e1.o.lencr.org/
23.36.77.32 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aba3f31505a10044aaa8c6cf3e4a2cee
7dca19505f72d50a9a0e5719747cfd5c05be5189
e1aa93e57d38bfb13ba59bcd01c92f95aa76cc03dce0aba2dd6474204c2edc7d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E1AA93E57D38BFB13BA59BCD01C92F95AA76CC03DCE0ABA2DD6474204C2EDC7D"
Last-Modified: Tue, 31 Oct 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4876
Expires: Wed, 01 Nov 2023 23:09:41 GMT
Date: Wed, 01 Nov 2023 21:48:25 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aba3f31505a10044aaa8c6cf3e4a2cee
7dca19505f72d50a9a0e5719747cfd5c05be5189
e1aa93e57d38bfb13ba59bcd01c92f95aa76cc03dce0aba2dd6474204c2edc7d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E1AA93E57D38BFB13BA59BCD01C92F95AA76CC03DCE0ABA2DD6474204C2EDC7D"
Last-Modified: Tue, 31 Oct 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4885
Expires: Wed, 01 Nov 2023 23:09:51 GMT
Date: Wed, 01 Nov 2023 21:48:26 GMT
Connection: keep-alive
cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
172.67.133.57200 OK 0 B URL HEAD HTTP/3 cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
IP 172.67.133.57:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subjectxsportbox.com
Fingerprint6E:37:0E:84:AE:DA:7C:EC:F1:BF:C0:AA:61:5C:1F:E3:F0:E4:BE:EA
ValidityTue, 03 Oct 2023 07:46:06 GMT - Mon, 01 Jan 2024 07:46:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3 HTTP/1.1
Host: cdn.xsportbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 01 Nov 2023 21:48:26 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O6ksKBDtSVONFJOFpNsO84FfoDF0ObBOIR%2BjNrqr9HR3XJLwcBFb%2F8QxHZJgumxgeZr%2BiKcgxCAE%2BIz4%2B9bruo6Fh1ZWp0G48iQuxK9b7hqXCW%2FUhkKAWff0LB3zoXc%2BHK6eRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81f757888bb9568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
chulhawakened.com/rmxWWDcqKHA/71505
23.109.248.0200 OK 20 B URL GET HTTP/1.1 chulhawakened.com/rmxWWDcqKHA/71505
IP 23.109.248.0:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subjectchulhawakened.com
FingerprintB0:4D:57:C7:47:9E:F2:71:19:36:AA:4B:F5:81:68:53:49:CF:B2:47
ValidityWed, 27 Sep 2023 23:57:51 GMT - Tue, 26 Dec 2023 23:57:50 GMT
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /rmxWWDcqKHA/71505 HTTP/1.1
Host: chulhawakened.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Nov 2023 21:48:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://cdn.xsportbox.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Thu, 02-Nov-2023 21:48:26 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Thu, 02-Nov-2023 21:48:26 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
potskolu.net/tag.min.js
139.45.197.245200 OK 26 kB IP 139.45.197.245:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subjectpotskolu.net
FingerprintDB:FB:66:EE:66:1E:42:6F:6F:42:29:5C:01:E0:A1:09:B5:2E:6F:11
ValidityFri, 20 Oct 2023 05:59:32 GMT - Thu, 18 Jan 2024 05:59:31 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d2f88fe741b49e9ba5f60cdca4a9c657
f652a0159d8c3ba9fc7cb4acd1bb82b69f8c5ee0
d7990bca965a7189fd5b61a4c5894fc383909f99623228837e945084bb62de6b
GET /tag.min.js HTTP/1.1
Host: potskolu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 01 Nov 2023 21:48:26 GMT
content-type: text/javascript; charset=utf-8
content-length: 25495
content-encoding: br
x-trace-id: e871a299d11fb0145a5f9cf43260260a
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 09:23:51 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pl20565813.highcpmrevenuegate.com/e9/2c/ff/e92cff90263e690389103e528cff0eba.js
173.233.137.60200 OK 24 kB URL GET HTTP/1.1 pl20565813.highcpmrevenuegate.com/e9/2c/ff/e92cff90263e690389103e528cff0eba.js
IP 173.233.137.60:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subjecthighcpmrevenuegate.com
Fingerprint05:55:3B:E2:80:35:3A:08:FB:BB:55:82:83:A5:E5:78:E0:1D:2F:6E
ValidityFri, 29 Sep 2023 07:37:01 GMT - Thu, 28 Dec 2023 07:37:00 GMT
File type ASCII text, with very long lines (60308), with no line terminators
Hash 31b6c06a361e0e55d872ddc4dd5ff0d3
b4ff04e76177172bf4f38521c500d35124476644
15d6e336f7ad460d0fd0df966847b35472490e2ed3f781bdea01047f4c279dd6
GET /e9/2c/ff/e92cff90263e690389103e528cff0eba.js HTTP/1.1
Host: pl20565813.highcpmrevenuegate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 01 Nov 2023 21:48:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4cfd82071c87195e354bc13fe0bf5ea4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
my.rtmark.net/gid.js?userId=90911fb14bb543d68b3636433599274f
139.45.195.8200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=90911fb14bb543d68b3636433599274f
IP 139.45.195.8:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash 2adb33e5d453670fd25cd8d93a034482
d1ba89e9671f5e3fd23db626de51de681a0218c7
82d6c96b4156c5d2a3d8911eb496c24488dbf78a40663025b086b2423a9960c5
GET /gid.js?userId=90911fb14bb543d68b3636433599274f HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.xsportbox.com
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 01 Nov 2023 21:48:26 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://cdn.xsportbox.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=90911fb14bb543d68b3636433599274f; expires=Thu, 31 Oct 2024 21:48:26 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
54.230.218.11 471 B URL ocsp.r2m03.amazontrust.com/
IP 54.230.218.11:0
Hash 7c5a687c017a430182425b020ec8be69
a3683e3324c50562e4904d994adf8e9d70ca4071
056225c86b8eb5e5062a352c2fbad970ec5ae6b875cc32913ea8f725d7f04cb3
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 01 Nov 2023 21:48:27 GMT
Last-Modified: Wed, 01 Nov 2023 21:27:52 GMT
Server: ECAcc (ska/F6E1)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1LEZM2clidlQVLIZhK53L5J2TjUMBJ5Mdc9jbZcZd3xW3DGcERSQfA==
Age: 1235
professionalswebcheck.com/stats
18.192.148.150200 OK 40 B URL GET HTTP/2 professionalswebcheck.com/stats
IP 18.192.148.150:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerAmazon
Subjectprofessionalswebcheck.com
Fingerprint75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C
ValidityWed, 30 Aug 2023 00:00:00 GMT - Fri, 27 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 78c565230bedbb3bc3e2ec0088fb5390
dec374560e05b1f99cee32aef247725064c895c4
03da807363274d46168a9fe361338949eff58f0281f287e339f053020031a47d
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.xsportbox.com
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Nov 2023 21:48:27 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://cdn.xsportbox.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=ad7e143d-2b49-406f-9bc8-5f5ff7a79203:1:1; expires=Sat, 29 Oct 2033 21:48:27 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
drunkardashamethicket.com/pixel/purst?dl=0&th=0&sc=0&rs=1088&rd=1088&fd=613&bv=23.10.v.29&tmpl=70
192.243.59.20200 OK 0 B URL GET HTTP/1.1 drunkardashamethicket.com/pixel/purst?dl=0&th=0&sc=0&rs=1088&rd=1088&fd=613&bv=23.10.v.29&tmpl=70
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subjectdrunkardashamethicket.com
Fingerprint3F:E8:17:E0:8D:45:83:6A:F3:6C:24:12:03:B0:7F:E9:1E:10:85:08
ValidityTue, 10 Oct 2023 08:41:39 GMT - Mon, 08 Jan 2024 08:41:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1088&rd=1088&fd=613&bv=23.10.v.29&tmpl=70 HTTP/1.1
Host: drunkardashamethicket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 01 Nov 2023 21:48:27 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
banquetunarmedgrater.com/advertisers.js
172.64.170.35200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP 172.64.170.35:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint77:2B:76:51:D0:51:70:02:2E:BF:B7:9B:02:8B:5A:A4:91:FA:0B:9E
ValidityMon, 11 Sep 2023 08:34:11 GMT - Sun, 10 Dec 2023 08:34:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Nov 2023 21:48:27 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: 1d10e38d961d9c7cbdcedb0b698efcf4
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 01 Nov 2023 21:48:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BPlvVwvghZ%2BEqFCgBt7tgSgmKLdSFyekgL9%2BZDYhp9Qq7hC6eOTQ8b6QQDK2As9LgbYbM4Dn8uZMpaMKsu5DVnxpRG0m5kTeaSqm8KmB10hxmpoFYLx7NPvuVRxdInjnw7EhZpxJB9jhtEY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81f7578e7be463d3-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=ad7e143d-2b49-406f-9bc8-5f5ff7a79203&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=e92cff90263e690389103e528cff0eba&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21
192.243.61.225200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=ad7e143d-2b49-406f-9bc8-5f5ff7a79203&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=e92cff90263e690389103e528cff0eba&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21
IP 192.243.61.225:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintBE:8C:78:D1:BA:58:B8:88:10:09:32:1D:31:7A:D9:4A:09:BF:6C:7A
ValiditySat, 23 Sep 2023 07:33:12 GMT - Fri, 22 Dec 2023 07:33:11 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=ad7e143d-2b49-406f-9bc8-5f5ff7a79203&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=e92cff90263e690389103e528cff0eba&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 01 Nov 2023 21:48:28 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 872d60eae90233bbef479f04eebe95f1
Strict-Transport-Security: max-age=0; includeSubdomains
friendshipmale.com/sfp.js
172.64.99.2200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP 172.64.99.2:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Nov 2023 21:48:27 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 21452d79fdec6c692558875cf5be6cc1
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 01 Nov 2023 21:48:26 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O%2FquAVwbWuvN6ZDX84XPfwGZVjuCzRnuzh9%2FdfWkmEjmhd1zxqJZZK6wj9VVw5B29lxycXUwcwq8W0CkxnabGZ9YlAZ3YfUdhDFgYQ5qIFCKkTXIEHTrcGhF61JCRqZfq14w6hE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81f7578c89d271c8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
potskolu.net/?rb=6WQK5Oq58aKYjzWVCWjbwzimqehmQKFLdWvKZ7AHCrUSQfTtldk3H6g1DiMQLVOGNXsdcdvmhk6LOQZH9WLk7wqoUH1nqW5q56_B6vUj6F8YiYuMSmGg7cXQMAbGp4n6NDNQHV9-9kTzjrSgyl-wPl5IPfc_SZv05tCl8afaMh-SphNCFiNkX_og1FAmWIcunBOod4OmCiHm3HLIaiGoQHRdOJ3U3ofh&request_ab2=0&zoneid=6320745&js_build=iclick-v1.617.0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=1&pl=https%3A%2F%2Fcdn.xsportbox.com%2Fembed77%2F%3Fevent%3Dstack.html%26link%3D1%26domain%3D%26force%3Dhttps%3A%2F%2F1stream.eu%2Fsoccer%2Fmanchester-united-newcastle-united-live-stream%2F1244563%3Fembed%3D1%26ask%3D1698873300%26lgt%3D3&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.617.0&bs=0f39fb22-5c9b-40b1-a3b0-d88c1193591d&userId=90911fb14bb543d68b3636433599274f&m=link
139.45.197.245200 OK 2.4 kB URL GET HTTP/2 potskolu.net/?rb=6WQK5Oq58aKYjzWVCWjbwzimqehmQKFLdWvKZ7AHCrUSQfTtldk3H6g1DiMQLVOGNXsdcdvmhk6LOQZH9WLk7wqoUH1nqW5q56_B6vUj6F8YiYuMSmGg7cXQMAbGp4n6NDNQHV9-9kTzjrSgyl-wPl5IPfc_SZv05tCl8afaMh-SphNCFiNkX_og1FAmWIcunBOod4OmCiHm3HLIaiGoQHRdOJ3U3ofh&request_ab2=0&zoneid=6320745&js_build=iclick-v1.617.0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=1&pl=https%3A%2F%2Fcdn.xsportbox.com%2Fembed77%2F%3Fevent%3Dstack.html%26link%3D1%26domain%3D%26force%3Dhttps%3A%2F%2F1stream.eu%2Fsoccer%2Fmanchester-united-newcastle-united-live-stream%2F1244563%3Fembed%3D1%26ask%3D1698873300%26lgt%3D3&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.617.0&bs=0f39fb22-5c9b-40b1-a3b0-d88c1193591d&userId=90911fb14bb543d68b3636433599274f&m=link
IP 139.45.197.245:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subjectpotskolu.net
FingerprintDB:FB:66:EE:66:1E:42:6F:6F:42:29:5C:01:E0:A1:09:B5:2E:6F:11
ValidityFri, 20 Oct 2023 05:59:32 GMT - Thu, 18 Jan 2024 05:59:31 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2427), with no line terminators
Hash 73777ab376aad2f86ea0bc18d9dbbf97
09eefba1d9095459e4cec02ecfea704c8646ce1a
60749391a3c8275300215048e709c40e2a54f999c5048dfa703e443aae7d104f
GET /?rb=6WQK5Oq58aKYjzWVCWjbwzimqehmQKFLdWvKZ7AHCrUSQfTtldk3H6g1DiMQLVOGNXsdcdvmhk6LOQZH9WLk7wqoUH1nqW5q56_B6vUj6F8YiYuMSmGg7cXQMAbGp4n6NDNQHV9-9kTzjrSgyl-wPl5IPfc_SZv05tCl8afaMh-SphNCFiNkX_og1FAmWIcunBOod4OmCiHm3HLIaiGoQHRdOJ3U3ofh&request_ab2=0&zoneid=6320745&js_build=iclick-v1.617.0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=1&pl=https%3A%2F%2Fcdn.xsportbox.com%2Fembed77%2F%3Fevent%3Dstack.html%26link%3D1%26domain%3D%26force%3Dhttps%3A%2F%2F1stream.eu%2Fsoccer%2Fmanchester-united-newcastle-united-live-stream%2F1244563%3Fembed%3D1%26ask%3D1698873300%26lgt%3D3&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.617.0&bs=0f39fb22-5c9b-40b1-a3b0-d88c1193591d&userId=90911fb14bb543d68b3636433599274f&m=link HTTP/1.1
Host: potskolu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cdn.xsportbox.com/
Origin: https://cdn.xsportbox.com
DNT: 1
Connection: keep-alive
Cookie: OAID=90911fb14bb543d68b3636433599274f; oaidts=1698875306
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 01 Nov 2023 21:48:27 GMT
content-type: application/json
x-trace-id: 3a618f171ad1bb634e92c0406af76e3c
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://cdn.xsportbox.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=90911fb14bb543d68b3636433599274f; expires=Thu, 31 Oct 2024 21:48:26 GMT; path=/; secure; SameSite=None
oaidts=1698875306; expires=Thu, 31 Oct 2024 21:48:26 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 08 Nov 2023 21:48:26 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
potskolu.net/5/6320745/?oo=1&aab=1
139.45.197.245200 OK 2.8 kB URL GET HTTP/2 potskolu.net/5/6320745/?oo=1&aab=1
IP 139.45.197.245:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subjectpotskolu.net
FingerprintDB:FB:66:EE:66:1E:42:6F:6F:42:29:5C:01:E0:A1:09:B5:2E:6F:11
ValidityFri, 20 Oct 2023 05:59:32 GMT - Thu, 18 Jan 2024 05:59:31 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2998), with no line terminators
Hash 4dd34e9ff3f16c31b4dae087539f12ec
1f2ba315e7de0a0f6b9dc20eb8693ef046383142
8218677492d3251306bd661161d92bfc19e18c17e09061b1064af8d70f18dbf2
GET /5/6320745/?oo=1&aab=1 HTTP/1.1
Host: potskolu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.xsportbox.com
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 01 Nov 2023 21:48:26 GMT
content-type: application/json
x-trace-id: 37ef2e6f18bee9955ce54faa4cb6160a
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://cdn.xsportbox.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=90911fb14bb543d68b3636433599274f; expires=Thu, 31 Oct 2024 21:48:26 GMT; path=/; secure; SameSite=None
oaidts=1698875306; expires=Thu, 31 Oct 2024 21:48:26 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.xsportbox.com/favicon.ico
172.67.133.57404 Not Found 555 B URL GET HTTP/3 cdn.xsportbox.com/favicon.ico
IP 172.67.133.57:443
Requested by https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Certificate IssuerLet's Encrypt
Subjectxsportbox.com
Fingerprint6E:37:0E:84:AE:DA:7C:EC:F1:BF:C0:AA:61:5C:1F:E3:F0:E4:BE:EA
ValidityTue, 03 Oct 2023 07:46:06 GMT - Mon, 01 Jan 2024 07:46:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (581), with no line terminators
Hash e9e4f9c9480bb14ad8343f37e3fb9b99
628fcbc6080fd3e684d1def2e5f67e98133ffa3b
85e4b614933e56b4531289e0bc3d2665db1f2b9d04d2c756a4a72b867c059594
GET /favicon.ico HTTP/1.1
Host: cdn.xsportbox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.xsportbox.com/embed77/?event=stack.html&link=1&domain=&force=https://1stream.eu/soccer/manchester-united-newcastle-united-live-stream/1244563?embed=1&ask=1698873300&lgt=3
Cookie: pp_show_on_e92cff90263e690389103e528cff0eba=1; prefetchAd_6320745=true; dom3ic8zudi28v8lr6fgphwffqoz0j6c=ad7e143d-2b49-406f-9bc8-5f5ff7a79203%3A1%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 01 Nov 2023 21:48:27 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 160
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k23BFBXmxs7Kd5nWei4cvgs0umNOb1YRyolSEPjzV9RNDT3fzU4hbfCdMHaK7puPqCjs1lVU3mKC8lsI8wMppg5UKxt6VzGKFusNImarOJCRCyaglR1V7st9UP6od0MsZlT4iw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81f7578ee8b4568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400