549026fb74b05c50e6463d88251c7fb
e5ff4454c227d8af2b2d980ee18b472ae499f11c957970499e3b56996c9cf4ee

HTTP Headers

GET /clicks/steetbitepro2_files/fbevents.js HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:24 GMT
ETag: W/"6369f3fc-16cc0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hq7shu3klmkvWTVFtVZWuj6XsWOGI62Mhba%2FBIZ0a3uZzkTGzLCiKRrNM%2BqCit%2BSu%2BZm%2BMMJylry3fG0HNJG%2Fk2UpuwSGiJ6v7fMjV4aRDz5CPd1j0fyhYoyZKLC%2F66kGjusJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe171efb03fab8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

www.poisonfool.co/clicks/steetbitepro2_files/bootstrap.css

104.21.29.18

200 OK

24 kB

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2_files/bootstrap.css
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65324)
Size
24 kB (23801 bytes)
Hash
90b760550e92b136c21632d9a36b1a9a
ad3beb5fb1af48397dab200586443e0cba5cf344
1e307a17a4fb3fbfae658e6dac63cbed9022fa6842f03e01a974c94b0257d6d2

HTTP Headers

GET /clicks/steetbitepro2_files/bootstrap.css HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:08 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:24 GMT
ETag: W/"6369f3fc-27293"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yB58xwTZXNb07zx27WhOZcfxZXzl0zuc70Q0PdTYSCmCtj0DuFiUF7zNXSZQMLNbOR68HOkkP%2FTdkqxd0%2BuE2OlUmCDZICsOz5H5f6w848Q2eKH3r5fVxQ%2B%2BM%2FnIbmBQoIIBGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe171efb4ab527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

www.poisonfool.co/clicks/steetbitepro2_files/icon-min.jpg

104.21.29.18

200 OK

4.4 kB

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2_files/icon-min.jpg
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3\012- data
Size
4.4 kB (4362 bytes)
Hash
d77f68dbba83d20b59a3cfb15b97d570
5d7c67dffd1a9fb0a989319a051d5ce47c813892
c654ac745beed1f4a741a1997f5050b4cc5cbeac6d8a4ce0067cfda3791c5295

HTTP Headers

GET /clicks/steetbitepro2_files/icon-min.jpg HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:09 GMT
Content-Type: image/jpeg
Content-Length: 4362
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:24 GMT
ETag: "6369f3fc-110a"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FYL6KEjtfe738pw4O9OxmwNDFjwegW%2BmiccZjJMKTp7nc6OKcB%2FS%2BReAl5ui8prqWfvrN18llwWYDIaKO3Jua%2FMFmtBCTKZyNHMylmchUJGfL4vNkH37H1LrTGt6bpxTz3E1oQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe17238e22fac0-OSL
alt-svc: h2=":443"; ma=60

www.poisonfool.co/clicks/steetbitepro2_files/tr.gif

104.21.29.18

200 OK

44 B

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2_files/tr.gif
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 1 x 1\012- data
Size
44 B (44 bytes)
Hash
b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa

HTTP Headers

GET /clicks/steetbitepro2_files/tr.gif HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:09 GMT
Content-Type: image/gif
Content-Length: 44
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:24 GMT
ETag: "6369f3fc-2c"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MtSSMM111qRSBJNd2%2BJVJJKsfA7M7oUesSj4gCd4e8jZ67%2Btyip49apD%2F0E9LPNNtj%2Ffr4HiH2MdKYjZ1Zxe3RvHRlp8MZkj7PwWzRB8i5Iu9icujViZVCab%2FvZIii968eV71g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe17238ccfb50f-OSL
alt-svc: h2=":443"; ma=60

www.poisonfool.co/clicks/steetbitepro2_files/blank.html

104.21.29.18

200 OK

548 B

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2_files/blank.html
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254), with CRLF line terminators
Size
548 B (548 bytes)
Hash
0a16aec008013f053a922381dee71f9d
13a69b2e43a426ce54f9a47146955ec0bb169172
4686bf42f5ae452ed851ee0e084ece44ceccef9bc2fde5eee10a33a6c92461ae

HTTP Headers

GET /clicks/steetbitepro2_files/blank.html HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:24 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aaykxliQL%2BfnZLvoUaM7OnWRCt9WmgGnqd4Tr3ifWdO%2B5aGAzw592Gt2XrAg7W45Z0Lv1zcFoyehitceho07jYSzpG15cxJpDN0q%2Ba%2Bgi6rp3zaSlittVtoSYl6CLsVpG1BHhg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76fe1723bafbb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

www.poisonfool.co/favicon.ico

104.21.29.18

200 OK

69 B

URL HTTP/1.1
www.poisonfool.co/favicon.ico
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
MS Windows icon resource - 1 icon, 16x16\012- data
Size
69 B (69 bytes)
Hash
f12fb6edbda074603f749a028770f49a
419983c6073469bac7fb8535a847b8f78c2040ce
8aec3412c7c37feacec2dc9d7b2f3560a2e0af0af573085665a57e1d09ab397d

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:09 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 07:16:01 GMT
ETag: W/"636a0231-57e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 121
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w2Btnmyvj1%2B7YU%2B7FOZCOJGjrvU3QEQ%2Btq0S3pgmc754a39R5jnFpBpAnN%2FbGxxwWEY2kvr2Rc9xg2En3J9LpCpz8x7hUSzhS3b4bi7CNfeup%2FvsJEaN%2FHb3Cfd0EEGEqC6mhA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe17261ff9fac0-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
966255e8eae5f73b5fe45aab88646f99
57eadbf09ae6a8170cdfe3b0691b908f49e2c08d
a99ecadf4c294cebf0c392ea036f508443cb471c44773cc5ea0212ab86074cbe

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6421
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:09 GMT
Last-Modified: Fri, 25 Nov 2022 21:29:08 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20039 bytes)
Hash
47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.poisonfool.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 22:41:08 GMT
expires: Sat, 26 Nov 2022 00:41:08 GMT
cache-control: public, max-age=7200
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
age: 2101
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

connect.facebook.net/en_US/fbevents.js

31.13.72.12

200 OK

27 kB

URL HTTP/2
connect.facebook.net/en_US/fbevents.js
IP
31.13.72.12:0
ASN
#32934 FACEBOOK

File type
ASCII text, with very long lines (64348)
Size
27 kB (27340 bytes)
Hash
44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396

HTTP Headers

GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.poisonfool.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 0Ns4JvflEq3mqrcxHeuoHJc4Gq6Et/vqh2tRmFFB8FFlIcSfcLDaDZVO1tXIRRN5mc/dOoe53PWjVcJzlvo2mQ==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:16:09 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
966255e8eae5f73b5fe45aab88646f99
57eadbf09ae6a8170cdfe3b0691b908f49e2c08d
a99ecadf4c294cebf0c392ea036f508443cb471c44773cc5ea0212ab86074cbe

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6421
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:09 GMT
Last-Modified: Fri, 25 Nov 2022 21:29:08 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

www.poisonfool.co/clicks/steetbitepro2_files/6.jpg

104.21.29.18

200 OK

72 kB

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2_files/6.jpg
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 800x600, components 3\012- data
Size
72 kB (72049 bytes)
Hash
a3e3b285195d25c226e08f1d27eeccd1
60eb2fbec6ccc990a3ea97039569ba3e91129115
12333ddcff88941438342afaa2ab9f75dd80eb81a714c94229857502e0a4765e

HTTP Headers

GET /clicks/steetbitepro2_files/6.jpg HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2.php?sid=999510&h=JtHW0sDa4ju5pzw7YQ14ZIotV8bSMDU1PGAMmaMyXIs/Eej-QtfMbzuNhuTRdPe_u11nw6-hCVnaR17f4mB-o3Uvq-ijz8WTME8PV32bXRPJL_-DFDmKWtbIClSc-bLDuTIlM-VhJ5-JKmKwZlmvrUJLpDY4iPbGUlj9aJeuTwRXeBOnqmq4Rxs53ML_7tnhGSUfh3lvGpNmiKDC6Abt6tY

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:09 GMT
Content-Type: image/jpeg
Content-Length: 72049
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:24 GMT
ETag: "6369f3fc-11971"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mEo4ChLq8Fffr7KVcuRjmp1S8l44NnaCmCkKWqtowHGB2NC3DBRyxs3XOXBbJoBY702KyJtSW5hiY5qukxR2eqNZZJEBc2QWlrDbjEoWmqBMSRPlj27SvicQJ2x%2FCSmcGjf0tg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe17238f5efab8-OSL
alt-svc: h2=":443"; ma=60

www.poisonfool.co/clicks/steetbitepro2_files/blank_data/inject.css

104.21.29.18

200 OK

928 B

URL HTTP/1.1
www.poisonfool.co/clicks/steetbitepro2_files/blank_data/inject.css
IP
104.21.29.18:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with CRLF line terminators
Size
928 B (928 bytes)
Hash
e1c22e631b7cce42e3ef13cd9bb02ff5
6c6c2b15c56e776d9eac10babf3a6c4a2bd964ae
93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc

HTTP Headers

GET /clicks/steetbitepro2_files/blank_data/inject.css HTTP/1.1
Host: www.poisonfool.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.poisonfool.co/clicks/steetbitepro2_files/blank.html

HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:16:09 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 06:15:24 GMT
ETag: W/"6369f3fc-f28"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8jUaQ2%2F9p0KeYc86BnDO1rmX%2Bi5wdCOHJAEqTrbnJNewWuQ0NIig%2B2MLX3CUipx7jlJ6NzDiIrgi%2BfAC1nwYuCtUMI%2FDxovX4a3vvGyWOQCfNIfvFRuz%2BQDe2CnMVN0OEWlMVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe1725ae0eb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8814
Expires: Sat, 26 Nov 2022 01:43:03 GMT
Date: Fri, 25 Nov 2022 23:16:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8814
Expires: Sat, 26 Nov 2022 01:43:03 GMT
Date: Fri, 25 Nov 2022 23:16:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8814
Expires: Sat, 26 Nov 2022 01:43:03 GMT
Date: Fri, 25 Nov 2022 23:16:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8814
Expires: Sat, 26 Nov 2022 01:43:03 GMT
Date: Fri, 25 Nov 2022 23:16:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8814
Expires: Sat, 26 Nov 2022 01:43:03 GMT
Date: Fri, 25 Nov 2022 23:16:09 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6382 bytes)
Hash
b72976b3f013ace345c85b0bdfea5f76
3e9004d90ed72f3034eae5cddd476eb50ac63ea6
068a487b9ae3d7461ef16e04cee8802a7b76a2bce19bf66df48b2b1cdb0c772c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab1c6bf9-39a7-42ca-a718-a572401add09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6382
x-amzn-requestid: e1e4c180-7f90-4d4b-a5f4-094e5f542a18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLacUFC4oAMFayA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813de8-09efee9d0604d16c61e3d452;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 22:12:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SR2His1pCOwZHi7bBtnG8QeCtZQsCMeJxs-UCpd79SK_77eM5fWeog==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:17:47 GMT
age: 3502
etag: "3e9004d90ed72f3034eae5cddd476eb50ac63ea6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7c216e6-fb54-4285-8656-a1e15990a37a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.1 kB (8078 bytes)
Hash
70fae9ac56bb7676177d4252757f0180
bd3027af47f20f4bb9ac36cd9e4493e28e6b041c
1378749f1b28b6c56b8e76418fc5dd59cf608a4e64c1e1067b4f19df10233afc

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7c216e6-fb54-4285-8656-a1e15990a37a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8078
x-amzn-requestid: e199b062-09f2-46b8-a8ee-6d7b782f7359
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVC7GT2oAMF5XA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813545-485ea8fd3e785be748834efd;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yJdSAEHw1AFVsBFBSX5G6rqED3Kpi_P69vtTrVVE1vFDtl3XMsyJ4g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:31:51 GMT
age: 2658
etag: "bd3027af47f20f4bb9ac36cd9e4493e28e6b041c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=477693232.1669418169&jid=940563395&gjid=275138017&_gid=871453101.1669418169&_u=YEBAAUAAAAAAACAAI~&z=926868091

142.250.150.154

200 OK

4 B

URL HTTP/2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=477693232.1669418169&jid=940563395&gjid=275138017&_gid=871453101.1669418169&_u=YEBAAUAAAAAAACAAI~&z=926868091
IP
142.250.150.154:0
ASN
#15169 GOOGLE

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a

HTTP Headers

POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=477693232.1669418169&jid=940563395&gjid=275138017&_gid=871453101.1669418169&_u=YEBAAUAAAAAAACAAI~&z=926868091 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.poisonfool.co
Connection: keep-alive
Referer: http://www.poisonfool.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: http://www.poisonfool.co
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 23:16:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc791f23-9e0d-4ffd-991b-9c697774e053.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (14128 bytes)
Hash
e0174b63e0e8e8184799bedd77c7ca5f
ab196fcf5ef72cd13d1f8f370039258b963834ba
ffb99678ae74f059a66aaf5097b1c4b659519012f137b40a644ded7a3c524623

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc791f23-9e0d-4ffd-991b-9c697774e053.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14128
x-amzn-requestid: ac7d027c-55fe-479d-a5ca-baa09eabebea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUgEEXSIAMFzmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813466-061f1c9c36d007347d0c1302;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VBKkrmELCAhKQjBs5fb1udGUtrFAXF2_ifrzd8lTnmDTkdhO6d7clw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:07:00 GMT
etag: "ab196fcf5ef72cd13d1f8f370039258b963834ba"
content-type: image/jpeg
age: 4149
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

2.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ac95573-22e8-41b4-a5f2-d8adbaff2829.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
2.9 kB (2944 bytes)
Hash
5c135ab961de12d926b94f9abae8adbe
139f48ea60880efc6d2977f4d3141809f22adfef
1578a994e7c4eef451f1c744116caa95e1aa995c4817a13832f1ac3487cea95d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ac95573-22e8-41b4-a5f2-d8adbaff2829.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 2944
x-amzn-requestid: 8f1b2573-39ab-442e-8c6e-97538a28aba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWXXEjJIAMFu1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813762-52f27ff536b0c3b84bdfba8e;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:45:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 9hy8v_azPZzuVRv1VN61DoNWbfA83JPs4JcZfRyLo3j6HCtWv_gkNw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:03:27 GMT
age: 4362
etag: "139f48ea60880efc6d2977f4d3141809f22adfef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.3 kB (4309 bytes)
Hash
841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 04:38:44 GMT
age: 67045
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9914 bytes)
Hash
3b1c6878914466cfece680fa7cb73502
47fac81a2dd809df5c42ca1362f71d553572d2b1
6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qKxrYxVsJWOXAbrn6IpwLycF3rknFLkQeDyKOLq5WyflvTLeUjg_Lg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:18:42 GMT
age: 3447
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=477693232.1669418169&jid=940563395&_u=YEBAAUAAAAAAACAAI~&z=914305203

142.250.74.3

200 OK

42 B

URL HTTP/2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=477693232.1669418169&jid=940563395&_u=YEBAAUAAAAAAACAAI~&z=914305203
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=477693232.1669418169&jid=940563395&_u=YEBAAUAAAAAAACAAI~&z=914305203 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.poisonfool.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 23:16:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=477693232.1669418169&jid=940563395&_u=YEBAAUAAAAAAACAAI~&z=914305203

142.250.74.164

200 OK

42 B

URL HTTP/2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=477693232.1669418169&jid=940563395&_u=YEBAAUAAAAAAACAAI~&z=914305203
IP
142.250.74.164:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=477693232.1669418169&jid=940563395&_u=YEBAAUAAAAAAACAAI~&z=914305203 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.poisonfool.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 23:16:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:16:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.facebook.com/tr/

31.13.72.36

200 OK

0 B

URL HTTP/2
www.facebook.com/tr/
IP
31.13.72.36:0
ASN
#32934 FACEBOOK

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /tr/ HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------3052087582454390392564751365
Content-Length: 5526
Origin: http://www.poisonfool.co
Connection: keep-alive
Referer: http://www.poisonfool.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin: http://www.poisonfool.co
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 23:16:10 GMT
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.8 kB (9787 bytes)
Hash
95101ded0fe92a85649a086992948008
afed98649590f2524a9e530c53eebbc1ba36da6a
7f754cb2105494045efe657c47313e77bb26361ca45a6f8cbce1fdb52a15ba01

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6c125eba-03aa-443e-b99e-10c7890258e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 9787
x-amzn-requestid: 51d9848a-868c-4e51-b1a8-30596d0108b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUfxHjToAMFeGA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813464-749244df2aa06b23445d675c;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wkBPzz1thuM-Nm7rBY68psfSROU1fbCCO-TbpBBrYLQmH1ZxQEV1vg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:47:48 GMT
age: 5308
etag: "afed98649590f2524a9e530c53eebbc1ba36da6a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations