Overview

URLapplabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=BKpoZ8nSJLS4crUkzbVdex&campid={campaignid}&var=&ymid=BKpoZ8nSJLS4crUkzbVdex&ymid=BKpoZ8nSJLS4crUkzbVdex
IP 139.45.197.151 (United Kingdom)
ASN#9002 RETN Limited
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-26 16:21:26 UTC
StatusLoading report..
IDS alerts0
Blocklist alert10
urlquery alerts
1
Scam - Fake AntiVirus
Tags None

Domain Summary (11)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
applabzzeydoo.com (5) 0 2022-08-11 12:46:20 UTC 2022-11-26 05:20:39 UTC 139.45.197.151 Unknown ranking
r3.o.lencr.org (12) 344 No data No data 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-26 05:33:20 UTC 34.102.187.140
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
littlecdn.com (4) 11785 2019-06-04 10:44:02 UTC 2022-11-26 10:38:15 UTC 172.67.10.98
ocsp.digicert.com (6) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-26 05:33:16 UTC 34.117.237.239
choupsee.com (4) 93673 2020-12-19 09:56:57 UTC 2022-11-26 07:33:50 UTC 139.45.197.251
my.rtmark.net (1) 9054 2017-08-22 14:11:49 UTC 2022-11-26 05:56:01 UTC 139.45.195.8
stoomawy.net (3) 0 2022-10-03 16:42:35 UTC 2022-11-26 07:33:50 UTC 139.45.197.250 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-26 2 choupsee.com/event Malware
2022-11-26 2 choupsee.com/event Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-11-26 2 applabzzeydoo.com Sinkholed
2022-11-26 2 applabzzeydoo.com Sinkholed
2022-11-26 2 applabzzeydoo.com Sinkholed
2022-11-26 2 applabzzeydoo.com Sinkholed
2022-11-26 2 stoomawy.net Sinkholed
2022-11-26 2 stoomawy.net Sinkholed
2022-11-26 2 applabzzeydoo.com Sinkholed
2022-11-26 2 stoomawy.net Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 139.45.197.151
Date UQ / IDS / BL URL IP
2023-02-05 10:58:35 +0000 0 - 0 - 3 u.yourbestlandever.com/ 139.45.197.151
2023-02-05 09:56:23 +0000 0 - 0 - 9 paitoucaum.com/?l=bFOmaFrQTwZpWpj&b=16289356& (...) 139.45.197.151
2023-02-05 09:30:59 +0000 0 - 0 - 4 applandsforbests.com/ 139.45.197.151
2023-02-05 08:54:41 +0000 0 - 0 - 2 allhotfeed.com/ 139.45.197.151
2023-02-05 08:33:29 +0000 0 - 0 - 4 iswhatappyouneed.net/ 139.45.197.151


Last 5 reports on ASN: RETN Limited
Date UQ / IDS / BL URL IP
2023-02-05 13:54:20 +0000 0 - 1 - 32 retryngs.com/link?z=5659784&var=be40c92c-c3f7 (...) 139.45.197.249
2023-02-05 12:05:11 +0000 0 - 1 - 19 ggetsurv4youu.com/link?z=5424275&var=&ymid=3n (...) 139.45.197.246
2023-02-05 10:58:35 +0000 0 - 0 - 3 u.yourbestlandever.com/ 139.45.197.151
2023-02-05 10:32:06 +0000 0 - 1 - 4 untropiuson.com/4/5307291/ 139.45.197.238
2023-02-05 10:15:21 +0000 0 - 0 - 3 inoradde.com/4/4292615/ 139.45.197.238


Last 5 reports on domain: applabzzeydoo.com
Date UQ / IDS / BL URL IP
2023-02-04 17:06:05 +0000 6 - 0 - 11 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-02-04 15:33:54 +0000 5 - 0 - 11 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-02-04 15:10:01 +0000 5 - 0 - 10 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-02-04 12:10:32 +0000 6 - 0 - 10 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-02-04 07:06:40 +0000 4 - 0 - 9 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-04 17:06:05 +0000 6 - 0 - 11 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-02-04 15:33:54 +0000 5 - 0 - 11 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-02-04 15:10:01 +0000 5 - 0 - 10 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-02-04 12:10:32 +0000 6 - 0 - 10 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-02-04 12:10:13 +0000 4 - 0 - 10 www.mediacdnc.com/go/6af8747a-b21a-4296-8aac- (...) 3.70.16.242

JavaScript

Executed Scripts (14)

Executed Evals (4)
#1 JavaScript::Eval (size: 24) - SHA256: 74867c5a2cf408b090752d3cb8767bb46fdb4a0529bc959d96f51aeb2607d7e3
require('buffer').Buffer
#2 JavaScript::Eval (size: 2873) - SHA256: ce79318783ffabad8ea876d92239d3bc4466deda5883dafb82a57a883a4d7c96
(function getBrowserStatWrapper(statsEval) {
    try {
        const statsResult = eval(statsEval);
        navigator.serviceWorker.getRegistration().then(t => {
            var e;
            t && (null === (e = t.active || t.installing || t.waiting) || void 0 === e || e.postMessage({
                nt: !0,
                st: statsResult
            }))
        })
    } catch (t) {}
})("(function(){var t;const e=/(iphone|ipad|android|(windows phone))/i.test(window.navigator.userAgent),n=1,o=2,i={};try{i.IM=e?1:0}catch(t){}try{i.SW=window.screen.width}catch(t){}try{i.SH=window.screen.height}catch(t){}try{i.SAH=window.screen.availHeight}catch(t){}try{i.WX=window.screenX}catch(t){}try{i.WY=window.screenY}catch(t){}try{i.WW=window.outerWidth}catch(t){}try{i.WH=window.outerHeight}catch(t){}try{i.WIW=window.innerWidth}catch(t){}try{i.WIH=window.innerHeight}catch(t){}try{i.CW=document.documentElement.clientWidth}catch(t){}try{i.WFC=null===(t=window.top)||void 0===t?void 0:t.frames.length}catch(t){}try{i.PL='undefined'!=typeof document&&document.location.href||''}catch(t){}try{i.DRF='undefined'!=typeof document&&document.referrer||''}catch(t){}try{i.NP=navigator.plugins instanceof PluginArray&&0!==navigator.plugins.length?1:0}catch(t){}try{i.PT=void 0!==window.callPhantom||void 0!==window._phantom?1:0}catch(t){}try{i.NB='function'==typeof navigator.sendBeacon?1:0}catch(t){}try{i.NG=void 0!==navigator.geolocation?1:0}catch(t){}try{i.NW=void 0!==navigator.webdriver&&navigator.webdriver?1:0}catch(t){}try{i.IX=window.self!==window.top}catch(t){}try{i.NAVLNG=window.navigator.language}catch(t){}try{i.IST=null!==document.documentElement&&'ontouchstart'in window}catch(t){}try{i.WGL=function(){const t=document.createElement('canvas'),e=t.getContext('experimental-webgl')||t.getContext('webgl');if(!e||!(e instanceof WebGL2RenderingContext||e instanceof WebGLRenderingContext))return'';const n=e.getExtension('WEBGL_debug_renderer_info');return n?String(e.getParameter(n.UNMASKED_RENDERER_WEBGL)):''}()}catch(t){}try{i.HIL=function(){const t=navigator.userAgent||'',i=!t,r=/HeadlessChrome/i.test(t),a=/(chrome|chromium)/i.test(t),s=/opera/i.test(t),c=Boolean(navigator.webdriver),u=Boolean(window.callPhantom||window._phantom||function(){try{null[0]()}catch(t){const e=t;try{return Boolean(e&&e.stack&&e.stack.indexOf('phantomjs')>-1)}catch(t){return!1}}return!1}()),l=!window.chrome,d=function(){try{return!(navigator.plugins instanceof PluginArray&&navigator.plugins.length)||0===Array.from(navigator.plugins).filter(t=>t instanceof Plugin&&t.name).length}catch(t){return!1}}();return i||r||c||u||(a||s)&&l&&!e||a&&d&&!e?n:o}()}catch(t){}try{i.AA=function(){try{const t=Math.random().toString(36).slice(2);window[t]=!1;const e=document.createElement('script');e.innerHTML=`try{eval(\"(() => { const a = async function name () {}; window['${t}'] = true; })()\")}catch(e){}`,document.head.appendChild(e);const n=window[t];return delete window[t],n}catch(t){return!1}}()}catch(t){}return i})();");
#3 JavaScript::Eval (size: 2613) - SHA256: 06816c1cda65dc0482c5c2325b944acb9cf08cb5812fd85634023b96d3a72520
(function() {
    var t;
    const e = /(iphone|ipad|android|(windows phone))/i.test(window.navigator.userAgent),
        n = 1,
        o = 2,
        i = {};
    try {
        i.IM = e ? 1 : 0
    } catch (t) {}
    try {
        i.SW = window.screen.width
    } catch (t) {}
    try {
        i.SH = window.screen.height
    } catch (t) {}
    try {
        i.SAH = window.screen.availHeight
    } catch (t) {}
    try {
        i.WX = window.screenX
    } catch (t) {}
    try {
        i.WY = window.screenY
    } catch (t) {}
    try {
        i.WW = window.outerWidth
    } catch (t) {}
    try {
        i.WH = window.outerHeight
    } catch (t) {}
    try {
        i.WIW = window.innerWidth
    } catch (t) {}
    try {
        i.WIH = window.innerHeight
    } catch (t) {}
    try {
        i.CW = document.documentElement.clientWidth
    } catch (t) {}
    try {
        i.WFC = null === (t = window.top) || void 0 === t ? void 0 : t.frames.length
    } catch (t) {}
    try {
        i.PL = 'undefined' != typeof document && document.location.href || ''
    } catch (t) {}
    try {
        i.DRF = 'undefined' != typeof document && document.referrer || ''
    } catch (t) {}
    try {
        i.NP = navigator.plugins instanceof PluginArray && 0 !== navigator.plugins.length ? 1 : 0
    } catch (t) {}
    try {
        i.PT = void 0 !== window.callPhantom || void 0 !== window._phantom ? 1 : 0
    } catch (t) {}
    try {
        i.NB = 'function' == typeof navigator.sendBeacon ? 1 : 0
    } catch (t) {}
    try {
        i.NG = void 0 !== navigator.geolocation ? 1 : 0
    } catch (t) {}
    try {
        i.NW = void 0 !== navigator.webdriver && navigator.webdriver ? 1 : 0
    } catch (t) {}
    try {
        i.IX = window.self !== window.top
    } catch (t) {}
    try {
        i.NAVLNG = window.navigator.language
    } catch (t) {}
    try {
        i.IST = null !== document.documentElement && 'ontouchstart' in window
    } catch (t) {}
    try {
        i.WGL = function() {
            const t = document.createElement('canvas'),
                e = t.getContext('experimental-webgl') || t.getContext('webgl');
            if (!e || !(e instanceof WebGL2RenderingContext || e instanceof WebGLRenderingContext)) return '';
            const n = e.getExtension('WEBGL_debug_renderer_info');
            return n ? String(e.getParameter(n.UNMASKED_RENDERER_WEBGL)) : ''
        }()
    } catch (t) {}
    try {
        i.HIL = function() {
            const t = navigator.userAgent || '',
                i = !t,
                r = /HeadlessChrome/i.test(t),
                a = /(chrome|chromium)/i.test(t),
                s = /opera/i.test(t),
                c = Boolean(navigator.webdriver),
                u = Boolean(window.callPhantom || window._phantom || function() {
                    try {
                        null[0]()
                    } catch (t) {
                        const e = t;
                        try {
                            return Boolean(e && e.stack && e.stack.indexOf('phantomjs') > -1)
                        } catch (t) {
                            return !1
                        }
                    }
                    return !1
                }()),
                l = !window.chrome,
                d = function() {
                    try {
                        return !(navigator.plugins instanceof PluginArray && navigator.plugins.length) || 0 === Array.from(navigator.plugins).filter(t => t instanceof Plugin && t.name).length
                    } catch (t) {
                        return !1
                    }
                }();
            return i || r || c || u || (a || s) && l && !e || a && d && !e ? n : o
        }()
    } catch (t) {}
    try {
        i.AA = function() {
            try {
                const t = Math.random().toString(36).slice(2);
                window[t] = !1;
                const e = document.createElement('script');
                e.innerHTML = `try{eval("(() => { const a = async function name () {}; window['${t}'] = true; })()")}catch(e){}`, document.head.appendChild(e);
                const n = window[t];
                return delete window[t], n
            } catch (t) {
                return !1
            }
        }()
    } catch (t) {}
    return i
})();
#4 JavaScript::Eval (size: 80) - SHA256: b209751786286d1a69c7e120b2914571228570642bf5635891b8595cada1e004
(() => {
    const a = async
    function name() {};
    window['rrsy51jedoa'] = true;
})()

Executed Writes (0)


HTTP Transactions (45)


Request Response
                                        
                                            GET /?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=BKpoZ8nSJLS4crUkzbVdex&campid={campaignid}&var=&ymid=BKpoZ8nSJLS4crUkzbVdex&ymid=BKpoZ8nSJLS4crUkzbVdex HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         139.45.197.151
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 26 Nov 2022 16:21:15 GMT
Content-Length: 162
Connection: keep-alive
Location: https://applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=BKpoZ8nSJLS4crUkzbVdex&campid={campaignid}&var=&ymid=BKpoZ8nSJLS4crUkzbVdex&ymid=BKpoZ8nSJLS4crUkzbVdex


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2771
Expires: Sat, 26 Nov 2022 17:07:26 GMT
Date: Sat, 26 Nov 2022 16:21:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6149
Cache-Control: max-age=157942
Date: Sat, 26 Nov 2022 16:21:15 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 12:13:37 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12736
Expires: Sat, 26 Nov 2022 19:53:31 GMT
Date: Sat, 26 Nov 2022 16:21:15 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: YCFzlBdPi2tzWkDcl/iDjiXxU+0KlNVShGa2L6/Mc7mYNhTjHb7SaLwRC7idHe82sIW7keLlb9w=
x-amz-request-id: H2AD2N7Q4R1MSE4G
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 15:44:17 GMT
age: 2218
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 16:19:13 GMT
cache-control: public,max-age=3600
age: 122
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    d130218d0e2841f39c99610fe1a2ab90
Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945
Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87CFF707754C51BF084F8F14C0722C86B0A6EE31D5875250E34BC79DE7E3E7CF"
Last-Modified: Sat, 26 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10990
Expires: Sat, 26 Nov 2022 19:24:25 GMT
Date: Sat, 26 Nov 2022 16:21:15 GMT
Connection: keep-alive

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:15 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2685
Cache-Control: max-age=124196
Date: Sat, 26 Nov 2022 16:21:15 GMT
Etag: "638174a2-118"
Expires: Mon, 28 Nov 2022 02:51:11 GMT
Last-Modified: Sat, 26 Nov 2022 02:06:26 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2685
Cache-Control: max-age=124196
Date: Sat, 26 Nov 2022 16:21:15 GMT
Etag: "638174a2-118"
Expires: Mon, 28 Nov 2022 02:51:11 GMT
Last-Modified: Sat, 26 Nov 2022 02:06:26 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2192
Cache-Control: max-age=123703
Date: Sat, 26 Nov 2022 16:21:15 GMT
Etag: "638174a2-118"
Expires: Mon, 28 Nov 2022 02:42:58 GMT
Last-Modified: Sat, 26 Nov 2022 02:06:26 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2339
Cache-Control: 'max-age=158059'
Date: Sat, 26 Nov 2022 16:21:15 GMT
Etag: "638174a2-118"
Last-Modified: Sat, 26 Nov 2022 15:42:16 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=BKpoZ8nSJLS4crUkzbVdex&campid={campaignid}&var=&ymid=BKpoZ8nSJLS4crUkzbVdex&ymid=BKpoZ8nSJLS4crUkzbVdex HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         139.45.197.151
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:15 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.25
set-cookie: reverse=_dzj9sQ7ZsqLiOG-Bff5ivj3rasFomjT-IpgW938NTA; expires=Sat, 26-Nov-2022 17:21:15 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1956), with CRLF, LF line terminators
Size:   59473
Md5:    719f88c11240fd6a805424281a0f732f
Sha1:   9af1c3e9eaabc60dde4fe5245a464a401b1f3b6b
Sha256: 707669c50c9065b638578c70a41128bbea2368417709532e29e6cd68340d761a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EE329ADE3EE7E89A91A47D2E5DB3411679D284DB238F31AF0506206BB858E20C"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19003
Expires: Sat, 26 Nov 2022 21:37:59 GMT
Date: Sat, 26 Nov 2022 16:21:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EED2115B3276CB3CBDD3F3014DFAC69829D9F6E4D6C0A682C0BF03F64240AF9E"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5857
Expires: Sat, 26 Nov 2022 17:58:53 GMT
Date: Sat, 26 Nov 2022 16:21:16 GMT
Connection: keep-alive

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=BKpoZ8nSJLS4crUkzbVdex&campid={campaignid}&var=&ymid=BKpoZ8nSJLS4crUkzbVdex&ymid=BKpoZ8nSJLS4crUkzbVdex
Cookie: reverse=_dzj9sQ7ZsqLiOG-Bff5ivj3rasFomjT-IpgW938NTA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         139.45.197.151
HTTP/2 204 No Content
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
strict-transport-security: max-age=60
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 16:08:54 GMT
cache-control: public,max-age=3600
age: 742
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3964
Cache-Control: 'max-age=158059'
Date: Sat, 26 Nov 2022 16:21:16 GMT
Etag: "6381d72b-1d7"
Last-Modified: Sat, 26 Nov 2022 15:15:12 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F2204C33432D741923EEF89FCCB65E8372632D18C6E67B47864079F67166C2E2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12454
Expires: Sat, 26 Nov 2022 19:48:50 GMT
Date: Sat, 26 Nov 2022 16:21:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "43BBB48A1A37A33C18036773457C75408E907C1FD7297A42152AEE29F396066E"
Last-Modified: Thu, 24 Nov 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4709
Expires: Sat, 26 Nov 2022 17:39:45 GMT
Date: Sat, 26 Nov 2022 16:21:16 GMT
Connection: keep-alive

                                        
                                            GET /zone?&pub=0&zone_id=5225408&is_mobile=false&domain=applabzzeydoo.com&var=5332574&ymid=&var_3=&dsig=&nt=true&action=prerequest HTTP/1.1 
Host: choupsee.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         139.45.197.251
HTTP/2 200 OK
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
content-length: 0
x-trace-id: 24bb6e9df96fe889c4daa380c279b565
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /gid.js?pub=0&userId=&zoneId=5225408&checkDuplicate=true&ymid=&var=5332574 HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         139.45.195.8
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
content-length: 65
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7082f635447748a7984d6492345ad3f4; expires=Sun, 26 Nov 2023 16:21:16 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   65
Md5:    5b2b8fcb6c13ddaa6e684e1033eec8b3
Sha1:   d9e40d8826ed9eb23971d9601b17b608270eb0f9
Sha256: 6b978a2d2ef490ce0b1967baa3fa701424575b9c81c664ad47eb27d9aae61fa1
                                        
                                            OPTIONS /event HTTP/1.1 
Host: choupsee.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.251
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
content-length: 0
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /zone?&pub=0&zone_id=5225408&is_mobile=false&domain=applabzzeydoo.com&var=5332574&ymid=&var_3=&dsig=&nt=true&action=settings HTTP/1.1 
Host: choupsee.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.251
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
content-length: 728
x-trace-id: b475e5c80513c0a87cf79b451dd433fb
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (727)
Size:   728
Md5:    9df15f9652b0263c6d54b343edbf6714
Sha1:   350cf07e20faf32c5b3fbb61141dd2acd8beadbd
Sha256: c32bc695973537f04df45b6121e745fca60342ea32f05cd4a5996a3d2aa75f10
                                        
                                            POST /event HTTP/1.1 
Host: choupsee.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://applabzzeydoo.com/
Content-Type: application/json
Origin: https://applabzzeydoo.com
Content-Length: 469
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.251
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
content-length: 94
x-trace-id: 9895c7cf888d59f1b3484a52e66a7e79
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   94
Md5:    807c826c25d0a6dcfb70d8e649600519
Sha1:   57bd23df8a86dc95d6ced895785ab00821a9bbb2
Sha256: 425b1e8f743dbbe4231e4210612b342b6d59bfef79f49026dedc7f9ffbf47278

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=BKpoZ8nSJLS4crUkzbVdex&campid={campaignid}&var=&ymid=BKpoZ8nSJLS4crUkzbVdex&ymid=BKpoZ8nSJLS4crUkzbVdex&mprtr=1 HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://applabzzeydoo.com
Connection: keep-alive
Referer: https://applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=BKpoZ8nSJLS4crUkzbVdex&campid={campaignid}&var=&ymid=BKpoZ8nSJLS4crUkzbVdex&ymid=BKpoZ8nSJLS4crUkzbVdex
Cookie: reverse=_dzj9sQ7ZsqLiOG-Bff5ivj3rasFomjT-IpgW938NTA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

search
                                         139.45.197.151
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.25
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   6
Md5:    ab8734e44b045628b977f43a93f6b163
Sha1:   48d37df699336cb57c96fe7a74faab9c4ed7efd2
Sha256: 5adc6a962aa8f454255200011e8e1b9c892a36422b91c4eb6b93df19586f498c

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            OPTIONS /event HTTP/1.1 
Host: stoomawy.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         139.45.197.250
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
content-length: 0
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /event HTTP/1.1 
Host: stoomawy.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://applabzzeydoo.com/
Content-Type: application/json
Origin: https://applabzzeydoo.com
Content-Length: 386
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.250
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
content-length: 94
x-trace-id: 4a8a40f692667ad106e2a6cde30ff677
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   94
Md5:    807c826c25d0a6dcfb70d8e649600519
Sha1:   57bd23df8a86dc95d6ced895785ab00821a9bbb2
Sha256: 425b1e8f743dbbe4231e4210612b342b6d59bfef79f49026dedc7f9ffbf47278

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5646
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 16:21:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5646
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 16:21:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5646
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 16:21:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5646
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 16:21:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5646
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 16:21:18 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SRN-oOfa8Z0mQZFYkWAv32XFiXChfGjfwZkfWz-IzHubwrKgzwoTxQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 03:55:38 GMT
age: 44740
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3502
Md5:    a783df85f30f9c555f9df6b99f61744d
Sha1:   61f9bed607e81606be78285596acdc5e0e4f4994
Sha256: 19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 02:19:43 GMT
age: 50495
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4309
Md5:    841a4b110022a99ddea6f7bf66df0fa1
Sha1:   126771b86638108050cf57c0d12faa27f80f0edb
Sha256: 240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qKxrYxVsJWOXAbrn6IpwLycF3rknFLkQeDyKOLq5WyflvTLeUjg_Lg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:18:42 GMT
age: 64956
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9914
Md5:    3b1c6878914466cfece680fa7cb73502
Sha1:   47fac81a2dd809df5c42ca1362f71d553572d2b1
Sha256: 6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TI0cacek54dPUYW7fYy0xm-1CKdRXZGqBH1vGURakUsBbm-WGcW-vA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:17:55 GMT
age: 65003
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15818
Md5:    17ebe470d040a6ea8c57e9b9d4f4e828
Sha1:   1ac7a410cd4f3709f476c776dd5646dd982dcfa8
Sha256: d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: utbUF-6Z7rMqPNdRKHJyI-IZoyTy6HpkNBY-60xcZ-6NDXBz1XN6-Q==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:40 GMT
age: 66758
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9049
Md5:    c8dc4b8a7e9f7f4f84f0da568b43392b
Sha1:   3d32bff85cb7ec118c4496d0c3802829fdc9af3b
Sha256: 4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8913
x-amzn-requestid: d0a9414c-eccf-44e8-adb7-92654544eeb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWXEpeIAMFnzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-5825510666b3e80a5f83cafa;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: whO__FB0B2ywDP_p63eQ044RXbT207sX1i87I6nPAFUB85nSYc0Cuw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
age: 66912
etag: "0b6c9b51d10762a4747286ab5b1c2354fa39c622"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8913
Md5:    5088223f5973e3cd56f03f50a1e84b79
Sha1:   0b6c9b51d10762a4747286ab5b1c2354fa39c622
Sha256: 8159e4f7eec7bea518bb29e3fdb070bab4fb70116205577f7b7d74ad4d0dfbc7
                                        
                                            GET /sw-check-permissions/5225408?z=5225408&ymid=&var=5332574 HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: reverse=_dzj9sQ7ZsqLiOG-Bff5ivj3rasFomjT-IpgW938NTA
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         139.45.197.151
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:15 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.27
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /apps/templates/constructor/constructor-app-lab-v1/build/css/main.css?v4321212 HTTP/1.1 
Host: littlecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.67.10.98
HTTP/2 200 OK
content-type: text/css
                                        
date: Sat, 26 Nov 2022 16:21:15 GMT
last-modified: Thu, 24 Nov 2022 13:09:16 GMT
vary: Accept-Encoding
etag: W/"637f6cfc-2c38"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 5472
server: cloudflare
cf-ray: 7703f4c6a8d5b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /apps/templates/constructor/constructor-app-lab-v1/themes/glass-dark.css?31212 HTTP/1.1 
Host: littlecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.67.10.98
HTTP/2 200 OK
content-type: text/css
                                        
date: Sat, 26 Nov 2022 16:21:15 GMT
last-modified: Thu, 24 Nov 2022 13:09:16 GMT
vary: Accept-Encoding
etag: W/"637f6cfc-4ef"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 2562
server: cloudflare
cf-ray: 7703f4c6b8e3b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /apps/templates/_assets/scripts/vanillaqr.min.js HTTP/1.1 
Host: littlecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.67.10.98
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sat, 26 Nov 2022 16:21:15 GMT
last-modified: Thu, 24 Nov 2022 13:09:16 GMT
vary: Accept-Encoding
etag: W/"637f6cfc-2d08"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 253
server: cloudflare
cf-ray: 7703f4c6b8e5b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /apps/templates/constructor/constructor-app-lab-v1/build/js/main.js HTTP/1.1 
Host: littlecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.67.10.98
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sat, 26 Nov 2022 16:21:15 GMT
last-modified: Thu, 24 Nov 2022 13:09:16 GMT
vary: Accept-Encoding
etag: W/"637f6cfc-16ae"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 253
server: cloudflare
cf-ray: 7703f4c6b8edb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /pfe/current/sw.perm.check.min.js?r=sw HTTP/1.1 
Host: stoomawy.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

search
                                         139.45.197.250
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 26 Nov 2022 16:21:16 GMT
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-1bc7f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - quad9: Sinkholed