Report - sergerod.me/polini-65cc.html

Report Overview

Submitted URL
sergerod.me/polini-65cc.html
IP
104.21.80.169
ASN
#13335 CLOUDFLARENET
Submitted
2022-11-29 23:02:28
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
37.1.213.100	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	442 B	897 B	37.1.213.100
www.profitablegatetocontent.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.2 kB	4.1 kB	192.243.61.225
sergerod.me	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	816 B	1.6 kB	172.67.152.50
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.218.168.248
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	970 B	22 kB	216.58.207.227
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.33.119.27
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	66 kB	34.120.237.76
euro-times.org	188969	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.1 kB	540 kB	94.242.54.185
gertrk.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	866 B	584 B	168.119.139.96
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	3.5 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-11-29	medium	37.1.213.100	Sinkholed
2022-11-29	medium	profitablegatetocontent.com	Sinkholed
2022-11-29	medium	profitablegatetocontent.com	Sinkholed

JavaScript (11)

	URL	Size	First Seen	Last Seen
	euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9	667 B	2023-03-11	2023-03-11
Pretty URL euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9 IP 94.242.54.185 ASN #43317 FNK LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:49:37 Last Seen2023-03-11 23:21:23 Times Seen1 Hash 09f6267c9ab627de526ab6e22112a08e 1ca93f59ba3a313ffc3e29f96e8cd10c1154a2cf 95a37a74278aabb3a7ca289f900fbe54629b8ee617c83ec3862de49b997a5932 Loading...

	euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9	326 B	2023-03-11	2023-03-11
Pretty URL euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9 IP 94.242.54.185 ASN #43317 FNK LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:49:36 Last Seen2023-03-11 23:21:23 Times Seen1 Hash ccbfefed1f94a40249bca501e52a998e 2d86364902508ba296819e55a9d19ba9edde59b6 cd45d2e907172a53912f91f4b4774c60b1137a046adea76266392f150a7cb3ee Loading...

	euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9	667 B	2023-03-11	2023-03-11
Pretty URL euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9 IP 94.242.54.185 ASN #43317 FNK LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:49:36 Last Seen2023-03-11 23:21:23 Times Seen1 Hash 8a82770711ed2176aaf39a3cd037409f bb707468e747112ef1f1b7d70848db227433159a 6c165798b3bd750e32c71bc811713ed84a91e35c1548ce59abaf11a66b0854c0 Loading...

	euro-times.org/no/vg/landing.js	2.7 kB	2023-03-11	2023-03-11
Pretty URL euro-times.org/no/vg/landing.js IP 94.242.54.185 ASN #43317 FNK LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 20:04:32 Last Seen2023-03-11 23:21:23 Times Seen1 Hash 6f097f34f0d7d31372d8d10efb8b5bc5 abfdda42379821c0d427f7bafa00fa10aca78130 45a2c3718857a6d88bbea4677e8b3d15a36f09c2f9cffa89b38cc8cfd76178e8 Loading...

	www.profitablegatetocontent.com/e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06	357 B	2023-03-08	2023-03-29
Pretty URL www.profitablegatetocontent.com/e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06 IP 192.243.61.225 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 15:51:43 Last Seen2023-03-29 22:50:23 Times Seen6 Hash 4cdf6a131b8361ecd87e9c484af0e300 9d8a85a809e72e2fa83afc2420042330a5239c90 0cb4a7b5f2b1b1d9dea530bc82c4406c2c35dd42750657bbdb07475c1138a83f Loading...

	www.profitablegatetocontent.com/e51xmfb9?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=17683209	2.1 kB	2023-03-07	2023-04-05
Pretty URL www.profitablegatetocontent.com/e51xmfb9?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=17683209 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:21 Last Seen2023-04-05 02:12:07 Times Seen388 Hash 4fd91164aa79d34ae401150b9f112bbe a09fe46ece27e06c82f059c481090481804461bc e717b18eba32145b270f89fb30d50c51c6fdd7060deff6f467fc8621973123f8 Loading...

	euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9	610 B	2023-03-11	2023-03-11
Pretty URL euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9 IP 94.242.54.185 ASN #43317 FNK LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 20:04:32 Last Seen2023-03-11 23:21:23 Times Seen1 Hash 9765e5db8aa0c63e4236a140d0fbf0f9 5d8d5c03939455c3d271be6316cfc25b7c767620 e17c7f8a94d2fd0afe881230221884f4ac4078efe36cbb526372876df50d1e00 Loading...

		Size	First Seen	Last Seen
	#1 Write - e24a86504d8bdd6f9205027eb6ea87a0	10 B	2023-03-08	2023-03-11
Pretty Observations First Seen2023-03-08 16:01:17 Last Seen2023-03-11 23:51:20 Times Seen1 Hash e24a86504d8bdd6f9205027eb6ea87a0 692ac36017882f9ff4df79cdf81d06da146e8142 2c63700810e4979b0ea4be23d3cd029a01212519136c81f8258900415ea1e92b Loading...

	#2 Write - 1a843716abda8e9475f0ffe42e2ab7b7	17 B	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 22:23:35 Last Seen2023-03-11 22:40:04 Times Seen1 Hash 1a843716abda8e9475f0ffe42e2ab7b7 c13e984a019d7cb636bd740b422f321d640b950b 01b3b0ea8904e342cc34608fa495b4060dc1deea99903135cc9f43690dcbe9b4 Loading...

	#3 Write - 32e9d5f299c8acb9a0cad38aaca192bf	10 B	2023-03-08	2023-03-11
Pretty Observations First Seen2023-03-08 15:05:26 Last Seen2023-03-11 23:51:20 Times Seen1 Hash 32e9d5f299c8acb9a0cad38aaca192bf 0999e319bcee245b3a0a43dd4ce1d704224cd937 7ba775f0948db531a65e516f847199b7ca423d97e109f432b4c854dce7d8fd73 Loading...

	#4 Write - 351fa4880645cf59bcd26ddf61452586	17 B	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 22:23:35 Last Seen2023-03-11 22:40:04 Times Seen1 Hash 351fa4880645cf59bcd26ddf61452586 fab0fa39cdd05be1d45509b67356f88f984ea1e8 98b936dc65b0c1468d6d37910e69ac4bb919feeba3b474d2bfbc9f6b4673d18e Loading...

HTTP Transactions (53)

URL IP Response Size

sergerod.me/polini-65cc.html

172.67.152.50

301 Moved Permanently

169 B

URL HTTP/1.1
sergerod.me/polini-65cc.html
IP
172.67.152.50:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
b51956ed2a6129f43c5d0ecc011cc5a5
c03157aff80067b6b57903d3843b9fd9e07b33ab
1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b

HTTP Headers

GET /polini-65cc.html HTTP/1.1
Host: sergerod.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Tue, 29 Nov 2022 23:02:17 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://sergerod.me/polini-65cc.html
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i0coEJEYfEsV4Zntm%2BxiIgoJHr8O%2F0zVIxLkJoklujQW2i5Z15S1afyoHS9SAKZ%2B2pdKM2w99f11%2FsY7czz0md6TJCRAIU6ZyuGTb6UHod7WQ2VMe8w5XOvNVawsCA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 771ef856fece1bfe-OSL
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9384
Expires: Wed, 30 Nov 2022 01:38:41 GMT
Date: Tue, 29 Nov 2022 23:02:17 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5295
Cache-Control: max-age=133029
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 23:02:17 GMT
Etag: "6385df6f-1d7"
Expires: Thu, 01 Dec 2022 11:59:26 GMT
Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6554
Expires: Wed, 30 Nov 2022 00:51:31 GMT
Date: Tue, 29 Nov 2022 23:02:17 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 22:19:38 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2559
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 4Q9HDc8N0iHCfkztzx/mGnAHgliB1c455T/g4aMz7JwcAH92kJFmvwAH/n1G7NIstBsBAuwCp7E=
x-amz-request-id: 4SRZDMGZ83GS8ZAA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 22:45:38 GMT
age: 999
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 23:02:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1p5/p5eqGtsfxwE

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/p5eqGtsfxwE
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fd190d212c37bee18c1bf40f6baa5a1a
208f5f8ea04388f52430091e2dca1befb2248657
2f7b633bb7bfcca7fe3ec4bc569e77a63032664e732292739913c21d4f3e9ba5

HTTP Headers

POST /s/gts1p5/p5eqGtsfxwE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 23:02:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 22:08:56 GMT
cache-control: public,max-age=3600
age: 3201
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1p5/p5eqGtsfxwE

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/p5eqGtsfxwE
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
fd190d212c37bee18c1bf40f6baa5a1a
208f5f8ea04388f52430091e2dca1befb2248657
2f7b633bb7bfcca7fe3ec4bc569e77a63032664e732292739913c21d4f3e9ba5

HTTP Headers

POST /s/gts1p5/p5eqGtsfxwE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 23:02:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2488
Cache-Control: max-age=125157
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 23:02:18 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 09:48:15 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

37.1.213.100/3CLgR2?host=sergerod.me&keyword=polini+65cc&se_referrer=unknown&mark=26112022&template=default.txt

37.1.213.100

302 Found

0 B

URL HTTP/1.1
37.1.213.100/3CLgR2?host=sergerod.me&keyword=polini+65cc&se_referrer=unknown&mark=26112022&template=default.txt
IP
37.1.213.100:0
ASN
#29802 HVC-AS

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /3CLgR2?host=sergerod.me&keyword=polini+65cc&se_referrer=unknown&mark=26112022&template=default.txt HTTP/1.1
Host: 37.1.213.100
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Server: nginx
Date: Tue, 29 Nov 2022 23:02:18 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Location: https://www.profitablegatetocontent.com/e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06
Pragma: no-cache
Set-Cookie: _subid=s8hnpa1n9lf2;Expires=Friday, 30-Dec-2022 23:02:18 GMT;Max-Age=2678400;Path=/
9fb19=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjE2XCI6MTY2OTc2MjkzOH0sXCJjYW1wYWlnbnNcIjp7XCIyXCI6MTY2OTc2MjkzOH0sXCJ0aW1lXCI6MTY2OTc2MjkzOH0ifQ.Tj1q3hwPB6WIMjdY7eR5rTG0KvRY09oSN-ax_BPLGxs;Expires=Tuesday, 29-Oct-2075 22:04:36 GMT;Max-Age=1669849338;Path=/
_token=uuid_s8hnpa1n9lf2_s8hnpa1n9lf263868f7a3c3c17.98155174;Expires=Friday, 30-Dec-2022 23:02:18 GMT;Max-Age=2678400;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
90f78db89d2a50432311a4f25bbed42e
92eb72f2f95d9cb645bafabd596103c835362ee9
1133ef4b639f7013f885832480233ea5b005fe3e4ad3d965c2475d0c8ef4568f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1133EF4B639F7013F885832480233EA5B005FE3E4AD3D965C2475D0C8EF4568F"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4471
Expires: Wed, 30 Nov 2022 00:16:49 GMT
Date: Tue, 29 Nov 2022 23:02:18 GMT
Connection: keep-alive

push.services.mozilla.com/

34.218.168.248

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.218.168.248:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Xpa6b8rZFTvCp1Ty5xccgA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: S0IDrUpHjNsZPWvh8Uo302qRI7Y=

www.profitablegatetocontent.com/e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06

192.243.61.225

200 OK

1.2 kB

URL HTTP/1.1
www.profitablegatetocontent.com/e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06
IP
192.243.61.225:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
1.2 kB (1209 bytes)
Hash
9a9cefc571209268e562c7ed02400bdb
83b96d1e6cd5273acb24a71ae59f9b09ed056af0
2116115ceeb07115fb7efd7c0d8cae54f5630edf7614bd5d42e3bbe51d88333e

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /e51xmfb9?key=6cf0bf53774e52ec9e3ca94803f48b06 HTTP/1.1
Host: www.profitablegatetocontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 29 Nov 2022 23:02:18 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17683209; expires=Wed, 30 Nov 2022 23:02:18 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.ZjeX4P_i2vZQYd1xtGaJA62tfMQN9rdeu3P4_ODK1Og; expires=Tue, 29 Nov 2022 23:03:18 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: df277f9c8820f6de27cee337bdf773ba
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

www.profitablegatetocontent.com/e51xmfb9?shu=33cfa0dd19a0686e0bdadb0dc0e23130d34e1dd13ba318998ca028c7c4284e65e138a99c6b291bf2a7590f6068ba69b0566cd0830adbd3c7de91fbe470051fce8767d85f5f33aa62bd9a4f61ab52feaa64d7f0e7&pst=1669762998&rmtc=t&uuid=&pii=&in=false&key=6cf0bf53774e52ec9e3ca94803f48b06

192.243.61.225

302 Found

0 B

URL HTTP/1.1
www.profitablegatetocontent.com/e51xmfb9?shu=33cfa0dd19a0686e0bdadb0dc0e23130d34e1dd13ba318998ca028c7c4284e65e138a99c6b291bf2a7590f6068ba69b0566cd0830adbd3c7de91fbe470051fce8767d85f5f33aa62bd9a4f61ab52feaa64d7f0e7&pst=1669762998&rmtc=t&uuid=&pii=&in=false&key=6cf0bf53774e52ec9e3ca94803f48b06
IP
192.243.61.225:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /e51xmfb9?shu=33cfa0dd19a0686e0bdadb0dc0e23130d34e1dd13ba318998ca028c7c4284e65e138a99c6b291bf2a7590f6068ba69b0566cd0830adbd3c7de91fbe470051fce8767d85f5f33aa62bd9a4f61ab52feaa64d7f0e7&pst=1669762998&rmtc=t&uuid=&pii=&in=false&key=6cf0bf53774e52ec9e3ca94803f48b06 HTTP/1.1
Host: www.profitablegatetocontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.profitablegatetocontent.com/e51xmfb9?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=17683209
Cookie: u_pl=17683209; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzY4MzIwOSwiayI6IjZjZjBiZjUzNzc0ZTUyZWM5ZTNjYTk0ODAzZjQ4YjA2Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTg2NTY1LCJwaWQiOjU0MjY1MCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjI4LCJwdCI6NCwicGsiOiJlNTF4bWZiOSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiIn19.ZjeX4P_i2vZQYd1xtGaJA62tfMQN9rdeu3P4_ODK1Og; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Tue, 29 Nov 2022 23:02:19 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://gertrk.com/click.php?key=n9wbuyk5h0mq6m6x7xc5&SUB_ID_SHORT=18f0fcead694bc60a05f99e063864afd&COST_CPC=0.002400&PLACEMENT_ID=17683209&CAMPAIGN_ID=691144&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2042909
Set-Cookie: iprc2bf4824be2403952d25ff8a370bb2acf=3819930; expires=Wed, 30 Nov 2022 23:02:19 GMT
pdhtkv=true; expires=Wed, 30 Nov 2022 23:02:19 GMT
uncs=1; expires=Wed, 30 Nov 2022 23:02:19 GMT
pdhtkv28=true; expires=Wed, 30 Nov 2022 23:02:19 GMT
uncs28=1; expires=Wed, 30 Nov 2022 23:02:19 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 20503ad379c74e0f9d25ab34e11f6d18
Strict-Transport-Security: max-age=0; includeSubdomains

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14279
Expires: Wed, 30 Nov 2022 03:00:18 GMT
Date: Tue, 29 Nov 2022 23:02:19 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14279
Expires: Wed, 30 Nov 2022 03:00:18 GMT
Date: Tue, 29 Nov 2022 23:02:19 GMT
Connection: keep-alive

r3.o.lencr.org/

23.33.119.27

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14279
Expires: Wed, 30 Nov 2022 03:00:18 GMT
Date: Tue, 29 Nov 2022 23:02:19 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png

34.120.237.76

200 OK

8.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.3 kB (8337 bytes)
Hash
2cb669522a324cd5d9ba1b1743138d38
71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0
a997731964710b80affb001f7f2e2f05a93550b06c1626279516d78b11332803

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8337
x-amzn-requestid: 88e6ec5a-6b04-4787-91e4-02f316d0d6e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhgYHViIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c68-10f0d81a09c0ae930f6be726;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CQERARyqGc2C8dEihlWw5X9eI6QqdR9Equ683aCy1XkizytQdod9Kw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:57:25 GMT
age: 3894
etag: "71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.8 kB (9812 bytes)
Hash
5c5277610f3a542571abb53ffb3d4df1
ce411cc5b0a37bbd89551d06d7d0349f45734e97
3bf1105631ef7fda0249a46390ca90f904ea73b0a4f017c2db85326550a80a3f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9812
x-amzn-requestid: 70bfeb68-0703-44bf-8550-50c759d52d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDbFolIAMFYBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-73fb65ee2b9161372819207f;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QQCoNlJBSE2V-IQlZr37dhINTABRu3ms9Y1p4FweO36HD-U6m9vvwg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 4174
etag: "ce411cc5b0a37bbd89551d06d7d0349f45734e97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

3.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.7 kB (3719 bytes)
Hash
ceb8e975fb408de32c43f55febaa6414
453067f6ab356aa87a3ad3b56e33545376597852
e0ecbb6052b4fef75f58da8dae589c81ab9ec9d304de08f26c144a2c3ce9eaac

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3719
x-amzn-requestid: 6fab3454-fedd-4a1e-ae47-468ddd6233bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaGQ4IAMFUkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-4b313cf054d6301e71cdc0c1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: phw8DXQgjOyH5g4gvbqgZk-2sHr2n9cHVr4lqqPXfXtyhG32gs2pIg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 4174
etag: "453067f6ab356aa87a3ad3b56e33545376597852"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.3 kB (7298 bytes)
Hash
e00769bd1391b8f4f5b8ab128a825355
e4ddf955e8ac1986045ed55880c43c69e588a021
81ca4d20c28fed8fd3135515daadc1fdbfb4198535d7c46021b418b8b98e59a5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7298
x-amzn-requestid: 381e55bb-876b-46ad-84b6-1ddf9f876f56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDcE3poAMFaAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-7c12394600900afc7281e858;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8heT2eN5oLbO14R9qLq78Vma_TkteufTyKM5i3K2XoJYXfWNwLMEwQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:56:25 GMT
age: 3954
etag: "e4ddf955e8ac1986045ed55880c43c69e588a021"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11466 bytes)
Hash
0c14828912decf19c9d95fee93e92f00
49a82390cbf2139bf681d896f9467ab736e0b337
bbafc9bd160a30c6a31954bdf66655e1decc59dead3bb94c6fa21cad1cd56fe3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11466
x-amzn-requestid: 40ae63d3-397e-4118-90b2-d48b1f4014c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHUxIAMFxWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-2b309a0a5e93f68312a26fa1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G2_x26WJ_ISQDsWfV3RzC_jCy5FLNLpblRk_GvuCn4i-ETBAsaKBjQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 4174
etag: "49a82390cbf2139bf681d896f9467ab736e0b337"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7f230eb-6b67-4a80-b973-d8ea78fe73ae.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12853 bytes)
Hash
e08af5b1d18986e112913c6e69cc8ce6
151b60134a66305bd72dbb3810f67a57720b2af1
555a62d98f4002ad187a6b480d534a1dbe3c64d1f4d17cffad2ab985c10ca462

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7f230eb-6b67-4a80-b973-d8ea78fe73ae.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12853
x-amzn-requestid: 25e4402d-98d0-4c38-a927-397c37724bea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhdpHAuIAMFweQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c57-506672a36959d9ea09ef5155;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gHL2sFE-o1u5kEIUiabbP6u5CXr3ihI4mKiAVkfReyuJuTF5k5ktSg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:17:16 GMT
age: 2703
etag: "151b60134a66305bd72dbb3810f67a57720b2af1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

euro-times.org/no/vg?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9

94.242.54.185

301 Moved Permanently

347 B

URL HTTP/1.1
euro-times.org/no/vg?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
347 B (347 bytes)
Hash
5c83a614b9aa971fed921f5813191415
df40594fd6a92840f884ac8f737c355738cb28d6
25ca637943278effe2bc6e120958f3ec8a29eacb34820a8aad45dda9ae436ccb

HTTP Headers

GET /no/vg?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9 HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatetocontent.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 301 Moved Permanently
Date: Tue, 29 Nov 2022 23:02:19 GMT
Server: Apache
Location: https://euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9
Cache-Control: max-age=172800
Expires: Thu, 01 Dec 2022 23:02:19 GMT
Content-Length: 347
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9

94.242.54.185

200 OK

37 kB

URL HTTP/1.1
euro-times.org/no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (16051)
Size
37 kB (37197 bytes)
Hash
fd27b5bacbacc94bc34df9b436b8990e
3e178e5df3c837795baf54ef00000272dd505d08
c4556dd6e3e679399ec828c51c52cd44304ba4e25746e68c9e048ea6df7a8e8e

HTTP Headers

GET /no/vg/?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9 HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatetocontent.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:19 GMT
Server: Apache
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

euro-times.org/no/vg/vendor.67e32aaf581c20179082.css

94.242.54.185

200 OK

60 kB

URL HTTP/1.1
euro-times.org/no/vg/vendor.67e32aaf581c20179082.css
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
ASCII text, with very long lines (59489)
Size
60 kB (59548 bytes)
Hash
1e0d1ba4e4338c872503027231d9dc3b
e34dec9da85672c3980361b52b74ea476328e661
f9fe5280ae54a95dc50e6cacfd7ff7815ff23439761c00ff95719c84b261e769

HTTP Headers

GET /no/vg/vendor.67e32aaf581c20179082.css HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:19 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:28 GMT
Accept-Ranges: bytes
Content-Length: 59548
Cache-Control: max-age=2592000
Expires: Thu, 29 Dec 2022 23:02:19 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

euro-times.org/no/vg/css.css

94.242.54.185

200 OK

6.9 kB

URL HTTP/1.1
euro-times.org/no/vg/css.css
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
ASCII text
Size
6.9 kB (6904 bytes)
Hash
d466b4fce52545fc65db3dea539f295e
122c952287f265a041f49984e76d4c4b91d8793e
1bb33da015e40392c387bdb088b426bd437fa0d25195c56d73e722f1a4a45c92

HTTP Headers

GET /no/vg/css.css HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://euro-times.org/no/vg/vendor.67e32aaf581c20179082.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:19 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:16 GMT
Accept-Ranges: bytes
Content-Length: 6904
Cache-Control: max-age=2592000
Expires: Thu, 29 Dec 2022 23:02:19 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css

euro-times.org/no/vg/landing.js

94.242.54.185

200 OK

2.7 kB

URL HTTP/1.1
euro-times.org/no/vg/landing.js
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
ASCII text, with CRLF line terminators
Size
2.7 kB (2695 bytes)
Hash
6f097f34f0d7d31372d8d10efb8b5bc5
abfdda42379821c0d427f7bafa00fa10aca78130
45a2c3718857a6d88bbea4677e8b3d15a36f09c2f9cffa89b38cc8cfd76178e8

HTTP Headers

GET /no/vg/landing.js HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:19 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:24 GMT
Accept-Ranges: bytes
Content-Length: 2695
Cache-Control: max-age=31536000
Expires: Wed, 29 Nov 2023 23:02:19 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

euro-times.org/no/vg/app.67e32aaf581c20179082.css

94.242.54.185

200 OK

132 kB

URL HTTP/1.1
euro-times.org/no/vg/app.67e32aaf581c20179082.css
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
ASCII text, with very long lines (65536), with no line terminators
Size
132 kB (131940 bytes)
Hash
89fa8a5de4a0df4f1ebbb6916391fc3d
2e3ea867be2bc412e7bbfd132845ebf061cedc4b
3b65b1c726a2308821d8b57be5c421fe119cf8bedfc7d510373bdf136b25e169

HTTP Headers

GET /no/vg/app.67e32aaf581c20179082.css HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:19 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:18 GMT
Accept-Ranges: bytes
Content-Length: 131940
Cache-Control: max-age=2592000
Expires: Thu, 29 Dec 2022 23:02:19 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

euro-times.org/no/vg/4.jpg

94.242.54.185

200 OK

2.9 kB

URL HTTP/1.1
euro-times.org/no/vg/4.jpg
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
JPEG image data, baseline, precision 8, 100x75, components 3\012- data
Size
2.9 kB (2894 bytes)
Hash
3e9ed2110941d9ef87cb94e45a33e7d9
62bbff3e512d8efe6a68da04ee2d45c4dc3abcbc
2815085a27a60c37d33139ea602e2a605a7a8f40ff72d0b00ba361eaed358f84

HTTP Headers

GET /no/vg/4.jpg HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:20 GMT
Accept-Ranges: bytes
Content-Length: 2894
Cache-Control: max-age=31536000
Expires: Wed, 29 Nov 2023 23:02:20 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

euro-times.org/no/vg/b.jpg

94.242.54.185

200 OK

97 kB

URL HTTP/1.1
euro-times.org/no/vg/b.jpg
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 993x614, components 3\012- data
Size
97 kB (97034 bytes)
Hash
f2d69a62db1116858a861ae6d2986083
8ba42fbda070dcbda267db7a5e9022a50120e29f
6107b8c6ed4f52a29b516deac8efe4b80a8c23f7685ab039f4b91eeb4dc0fc09

HTTP Headers

GET /no/vg/b.jpg HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 30 Sep 2018 17:08:58 GMT
Accept-Ranges: bytes
Content-Length: 97034
Cache-Control: max-age=31536000
Expires: Wed, 29 Nov 2023 23:02:20 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg

euro-times.org/no/vg/3.jpg

94.242.54.185

200 OK

3.0 kB

URL HTTP/1.1
euro-times.org/no/vg/3.jpg
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
JPEG image data, baseline, precision 8, 100x75, components 3\012- data
Size
3.0 kB (2974 bytes)
Hash
63295a967f84119e4ed60176db557802
0f7cf3da84692b77156e61009670e2a4ad8f24e0
fd6bc83266fa8a104e1b767da0f1624edf26c38be0755834adfb2205be09c076

HTTP Headers

GET /no/vg/3.jpg HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:16 GMT
Accept-Ranges: bytes
Content-Length: 2974
Cache-Control: max-age=31536000
Expires: Wed, 29 Nov 2023 23:02:20 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

euro-times.org/no/vg/2.jpg

94.242.54.185

200 OK

2.3 kB

URL HTTP/1.1
euro-times.org/no/vg/2.jpg
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
JPEG image data, baseline, precision 8, 100x75, components 3\012- data
Size
2.3 kB (2341 bytes)
Hash
87c8eb24f85fa30bb0a90563a69cdea4
df45836de015b1638505ecb4c947995d0896057c
02a85ec09ad22e617c08be3386fafcbd688ac8cbedffcc90f4a9a47b9b0ac6e8

HTTP Headers

GET /no/vg/2.jpg HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:28 GMT
Accept-Ranges: bytes
Content-Length: 2341
Cache-Control: max-age=31536000
Expires: Wed, 29 Nov 2023 23:02:20 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg

euro-times.org/no/vg/mapbox-gl.css

94.242.54.185

200 OK

40 kB

URL HTTP/1.1
euro-times.org/no/vg/mapbox-gl.css
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
ASCII text, with very long lines (13302)
Size
40 kB (39768 bytes)
Hash
5805495ed9ceac85c259bc9031d77b15
ca5140c4b10c476efc309166aaa3dfdc841748e8
70659bc9428ad79353ad8ce663c4b3b145af109a5b3e31c062f7c758706d04f7

HTTP Headers

GET /no/vg/mapbox-gl.css HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://euro-times.org/no/vg/app.67e32aaf581c20179082.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:26 GMT
Accept-Ranges: bytes
Content-Length: 39768
Cache-Control: max-age=2592000
Expires: Thu, 29 Dec 2022 23:02:20 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css

euro-times.org/no/vg/css.1.css

94.242.54.185

200 OK

5.4 kB

URL HTTP/1.1
euro-times.org/no/vg/css.1.css
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
ASCII text
Size
5.4 kB (5446 bytes)
Hash
8054a406a0f2d3aa2ec8e4c4b8e9c418
b399ed5e75a1d87921055caa08d4edff4b9431d8
17bd4bcb69e324586fcc2400c75915b7dfdc25a4ecb96fedd885dbb2fbcbf793

HTTP Headers

GET /no/vg/css.1.css HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://euro-times.org/no/vg/app.67e32aaf581c20179082.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:24 GMT
Accept-Ranges: bytes
Content-Length: 5446
Cache-Control: max-age=2592000
Expires: Thu, 29 Dec 2022 23:02:20 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css

euro-times.org/no/vg/c.jpg

94.242.54.185

200 OK

45 kB

URL HTTP/1.1
euro-times.org/no/vg/c.jpg
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x534, components 3\012- data
Size
45 kB (45155 bytes)
Hash
d2cef70e5a0d7da1d6397af10a73d730
99b428cb59c651c66862cc4c4e8075366fb030fc
16f7054030df372428fbc9178aaf5936d3759d56ea717ee0e3af20eb7f6d2e44

HTTP Headers

GET /no/vg/c.jpg HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Mon, 28 Nov 2022 06:57:26 GMT
Accept-Ranges: bytes
Content-Length: 45155
Cache-Control: max-age=31536000
Expires: Wed, 29 Nov 2023 23:02:20 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

euro-times.org/no/vg/1.jpg

94.242.54.185

200 OK

2.4 kB

URL HTTP/1.1
euro-times.org/no/vg/1.jpg
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
JPEG image data, baseline, precision 8, 100x75, components 3\012- data
Size
2.4 kB (2352 bytes)
Hash
1dbbfde744cb9af22e0fc12f86792f1d
9fde5f98c88e2c5e03b44652bd2894d275f0263d
2041bc9199b8f2181e52e8554ca8d9126913d7913a7428d5e5ccae8e7c7392a7

HTTP Headers

GET /no/vg/1.jpg HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:24 GMT
Accept-Ranges: bytes
Content-Length: 2352
Cache-Control: max-age=31536000
Expires: Wed, 29 Nov 2023 23:02:20 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg

euro-times.org/no/vg/a.jpg

94.242.54.185

200 OK

26 kB

URL HTTP/1.1
euro-times.org/no/vg/a.jpg
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x334, components 3\012- data
Size
26 kB (25674 bytes)
Hash
94c3ec372b05fc9bade546f4d23ff3db
c4767884c046decc290fb6e0e7c2ec05ebd22034
bf0da41d83412ede1e2bfea83e775a291839b06a1bb9b4c41f75045a6d7038ba

HTTP Headers

GET /no/vg/a.jpg HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:26 GMT
Accept-Ranges: bytes
Content-Length: 25674
Cache-Control: max-age=31536000
Expires: Wed, 29 Nov 2023 23:02:20 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

euro-times.org/no/vg/3b9f95a06cd9fc9306ed4b0ec723efcf.woff2

94.242.54.185

200 OK

27 kB

URL HTTP/1.1
euro-times.org/no/vg/3b9f95a06cd9fc9306ed4b0ec723efcf.woff2
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
Web Open Font Format (Version 2), TrueType, length 26808, version 1.1311\012- data
Size
27 kB (26808 bytes)
Hash
3b9f95a06cd9fc9306ed4b0ec723efcf
cb944d4c9f62c13e6ccf0003542c164fb800b5ad
350217883795851e952edd10f09e244e2e385532b55fc26a55ef423bad2d7502

HTTP Headers

GET /no/vg/3b9f95a06cd9fc9306ed4b0ec723efcf.woff2 HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://euro-times.org/no/vg/vendor.67e32aaf581c20179082.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:26 GMT
Accept-Ranges: bytes
Content-Length: 26808
Cache-Control: max-age=172800
Expires: Thu, 01 Dec 2022 23:02:20 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: font/woff2

euro-times.org/no/vg/addesk.php

94.242.54.185

200 OK

43 B

URL HTTP/1.1
euro-times.org/no/vg/addesk.php
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
6b552c49e4947f4e0ca8830489ab4755
24c37b7fed326d6bed050ba6d605a195e3e80635
ff11de8dd53431deb0047e022373452b60b0b432a9be16ee04121a7ced084337

HTTP Headers

GET /no/vg/addesk.php HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

euro-times.org/no/vg/4dce9ca26ac8769a82cb76b8a72b2a93.woff2

94.242.54.185

200 OK

23 kB

URL HTTP/1.1
euro-times.org/no/vg/4dce9ca26ac8769a82cb76b8a72b2a93.woff2
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
Web Open Font Format (Version 2), TrueType, length 23272, version 1.1311\012- data
Size
23 kB (23272 bytes)
Hash
4dce9ca26ac8769a82cb76b8a72b2a93
789f126c024d4977beb17d279f855c7d49f90461
2a1102749787811a8a8867540a17a0b3e05061683622c2c3ae78d3d382772e18

HTTP Headers

GET /no/vg/4dce9ca26ac8769a82cb76b8a72b2a93.woff2 HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://euro-times.org/no/vg/vendor.67e32aaf581c20179082.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:22 GMT
Accept-Ranges: bytes
Content-Length: 23272
Cache-Control: max-age=172800
Expires: Thu, 01 Dec 2022 23:02:20 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: font/woff2

euro-times.org/no/vg/7c88e5323e2bf5d49fd0c8d87c030ccd.woff2

94.242.54.185

200 OK

21 kB

URL HTTP/1.1
euro-times.org/no/vg/7c88e5323e2bf5d49fd0c8d87c030ccd.woff2
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
Web Open Font Format (Version 2), TrueType, length 21260, version 1.1311\012- data
Size
21 kB (21260 bytes)
Hash
7c88e5323e2bf5d49fd0c8d87c030ccd
713d1194a0c98639323d8c06a548df511cfedde9
c24cea5caf526a74d30801adc8b85a1b4f42f83a20318a212d358890d5a3148d

HTTP Headers

GET /no/vg/7c88e5323e2bf5d49fd0c8d87c030ccd.woff2 HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://euro-times.org/no/vg/vendor.67e32aaf581c20179082.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:22 GMT
Accept-Ranges: bytes
Content-Length: 21260
Cache-Control: max-age=172800
Expires: Thu, 01 Dec 2022 23:02:20 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: font/woff2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 23:02:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/notosans/v7/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2

216.58.207.227

200 OK

9.9 kB

URL HTTP/2
fonts.gstatic.com/s/notosans/v7/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 9944, version 1.0\012- data
Size
9.9 kB (9944 bytes)
Hash
85486c163ae98867f1372ca48442a118
1ac9e1c0bda612393d7f16958266a52e4ada8efa
ede8a63ae7f13de45eeb9c9156f791c7ee1d588f931cc54f4d8754154cbd3a52

HTTP Headers

GET /s/notosans/v7/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euro-times.org
Connection: keep-alive
Referer: https://euro-times.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9944
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 05:27:36 GMT
expires: Thu, 23 Nov 2023 05:27:36 GMT
cache-control: public, max-age=31536000
age: 581684
last-modified: Wed, 11 Oct 2017 18:25:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 23:02:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/notosans/v7/o-0NIpQlx3QUlC5A4PNjXhFVZNyBx2pqPA.woff2

216.58.207.227

200 OK

9.7 kB

URL HTTP/2
fonts.gstatic.com/s/notosans/v7/o-0NIpQlx3QUlC5A4PNjXhFVZNyBx2pqPA.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 9716, version 1.0\012- data
Size
9.7 kB (9716 bytes)
Hash
0c72437d3bc183ca78f71836a310a706
df5694192d18b520888505aef04dcf8acaed6a0f
693448f744bc3f7709d647cf0e9efa64ce50c54e98b816ecfb530a5590114efe

HTTP Headers

GET /s/notosans/v7/o-0NIpQlx3QUlC5A4PNjXhFVZNyBx2pqPA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://euro-times.org
Connection: keep-alive
Referer: https://euro-times.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9716
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 17:02:11 GMT
expires: Thu, 23 Nov 2023 17:02:11 GMT
cache-control: public, max-age=31536000
age: 540009
last-modified: Wed, 11 Oct 2017 18:25:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 23:02:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

euro-times.org/no/vg/favicon.ico

94.242.54.185

200 OK

318 B

URL HTTP/1.1
euro-times.org/no/vg/favicon.ico
IP
94.242.54.185:0
ASN
#43317 FNK LLC

File type
MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel\012- data
Size
318 B (318 bytes)
Hash
a5ab8ad2fd256f4ab4d9395a785463f5
f42e0bf9b2b057991b1732dca73f9042bfafa291
a6b8db404acfc856ae0ce12515d8b41e3d9adf84b3d37a183787dab935d84f6f

HTTP Headers

GET /no/vg/favicon.ico HTTP/1.1
Host: euro-times.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Tue, 29 Nov 2022 23:02:20 GMT
Server: Apache
Last-Modified: Sun, 01 Jul 2018 08:35:30 GMT
Accept-Ranges: bytes
Content-Length: 318
Cache-Control: max-age=31536000
Expires: Wed, 29 Nov 2023 23:02:20 GMT
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/x-icon

34.120.237.76

200 OK

4.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.7 kB (4706 bytes)
Hash
9b96b63164d7dc37268951510afb359f
5991d60e238558f9fe4e1759fe18dde628cb7be4
cd7a88b3173bae9ad466d41b9ae9a2ed9e18157660697f1f1b070043194c3db4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 4706
x-amzn-requestid: ce0b287a-7242-402b-8261-c519a1310309
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhHxETjoAMFcTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bcb-7a69d6d14ad0fd707ede2882;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odDoJgXLfaw-QRX8PfW3PW2yav7R41pQoyVbEVaDARSYLJPToLsTTA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 4181
etag: "5991d60e238558f9fe4e1759fe18dde628cb7be4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

sergerod.me/polini-65cc.html

172.67.152.50

302 Found

0 B

URL HTTP/2
sergerod.me/polini-65cc.html
IP
172.67.152.50:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /polini-65cc.html HTTP/1.1
Host: sergerod.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
date: Tue, 29 Nov 2022 23:02:17 GMT
content-type: text/html; charset=UTF-8
location: http://37.1.213.100/3CLgR2?host=sergerod.me&keyword=polini+65cc&se_referrer=unknown&mark=26112022&template=default.txt
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YwiOBTc3Iozt4wz5bIZReUauLZKj1Z1XfAGzxEaVdxZvfEI4wjRLXA9yIsWfi0vODcTose1YzzQ2zbPkzV0xUBy5bhsV0LFuFt%2BNpHm1oi%2BzHsV2wjNAFXPAE%2FaBdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771ef8597c9e0b4d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

gertrk.com/click.php?key=n9wbuyk5h0mq6m6x7xc5&SUB_ID_SHORT=18f0fcead694bc60a05f99e063864afd&COST_CPC=0.002400&PLACEMENT_ID=17683209&CAMPAIGN_ID=691144&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2042909

168.119.139.96

302 Found

0 B

URL HTTP/2
gertrk.com/click.php?key=n9wbuyk5h0mq6m6x7xc5&SUB_ID_SHORT=18f0fcead694bc60a05f99e063864afd&COST_CPC=0.002400&PLACEMENT_ID=17683209&CAMPAIGN_ID=691144&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2042909
IP
168.119.139.96:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /click.php?key=n9wbuyk5h0mq6m6x7xc5&SUB_ID_SHORT=18f0fcead694bc60a05f99e063864afd&COST_CPC=0.002400&PLACEMENT_ID=17683209&CAMPAIGN_ID=691144&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2042909 HTTP/1.1
Host: gertrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatetocontent.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 29 Nov 2022 23:02:19 GMT
content-type: text/html; charset=UTF-8
location: https://euro-times.org/no/vg?lpkey=1687697676dd323339&uclick=ydg5b7us&uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9
set-cookie: uclick=ydg5b7us; expires=Wed, 30-Nov-2022 23:02:19 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=ydg5b7us-ydg5b7us-tw8n-wffe-1mwj-7vpm-8rdu-b6a5d9; expires=Wed, 30-Nov-2022 23:02:19 GMT; Max-Age=86400; path=/; secure; SameSite=none
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash