| browser-session.com/?a=1112&c=1666&s2=w5ftgvon2a5msfs0jesumae2 |  52.2.48.141 | 302 Found | 264 B |
URL User Request GET HTTP/1.1browser-session.com/?a=1112&c=1666&s2=w5ftgvon2a5msfs0jesumae2 IP52.2.48.141:443
CertificateIssuerGlobalSign nv-sa Subject*.browser-session.com FingerprintA2:B5:E2:09:A3:05:B9:12:3A:A0:B0:83:AD:E8:46:BC:9A:A2:70:32 ValidityWed, 13 Dec 2023 13:27:38 GMT - Mon, 13 Jan 2025 13:27:37 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash143701ff56d17b43bfabdd6dd9e100e7 469f555cd224d6573a820ed657b6177f6c53e9b0 344564e600784c949e0f12fa0968d9d6b518664adf30fe65526a49fb2406de01
GET /?a=1112&c=1666&s2=w5ftgvon2a5msfs0jesumae2 HTTP/1.1
Host: browser-session.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 264
Content-Type: text/html; charset=utf-8
Date: Fri, 26 Apr 2024 23:21:56 GMT
Location: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=c0fHwJ1WFduZ4VynehnDzFJFNixxJSJYsSGsZT4knUGhBfjnieI/oQ==; domain=.browser-session.com; path=/; SameSite=None; secure; HttpOnly
trk=SVCZSJrzSKSdq85UwrokjFJFNixxJSJYsSGsZT4knUGhBfjnieI/oQ==; domain=.browser-session.com; expires=Sun, 26-Apr-2026 23:21:56 GMT; path=/; SameSite=None; secure; HttpOnly
c1314=c0fHwJ1WFdvP1lohDb7iL32jJmh6RkAVCnhbdeJMdxUJl6H/iq4k6A==; domain=.browser-session.com; expires=Sun, 26-May-2024 23:21:56 GMT; path=/; SameSite=None; secure; HttpOnly
Connection: close
|
|
| cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.2/css/bootstrap.min.css |  104.17.25.14 | 200 OK | 23 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.2/css/bootstrap.min.css IP104.17.25.14:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (65342) Hashcd822b7fd22c8a95a68470c795adea69 1f139981b9b47a766efa0a61bb78ada351f16c4b 3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df
GET /ajax/libs/bootstrap/5.3.2/css/bootstrap.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: text/css; charset=utf-8
content-length: 22695
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6503298b-58a7"
last-modified: Thu, 14 Sep 2023 15:40:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1925100
expires: Wed, 16 Apr 2025 23:21:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pDDWt45347ySfljzhmcCCgHWZugKfDvW56pBCs5oHtqeIGUyGCqsFA7sNup9PKUCB%2BR3%2F1IGb9dWQhNgGEc2%2B6BfyiFhAWB0mXSg9V0VNJ8atAOe5hZ6pkGkJEK61b9h9N4VoeBO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87aa4fe57b9b569c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mymuddymat.cc/product/muddy-mat-csb/app/desktop/images/clock-icon.png | 172.67.215.223 | 200 OK | 3.9 kB |
URL GET HTTP/2mymuddymat.cc/product/muddy-mat-csb/app/desktop/images/clock-icon.png IP172.67.215.223:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subjectmymuddymat.cc Fingerprint38:30:E6:9E:37:FC:5A:C7:9E:CF:F7:EC:6E:90:80:5E:CC:58:6C:00 ValidityWed, 24 Apr 2024 17:07:39 GMT - Tue, 23 Jul 2024 17:07:38 GMT
File typePNG image data, 512 x 512, 2-bit colormap, non-interlaced Hash0b0bb998ffc7e7d06d75f96d3254038d 6d7b41548d62cf69b28e35fab6aee377b6ae1628 bae5759bee3193e2fc8c5925e86230d2700cff41e85972c9cb206250ba3e7487
GET /product/muddy-mat-csb/app/desktop/images/clock-icon.png HTTP/1.1
Host: mymuddymat.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: image/png
content-length: 3896
last-modified: Wed, 01 Nov 2023 08:56:33 GMT
cache-control: public, max-age=31536000, must-revalidate
expires: Sat, 26 Apr 2025 16:05:50 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 26167
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a5IY6VL%2B%2FtJMmgfSdoIICJeMNRpwMicoN6Xx8GhkwTEwG34W6YeOhIWH1stAwrvYD5h8qw4BrNRIh9KMo2SZUUBXof%2F%2BRY4t3cbatlvt94TE%2FvgT59H1OoSjopajApvP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa4fe5bd78b4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css?ver=6.1.1 | 151.101.65.229 | 200 OK | 1.8 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css?ver=6.1.1 IP151.101.65.229:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Hashf38b2db10e01b1572732a3191d538707 a94a059b3178b4adec09e3281ace2819a30095a4 de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5
GET /npm/slick-carousel@1.8.1/slick/slick.css?ver=6.1.1 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ"
accept-ranges: bytes
date: Fri, 26 Apr 2024 23:21:57 GMT
age: 5513052
x-served-by: cache-fra-eddf8230085-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1776
X-Firefox-Spdy: h2
|
|
| kenwheeler.github.io/slick/slick/slick-theme.css | 185.199.110.153 | 200 OK | 882 B |
URL GET HTTP/2kenwheeler.github.io/slick/slick/slick-theme.css IP185.199.110.153:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
Hashf9faba678c4d6dcfdde69e5b11b37a2e 81a434f94f2b1124f3232bb86f2944f82fb23ac0 7adaf08052c6a6a0f8a0d0055b4f191fd07389fe41c972b69573472b2ecb406a
GET /slick/slick/slick-theme.css HTTP/1.1
Host: kenwheeler.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jul 2018 12:58:42 GMT
access-control-allow-origin: *
etag: W/"5b3a2182-c49"
expires: Sat, 06 Apr 2024 00:31:29 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: HIT
x-github-request-id: 1DF0:2BB27C:45F58D2:4715365:66109640
accept-ranges: bytes
date: Fri, 26 Apr 2024 23:21:57 GMT
via: 1.1 varnish
age: 521
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714173717.426148,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: f444538fa13537a09b4ddc3aba3e321c002dc7c3
content-length: 882
X-Firefox-Spdy: h2
|
|
| awesomegive.com/assets/images/secure.png | 104.21.25.245 | 200 OK | 22 kB |
URL GET HTTP/3awesomegive.com/assets/images/secure.png IP104.21.25.245:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typePNG image data, 528 x 53, 8-bit/color RGBA, non-interlaced Hash2ef2f4adb9b1d68c5f9b79d881807aee 376a64b8b40543205b14c484070d4e77731c0e9d e6b807fed694f06d0c1e856efc61949c8829cd40af6e29f8ec8e588efe0855c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/images/secure.png HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: image/png
content-length: 22283
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: "6124464b-570b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6934
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AaEjYpLq0JoYIw1b8jbrAy776hu5%2BnzE3IUsmY6K526%2Bc1TSkHxqqW8uzTu9JNahjcZr2ojavz6CNImBWWbUAUrKf1kqsLtc3rPwmalG8xc%2B44Dmexs%2Fsouewt6nkd8K7wU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4fe62f6eb4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js | 151.101.65.229 | 200 OK | 11 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js IP151.101.65.229:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (42862) Hashd5a61c749e44e47159af8a6579dda121 3b41b3bc956685015a347a2238e71db29dfa0dbb 0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740
GET /npm/slick-carousel@1.8.1/slick/slick.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs"
content-encoding: br
accept-ranges: bytes
date: Fri, 26 Apr 2024 23:21:57 GMT
age: 7289215
x-served-by: cache-fra-eddf8230096-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 11325
X-Firefox-Spdy: h2
|
|
| static.vecteezy.com/system/resources/previews/014/328/593/original/access-ssl-certificate-icon-cartoon-style-vector.jpg | 104.18.4.151 | 200 OK | 101 kB |
URL GET HTTP/2static.vecteezy.com/system/resources/previews/014/328/593/original/access-ssl-certificate-icon-cartoon-style-vector.jpg IP104.18.4.151:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerCloudflare, Inc. Subjectvecteezy.com Fingerprint73:AC:4E:1A:7B:44:28:AD:F8:0D:26:84:E1:F1:F1:0E:E6:FC:CB:0E ValidityMon, 11 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 600x600, segment length 16, progressive, precision 8, 1920x1920, components 3 Size101 kB (101330 bytes) Hashdaace21fe0b85c2adb75d4e96226e807 44f85db62ad9da15dca79a871a34a1a9430ed7d0 572df4d74922251754968666995359553b8f3ad1045eb8745f7d223eae79bdba
GET /system/resources/previews/014/328/593/original/access-ssl-certificate-icon-cartoon-style-vector.jpg HTTP/1.1
Host: static.vecteezy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: image/jpeg
content-length: 101330
cache-control: public, max-age=31536000
cf-bgj: imgq:100,h2pri
cf-polished: origSize=163749
access-control-allow-origin: *
alt-svc: h3=":443"; ma=86400
etag: "69574c599a74e65ae3787f591d26a5fa"
last-modified: Tue, 15 Nov 2022 13:02:36 GMT
via: 1.1 95ad0c949c0fe7e97075c6690b8574aa.cloudfront.net (CloudFront)
x-amz-cf-id: x31WSqFfPz3HyEgscD9nYAZ11rJ3BdBDPqjdMKc30bVMSYMJlFFO3A==
x-amz-cf-pop: HEL51-P1
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-version-id: lmXX_pNEJaS6COMXMr9y8FQ6lmhHdJBE
x-cache: Hit from cloudfront
cf-cache-status: HIT
age: 131134
expires: Sat, 26 Apr 2025 23:21:57 GMT
accept-ranges: bytes
set-cookie: __cf_bm=R5MWhb_3YvXXJdffaqJF.IgaKctk9PWVrhtYiW4Z3kg-1714173717-1.0.1.1-NZqJQ7J6rDnGqAd0RP2FSbOyyPWdIUlbkYTMldwyJ4a6JfcnkDstbko3TZJ9WgoSunlTxDBdqQNhdGlkciZyHA; path=/; expires=Fri, 26-Apr-24 23:51:57 GMT; domain=.vecteezy.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
server: cloudflare
cf-ray: 87aa4fe63e715688-OSL
X-Firefox-Spdy: h2
|
|
| cdn-icons-png.flaticon.com/512/5289/5289675.png |  95.101.10.34 | 200 OK | 14 kB |
URL GET HTTP/2cdn-icons-png.flaticon.com/512/5289/5289675.png IP95.101.10.34:443 ASN#20940 Akamai International B.V.
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subject*.flaticon.com Fingerprint11:1D:CE:34:C6:D1:58:DD:F7:3B:A3:DB:64:8C:E7:BD:B0:42:9A:2E ValidityWed, 03 Apr 2024 18:04:26 GMT - Tue, 02 Jul 2024 18:04:25 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hash5ec4b7416f8329666b073f424a420949 096bd2b6290c7b52ae362f4d95418eb75d43a903 d7c94c2c1cc4dab1a6d38e4bf111011b4e4245220543a6a99d97775ba754e447
GET /512/5289/5289675.png HTTP/1.1
Host: cdn-icons-png.flaticon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 18 Sep 2023 23:20:25 GMT
etag: "5ec4b7416f8329666b073f424a420949"
x-goog-generation: 1695079225357387
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 14127
x-amz-meta-goog-reserved-file-mtime: 1627977608
x-amz-meta-x-goog-reserved-source-generation: 1661362556858477
content-type: image/png
x-amz-checksum-crc32c: UcEBcA==
accept-ranges: bytes
content-length: 14127
expires: Fri, 26 Apr 2024 23:21:57 GMT
date: Fri, 26 Apr 2024 23:21:57 GMT
vary: Accept-Encoding
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=31536000
x-default-rule: YES
X-Firefox-Spdy: h2
|
|
| awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= | 104.21.25.245 | 200 OK | 115 kB |
URL User Request GET HTTP/2awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= IP104.21.25.245:443
CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (336) Size115 kB (114707 bytes) Hasheba64881a5500a06c5d2c6b7ad5ddf72 79b181c0c3df02f446cdc567e5ace84021ad7662 f68b20d6896e9969f303e1567385ba0d5688cd55e260361cb1d489470f6e309c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h1Ni4yfSOTo8MkCSBr1i6%2BeAZcN2nwLEJNhzEEQhsW3WDY8DinEJVYOfpwtCf6shczhPMFf1JMzfxfo%2Fs1mA6M1zO1rtWgFb7cZMWNdKliayJlJGGz1bGjDMlF6Odv4748s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; path=/
__cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS; SameSite=Lax; path=/; expires=Sat, 27-Apr-24 22:21:57 GMT; HttpOnly
server: cloudflare
cf-ray: 87aa4fe1e8a856ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.icon-icons.com/icons2/1186/PNG/512/1490135018-mastercard_82253.png | 185.125.168.73 | 200 OK | 19 kB |
URL GET HTTP/2cdn.icon-icons.com/icons2/1186/PNG/512/1490135018-mastercard_82253.png IP185.125.168.73:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectcdn.icon-icons.com Fingerprint3D:9C:BA:D9:CC:B3:C1:95:64:CA:43:38:B8:69:CF:6D:87:51:BD:C4 ValiditySun, 07 Apr 2024 17:18:36 GMT - Sat, 06 Jul 2024 17:18:35 GMT
File typePNG image data, 512 x 420, 8-bit/color RGBA, non-interlaced Hash516e786a5c0ed5d4510bb01b33aad9ff 9add9bcb40f1a60ca3504ef69364471c32889bd9 747b49f939cb046c393228fa92550a8e6eeca7cf4c0bff0fdcb7f2363a5493cc
GET /icons2/1186/PNG/512/1490135018-mastercard_82253.png HTTP/1.1
Host: cdn.icon-icons.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: keycdn
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: image/png
content-length: 18892
last-modified: Tue, 21 Mar 2017 17:25:06 GMT
etag: "58d161f2-49cc"
x-powered-by: PleskLin
expires: Sat, 26 Apr 2025 23:27:57 GMT
cache-control: max-age=31536360
link: <https://icon-icons.com/icons2/1186/PNG/512/1490135018-mastercard_82253.png>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| awesomegive.com/flows/sweep-blank-fgt-v1/images/not-full-star.png | 104.21.25.245 | 200 OK | 1.2 kB |
URL GET HTTP/3awesomegive.com/flows/sweep-blank-fgt-v1/images/not-full-star.png IP104.21.25.245:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typePNG image data, 21 x 19, 8-bit colormap, non-interlaced Hashd6e629912bb77568d5773862dab08431 cda863c30b5dcfe23c826bf737a9aea178d2c3de 205828780ac947dd6e85c73565e8d616474ea5fe3bb216dd75ce2e643864a2a0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flows/sweep-blank-fgt-v1/images/not-full-star.png HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: image/png
content-length: 1204
last-modified: Sun, 14 Jan 2024 01:59:32 GMT
etag: "65a34004-4b4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a69bZ%2FxA4q1M%2B%2BzAWJJcolBL0rJGL%2F9HcW5sJEtLg1AK%2FfWJ8RZcvRBYqGm9UzgeajTOprvbpoYOr5YTXmCW5NWTihr4o9jfWJu%2FXpnav%2F9UldSFsrfY8bAsInODil8%2FmYg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4fe57ef0b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| awesomegive.com/flows/sweep-blank-fgt-v1/images/full-star.png | 104.21.25.245 | 200 OK | 1.1 kB |
URL GET HTTP/3awesomegive.com/flows/sweep-blank-fgt-v1/images/full-star.png IP104.21.25.245:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typePNG image data, 21 x 19, 8-bit colormap, non-interlaced Hash86daba6a62573d930904406e4df1ad03 f2146f680a6d147f97c91792a999aa9033d8b438 924193763a4c4a0d073a310173eeb5a000da418889bd6cc72d1af75daeaadae5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flows/sweep-blank-fgt-v1/images/full-star.png HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: image/png
content-length: 1131
last-modified: Sun, 14 Jan 2024 01:59:32 GMT
etag: "65a34004-46b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k2Az7pL1WBB1LKXMsrRPCnsTfabJi%2FRKm9EIztjv%2BWhuO7mMwNEJljyheVEOsOyuSTUGt40xyq6mFVjx8XYIlUdeIeiOVWj2W9j%2FDpVB1HMHVJ7wUHCbAZTFkWR5RQ6ik3Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4fe57eefb4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| awesomegive.com/flows/sweep-blank-fgt-v1/images/Lock.png | 104.21.25.245 | 200 OK | 713 B |
URL GET HTTP/3awesomegive.com/flows/sweep-blank-fgt-v1/images/Lock.png IP104.21.25.245:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typePNG image data, 30 x 41, 8-bit colormap, non-interlaced Hash81ddc1a1562a6cef851ecb6770a0048a 447144d2532e51ed3c7aa40c6fe606947475d8fe 284952308185fb4fb604e14e4415c374f634b12efc55c394d68eb1ba11d6b962
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flows/sweep-blank-fgt-v1/images/Lock.png HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: image/png
content-length: 713
last-modified: Sun, 14 Jan 2024 01:59:32 GMT
etag: "65a34004-2c9"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zr6IymxIKWm69Ar7WCWL2Rof3RIEipY7s3oT6sRWjgeT2XeaDkWZ%2B%2B5i1HEXCFBoc8x4gzA1q3YmtYE5lRCflPmHNAcPNaJ%2Fr0IDlCLsbPFgkFuIdXa1BVJbExH7vSLW2CI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4fe61f63b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| awesomegive.com/flows/sweep-blank-fgt-v1/images/Stripe.png | 104.21.25.245 | 200 OK | 2.9 kB |
URL GET HTTP/3awesomegive.com/flows/sweep-blank-fgt-v1/images/Stripe.png IP104.21.25.245:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typePNG image data, 100 x 37, 8-bit gray+alpha, non-interlaced Hashd2d441f5753d504a0d4223e88fdec777 edd7fa91fca394672afa45b8fada8a77450ddd3e 2d0c0096c36de5a94d9839016176807ce152eda0bafea56a5f64ed2abec4211b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flows/sweep-blank-fgt-v1/images/Stripe.png HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: image/png
content-length: 2869
last-modified: Sun, 14 Jan 2024 01:59:32 GMT
etag: "65a34004-b35"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fsxyAbDGynRWgeNkvHeqh8J4XpTiWahzvOTtznSMeXIMtNiTWDMkadfejvTZc%2Ba6TPqKheRTdT14q0Ie%2F9nTcAD4CRCqS85Vha%2BNcm5yc4yVAtHvTbeHrFYKC8NF6eigpOw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4fe61f64b4f3-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:02 GMT
expires: Fri, 25 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 161035
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 | 216.58.207.227 | 200 OK | 39 kB |
URL GET HTTP/2fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 IP216.58.207.227:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 39124, version 1.0 Hash86b73ab5f530be7984b704414f2a711d 8e297794ed7b6f5ea476d14b5270df12e8f3e42a 1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f
GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:54:16 GMT
expires: Fri, 25 Apr 2025 02:54:16 GMT
cache-control: public, max-age=31536000
age: 160061
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Nunito:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;0,1000;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900;1,1000&display=swap | 142.250.74.106 | 200 OK | 43 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Nunito:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;0,1000;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900;1,1000&display=swap IP142.250.74.106:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typegzip compressed data, max compression Hash9c218f4ebbd9ee0909e1349bbb214ecb 91cb4ecc5af95909022752e322615f4159d8cab4 1a267b90873277e7baad058bbf6c6facf2a3047302dbbf05fd0f3e34e21adbf3
GET /css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Nunito:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;0,1000;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900;1,1000&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 23:21:57 GMT
date: Fri, 26 Apr 2024 23:21:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:02 GMT
expires: Fri, 25 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 161035
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:38:02 GMT
expires: Fri, 25 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 161035
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 | 216.58.207.227 | 200 OK | 39 kB |
URL GET HTTP/2fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 IP216.58.207.227:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 39124, version 1.0 Hash86b73ab5f530be7984b704414f2a711d 8e297794ed7b6f5ea476d14b5270df12e8f3e42a 1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f
GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:54:16 GMT
expires: Fri, 25 Apr 2025 02:54:16 GMT
cache-control: public, max-age=31536000
age: 160061
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 | 216.58.207.227 | 200 OK | 39 kB |
URL GET HTTP/2fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 IP216.58.207.227:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 39124, version 1.0 Hash86b73ab5f530be7984b704414f2a711d 8e297794ed7b6f5ea476d14b5270df12e8f3e42a 1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f
GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:54:16 GMT
expires: Fri, 25 Apr 2025 02:54:16 GMT
cache-control: public, max-age=31536000
age: 160061
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 | 216.58.207.227 | 200 OK | 39 kB |
URL GET HTTP/2fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 IP216.58.207.227:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 39124, version 1.0 Hash86b73ab5f530be7984b704414f2a711d 8e297794ed7b6f5ea476d14b5270df12e8f3e42a 1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f
GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:54:16 GMT
expires: Fri, 25 Apr 2025 02:54:16 GMT
cache-control: public, max-age=31536000
age: 160061
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| kenwheeler.github.io/slick/slick/ajax-loader.gif | 185.199.110.153 | 200 OK | 4.2 kB |
URL GET HTTP/2kenwheeler.github.io/slick/slick/ajax-loader.gif IP185.199.110.153:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File typeGIF image data, version 89a, 32 x 32 Hashc5cd7f5300576ab4c88202b42f6ded62 7a1aa43614396382bb15e5fde574d9cdcd21698f e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b
GET /slick/slick/ajax-loader.gif HTTP/1.1
Host: kenwheeler.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenwheeler.github.io/slick/slick/slick-theme.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: GitHub.com
content-type: image/gif
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jul 2018 12:58:42 GMT
access-control-allow-origin: *
etag: "5b3a2182-1052"
expires: Tue, 23 Apr 2024 01:00:52 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: 8166:0DD6:62A2E4:64BA99:66270665
accept-ranges: bytes
age: 470
date: Fri, 26 Apr 2024 23:21:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714173718.224062,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: c39948d762f11bafce5e95ada5abf4891ffe5858
content-length: 4178
X-Firefox-Spdy: h2
|
|
| kenwheeler.github.io/slick/slick/fonts/slick.woff | 185.199.110.153 | 200 OK | 1.4 kB |
URL GET HTTP/2kenwheeler.github.io/slick/slick/fonts/slick.woff IP185.199.110.153:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File typeWeb Open Font Format, CFF, length 1380, version 1.0 Hashb7c9e1e479de3b53f1e4e30ebac2403a af91c12f0f406a4f801aeb3b398768fe41d8f864 26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc
GET /slick/slick/fonts/slick.woff HTTP/1.1
Host: kenwheeler.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://kenwheeler.github.io/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: GitHub.com
content-type: font/woff
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jul 2018 12:58:42 GMT
access-control-allow-origin: *
etag: "5b3a2182-564"
expires: Thu, 25 Apr 2024 02:44:57 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: 6D48:14767E:2DDBB0C:2EC7F51:6629C186
accept-ranges: bytes
age: 518
date: Fri, 26 Apr 2024 23:21:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714173718.224819,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 10bc6ddce295c4d6221249ed82d1da8444db6feb
content-length: 1380
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 | 216.58.207.227 | 200 OK | 39 kB |
URL GET HTTP/2fonts.gstatic.com/s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 IP216.58.207.227:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 39124, version 1.0 Hash86b73ab5f530be7984b704414f2a711d 8e297794ed7b6f5ea476d14b5270df12e8f3e42a 1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f
GET /s/nunito/v26/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
Alt-Used: 0
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39124
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:54:16 GMT
expires: Fri, 25 Apr 2025 02:54:16 GMT
cache-control: public, max-age=31536000
age: 160062
last-modified: Thu, 14 Sep 2023 00:02:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 3.211.167.253 | 200 OK | 0 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP3.211.167.253:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-3ds-api-key,x-3ds-sdk-version
Referer: https://awesomegive.com/
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:58 GMT
content-length: 0
access-control-allow-headers: Authorization, Content-Type, X-3DS-API-KEY, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED, X-3DS-SDK-VERSION
access-control-allow-methods: POST, GET
access-control-allow-origin: *
access-control-expose-headers: Authorization, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 3.211.167.253 | 200 OK | 0 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP3.211.167.253:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-3ds-api-key,x-3ds-sdk-version
Referer: https://awesomegive.com/
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:58 GMT
content-length: 0
access-control-allow-headers: Authorization, Content-Type, X-3DS-API-KEY, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED, X-3DS-SDK-VERSION
access-control-allow-methods: POST, GET
access-control-allow-origin: *
access-control-expose-headers: Authorization, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 3.211.167.253 | 200 OK | 0 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP3.211.167.253:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-3ds-api-key,x-3ds-sdk-version
Referer: https://awesomegive.com/
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:58 GMT
content-length: 0
access-control-allow-headers: Authorization, Content-Type, X-3DS-API-KEY, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED, X-3DS-SDK-VERSION
access-control-allow-methods: POST, GET
access-control-allow-origin: *
access-control-expose-headers: Authorization, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 3.211.167.253 | 200 OK | 0 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP3.211.167.253:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-3ds-api-key,x-3ds-sdk-version
Referer: https://awesomegive.com/
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:58 GMT
content-length: 0
access-control-allow-headers: Authorization, Content-Type, X-3DS-API-KEY, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED, X-3DS-SDK-VERSION
access-control-allow-methods: POST, GET
access-control-allow-origin: *
access-control-expose-headers: Authorization, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 3.211.167.253 | 200 OK | 28 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP3.211.167.253:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hash22168e652d9612a0044519feabee2ead c81871548c6f72ef308f783d1c7300356511bf6c a6631c5d7464de9c50745eabea01871d406a6121c3d35f9837bed89cf2512d08
POST /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-3DS-API-KEY: 8fd6e05ee3c07880d76df8d3a7629844
X-3DS-SDK-VERSION: 2.2.20230227
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:58 GMT
content-type: application/json; charset=utf-8
content-length: 28
access-control-allow-headers: Authorization,Content-Type, X-3DS-API-KEY
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-expose-headers: Authorization
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiI4ZmQ2ZTA1ZWUzYzA3ODgwZDc2ZGY4ZDNhNzYyOTg0NCIsImV4cCI6MTcxNDE3NDYxOCwianRpIjoiYzc1NmM4MzctMDQyMy0xMWVmLTk4MTItMDI0MmFjMTEwMDA4IiwiaWF0IjoxNzE0MTczNzE4LCJpc3MiOiJwYWF5LTNkcy1hcGktbmV4dCJ9.pXmP6r50yzO18ci30XieQ7FDaFbTeaUUy8Gf0O2GqPc
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 3.211.167.253 | 200 OK | 28 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP3.211.167.253:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hash22168e652d9612a0044519feabee2ead c81871548c6f72ef308f783d1c7300356511bf6c a6631c5d7464de9c50745eabea01871d406a6121c3d35f9837bed89cf2512d08
POST /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-3DS-API-KEY: 8fd6e05ee3c07880d76df8d3a7629844
X-3DS-SDK-VERSION: 2.2.20230227
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:58 GMT
content-type: application/json; charset=utf-8
content-length: 28
access-control-allow-headers: Authorization,Content-Type, X-3DS-API-KEY
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-expose-headers: Authorization
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiI4ZmQ2ZTA1ZWUzYzA3ODgwZDc2ZGY4ZDNhNzYyOTg0NCIsImV4cCI6MTcxNDE3NDYxOCwianRpIjoiYzc1NzdhYWYtMDQyMy0xMWVmLTgyZDktMDI0MmFjMTEwMDBhIiwiaWF0IjoxNzE0MTczNzE4LCJpc3MiOiJwYWF5LTNkcy1hcGktbmV4dCJ9.A3iJIxbSOl_smfgzZ4x_HmdG4hyE41mhdcCTQhPCCSg
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 3.211.167.253 | 200 OK | 28 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP3.211.167.253:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hash22168e652d9612a0044519feabee2ead c81871548c6f72ef308f783d1c7300356511bf6c a6631c5d7464de9c50745eabea01871d406a6121c3d35f9837bed89cf2512d08
POST /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-3DS-API-KEY: 8fd6e05ee3c07880d76df8d3a7629844
X-3DS-SDK-VERSION: 2.2.20230227
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:58 GMT
content-type: application/json; charset=utf-8
content-length: 28
access-control-allow-headers: Authorization,Content-Type, X-3DS-API-KEY
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-expose-headers: Authorization
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiI4ZmQ2ZTA1ZWUzYzA3ODgwZDc2ZGY4ZDNhNzYyOTg0NCIsImV4cCI6MTcxNDE3NDYxOCwianRpIjoiYzc1OTA3NzMtMDQyMy0xMWVmLWFjNDgtMDI0MmFjMTEwMDA2IiwiaWF0IjoxNzE0MTczNzE4LCJpc3MiOiJwYWF5LTNkcy1hcGktbmV4dCJ9.eHDLSWFKMjrHd6JToC0hHIeW0K8ygK2RQCENh6cRsho
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 3.211.167.253 | 200 OK | 28 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP3.211.167.253:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hash22168e652d9612a0044519feabee2ead c81871548c6f72ef308f783d1c7300356511bf6c a6631c5d7464de9c50745eabea01871d406a6121c3d35f9837bed89cf2512d08
POST /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-3DS-API-KEY: 8fd6e05ee3c07880d76df8d3a7629844
X-3DS-SDK-VERSION: 2.2.20230227
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 23:21:58 GMT
content-type: application/json; charset=utf-8
content-length: 28
access-control-allow-headers: Authorization,Content-Type, X-3DS-API-KEY
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-expose-headers: Authorization
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiI4ZmQ2ZTA1ZWUzYzA3ODgwZDc2ZGY4ZDNhNzYyOTg0NCIsImV4cCI6MTcxNDE3NDYxOCwianRpIjoiYzc1OWM5ODItMDQyMy0xMWVmLTk4MTItMDI0MmFjMTEwMDA4IiwiaWF0IjoxNzE0MTczNzE4LCJpc3MiOiJwYWF5LTNkcy1hcGktbmV4dCJ9.f_khUBXqepTqo_PqTZjj1mAi-0AJXeEKoI519kcJTS4
X-Firefox-Spdy: h2
|
|
| encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTc7AON19ssRcaT_ZWrjvZY5RerD_8AmJAqQYqpNBG9Tw&s | 216.58.207.206 | 200 OK | 3.4 kB |
URL GET HTTP/2encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTc7AON19ssRcaT_ZWrjvZY5RerD_8AmJAqQYqpNBG9Tw&s IP216.58.207.206:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typePNG image data, 204 x 204, 8-bit colormap, non-interlaced Hashc072fab291a392fc2ff133902dc2488c 632e547f8f41d1b86e78bed2fcf57f4f7ccdb593 30d836a860a522432383ab70d023fe39c6a06603b6eab51baf12fad0b3b83a65
GET /images?q=tbn:ANd9GcTc7AON19ssRcaT_ZWrjvZY5RerD_8AmJAqQYqpNBG9Tw&s HTTP/1.1
Host: encrypted-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 3351
date: Fri, 26 Apr 2024 23:22:02 GMT
expires: Sat, 26 Apr 2025 23:22:02 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 03 Oct 2020 04:45:47 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| awesomegive.com/flow_assets/eb7a6ec44c54/logo.png?1697741617 | 104.21.25.245 | 404 Not Found | 4.9 kB |
URL GET HTTP/3awesomegive.com/flow_assets/eb7a6ec44c54/logo.png?1697741617 IP104.21.25.245:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typeHTML document, ASCII text Hash89995e2aca5934708056c176fa296393 6832a6b8b6266cf5b88f33ce822f369a4ed8a0b0 ff77a0f512498f67a587929d254bb619d6628aaf5378c8526ddc892bdd8713eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /flow_assets/eb7a6ec44c54/logo.png?1697741617 HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 26 Apr 2024 23:22:03 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kA35gDpteCVyQ6n%2BAIm805Z6zZLcYCtINQ77TZInvkwdzvuzg97LZ4asFXZBD2fl%2Fn5MWlXHf2IsgBJhoMEGhzFCdVin4nM5ZvBG5X6%2FxXWo8xQ1bIxeYzYwI1L1i4uyQ88%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa5004aadcb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| meetgiveawy.com/custom/sweep-dyson-hair-dryer-c157/m/images/checkout-seal-bottom-v1.png | 0.0.0.0 | | 0 B |
URL GET meetgiveawy.com/custom/sweep-dyson-hair-dryer-c157/m/images/checkout-seal-bottom-v1.png IP0.0.0.0:0
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /custom/sweep-dyson-hair-dryer-c157/m/images/checkout-seal-bottom-v1.png HTTP/1.1
Host: meetgiveawy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| cdn.3dsintegrator.com/threeds.2.2.20230227.min.js | 108.157.229.112 | 200 OK | 38 kB |
URL GET HTTP/2cdn.3dsintegrator.com/threeds.2.2.20230227.min.js IP108.157.229.112:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (634) Hash1156b587263b305c544ae6f993c9c1cc b451a87ceedf1bce3f47209f05a63cc0648d414a 8b4a3906b4cfab9faa83a58443d90208904999f3f9e8f83ec1775cfbc93b47ae
GET /threeds.2.2.20230227.min.js HTTP/1.1
Host: cdn.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 24 Feb 2023 13:06:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 0hMD0EKviGCXlCLKV0CfUZQa0eQPF.Wc
server: PAAY CDN
content-encoding: gzip
date: Fri, 26 Apr 2024 07:09:59 GMT
etag: W/"1156b587263b305c544ae6f993c9c1cc"
x-cache: Hit from cloudfront
via: 1.1 cc81c6e9e0635b111f930d60fbded11e.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: ElE-739-2M8nILdGGHiLA5Rxba_RdUgaWyvLHNFl-B2t8JrkzcByXA==
age: 72496
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: public, max-age=604800, immutable
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| vjkwakity.com/sweep-blanks-v10/images/mcLogo.png | 0.0.0.0 | | 0 B |
URL GET vjkwakity.com/sweep-blanks-v10/images/mcLogo.png IP0.0.0.0:0
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sweep-blanks-v10/images/mcLogo.png HTTP/1.1
Host: vjkwakity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| cdn4.vectorstock.com/i/1000x1000/78/18/payment-method-icon-simple-element-from-economic-vector-34717818.jpg | 108.157.214.45 | 200 OK | 80 kB |
URL GET HTTP/2cdn4.vectorstock.com/i/1000x1000/78/18/payment-method-icon-simple-element-from-economic-vector-34717818.jpg IP108.157.214.45:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerAmazon Subjectvectorstock.com Fingerprint60:5F:8F:EA:00:58:3E:0A:65:7B:71:1C:66:19:27:FD:71:52:07:20 ValidityWed, 04 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, description=Payment Method icon. Simple illustration from economic collection. Monochrome Payment Method icon for web design, templates and], baseline, precision 8, 1000x1080, components 3 Hash580e67d6cc0647909210b0bb3716b046 b974688afbb43a88f625cc3f54f380878145335f 42d9caacbde20585de44632400303481fdf7e13fbe60ad76efe55790ae9e0a4d
GET /i/1000x1000/78/18/payment-method-icon-simple-element-from-economic-vector-34717818.jpg HTTP/1.1
Host: cdn4.vectorstock.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 79968
date: Sun, 21 Apr 2024 14:17:04 GMT
x-amz-replication-status: COMPLETED
last-modified: Fri, 13 Nov 2020 18:02:06 GMT
etag: "580e67d6cc0647909210b0bb3716b046"
x-amz-version-id: 4WqQXJZQphD4.qP5C7MVTAsecDFwBUdV
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4ded1750dc7e0bef188a5520fb9fef28.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: VnfP7S1IUntcnn4tujSvy9KZ1f6ll-17yLBWMhQyv6-H3ewELV32-g==
age: 464694
X-Firefox-Spdy: h2
|
|
| awesomegive.com/assets/js/app.min.js | 104.21.25.245 | 200 OK | 45 kB |
URL GET HTTP/3awesomegive.com/assets/js/app.min.js IP104.21.25.245:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typeJavaScript source, ASCII text, with very long lines (29177) Hashb331d79c122809116865976836f2319a c3a447f5c1b7fde359e6b0a7f8962ffd4350cb9a 627587890dfc820f64014e0ef50c9a54aec5fb2740e9261187a209655f64518e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/js/app.min.js HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: application/javascript
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: W/"6124464b-b081"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6934
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jr3Hj27RjynIxpJvUARCuvEebCdKQUYcdCxsO5Lv8zJX26ibpBZJnJvJox3hRT24Ms5sBJsazzAad9%2Fqdd5l997EBuqNULhzMTkp%2Bg8%2B39KjiHqkEzJaa%2BPLpJyhi6R2PHE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4fe62f6cb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| awesomegive.com/assets/js/jquery.min.js | 104.21.25.245 | 200 OK | 96 kB |
URL GET HTTP/3awesomegive.com/assets/js/jquery.min.js IP104.21.25.245:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/js/jquery.min.js HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: application/javascript
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: W/"6124464b-1762a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6934
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=At5%2FtY2FniJeqYulGJtmqwI5TNmuZv8t4UsIsx%2BYCE0xth%2BlCJkOyzEnray1JPCwvsA8hPeR2viHh%2FzweCbQFGYYCgdEjJoneLdHgOsWuJMJ%2BrexVAJkXTMmiLrKVV%2BZHPE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4fe61f65b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| resources.demotestingurl.com/cdn/rick.css | 0.0.0.0 | | 0 B |
URL GET resources.demotestingurl.com/cdn/rick.css IP0.0.0.0:0
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/rick.css HTTP/1.1
Host: resources.demotestingurl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaDRs4.woff2 | 216.58.207.227 | 200 OK | 42 kB |
URL GET HTTP/2fonts.gstatic.com/s/nunito/v26/XRXX3I6Li01BKofIMNaDRs4.woff2 IP216.58.207.227:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 41800, version 1.0 Hash3ea99ad21ca9121d85ab7e668fe557e4 a3c34cafeee04cc309f965899b0b879793e59795 2a4ba0bfd05a144b759af1564fae807d80463489344ed2cf2d0f7fb5635e967a
GET /s/nunito/v26/XRXX3I6Li01BKofIMNaDRs4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 41800
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:40:24 GMT
expires: Fri, 25 Apr 2025 02:40:24 GMT
cache-control: public, max-age=31536000
age: 160893
last-modified: Thu, 14 Sep 2023 00:02:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| resources.demotestingurl.com/cdn/morty.js | 0.0.0.0 | | 0 B |
URL GET resources.demotestingurl.com/cdn/morty.js IP0.0.0.0:0
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/morty.js HTTP/1.1
Host: resources.demotestingurl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| awesomegive.com/assets/vanilla-modal/modal.css?13 | 104.21.25.245 | 200 OK | 6.9 kB |
URL GET HTTP/3awesomegive.com/assets/vanilla-modal/modal.css?13 IP104.21.25.245:443
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typeASCII text, with very long lines (7294), with no line terminators Hash48125f16dfa8174dc50a7bb35638b391 b12843a780958beae38aa186923ddb129321a706 432e2d1364c784d2c43ba9f24bea3fe9bd0356b9b5ceff366bf6b996da44e064
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/vanilla-modal/modal.css?13 HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Cookie: PHPSESSID=5hpf8sc7vi9f08aa30s81uemeg; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjiT3vADAdBmSdS
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 23:21:57 GMT
content-type: text/css
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: W/"6124464b-1af8"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZTRLk4YV706qzIPtCsWFP0MPr7qvilr7jKmuNxD6cq%2FowTEA5eySf6WCD%2F%2BKJeEVsrEXK0Z3k7KvcldP8G%2FNBplm3kvSS3cUDJ8ytyL0aNBRfGt3%2FZcDd0p80dy9P452%2BF8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87aa4fe55ee3b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vjkwakity.com/sweep-blanks-v10/images/visaLogo.png | 0.0.0.0 | | 0 B |
URL GET vjkwakity.com/sweep-blanks-v10/images/visaLogo.png IP0.0.0.0:0
Requested byhttps://awesomegive.com/9bln-wtr4/checkout?pub=1112&c1=&c2=w5ftgvon2a5msfs0jesumae2&c3=501188742&click_id=501188742&c4=&c5=
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sweep-blanks-v10/images/visaLogo.png HTTP/1.1
Host: vjkwakity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|