Report - secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad

Report Overview

Submitted URL
secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
IP
67.227.241.84
ASN
#32244 LIQUIDWEB
Submitted
2022-11-30 04:32:24
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	60 kB	104.17.25.14
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.39.57.61
secure1.ghostgundvd.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	63 kB	2.4 MB	67.227.241.84
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.9 kB	82 kB	216.58.207.227
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	66 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	7.1 kB	23.36.76.226
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	4.9 kB	142.250.74.131
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	694 B	79 kB	142.250.74.106
analytics.ugarllc.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	411 B	1.2 kB	3.249.67.204
analytics.ghostgundvd.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.1 kB	20 kB	35.242.204.87
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
ocsp.sca1b.amazontrust.com	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	350 B	984 B	143.204.42.158
settings.cerebro.services	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	408 B	276 B	54.187.99.70

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-30	medium	analytics.ugarllc.com/a649dcb0-2ed3-463d-bf42-125f37660d8f/install.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js	88 kB	2023-03-07	2024-04-26
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-04-26 07:14:23 Times Seen95562 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

	secure1.ghostgundvd.com/GStyle/js/store.legacy.min.js	13 kB	2023-03-11	2024-02-07
Pretty URL secure1.ghostgundvd.com/GStyle/js/store.legacy.min.js IP 67.227.241.84 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:35:31 Last Seen2024-02-07 06:05:02 Times Seen1 Hash 0d7d0acd014a868a4ff51c9fa0d17f0a 0b003e959556166bb2b466b6edb6e3e133ba7614 6b51ac75a7a918e45da7546f6853b3907cad07ca14e0dfb3607b83539781ede1 Loading...

	secure1.ghostgundvd.com/AR308/js/mailcheck.min.js	2.7 kB	2023-03-07	2024-03-13
Pretty URL secure1.ghostgundvd.com/AR308/js/mailcheck.min.js IP 67.227.241.84 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:29:18 Last Seen2024-03-13 20:33:05 Times Seen1044 Hash 199756d42d03ff6741642748ea00028d b5c4f6fd1b0e5d1bac97870b3885d08ccb7d2ac1 e0189e16cf01f8149342c9f2de872cfa73571f2a145a830f18b16154bf1d2982 Loading...

	secure1.ghostgundvd.com/AR308/js/pushcrew.js	637 B	2023-03-07	2024-04-21
Pretty URL secure1.ghostgundvd.com/AR308/js/pushcrew.js IP 67.227.241.84 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:00 Times Seen1406 Hash 0a67c27615e7d2202f261dcc0a82d744 0fa0a8ca56efded583bd4201821015a63c623d44 f7464960133d530dfa52ce0ab9a5c33f0a709a946ad16298b000a7560738f422 Loading...

	cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-04-26
Pretty URL cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.bundle.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:59 Last Seen2024-04-26 04:19:55 Times Seen15689 Hash a454220fc07088bf1fdd19313b6bfd50 265a733cb7fbc481fd2510a659a85ad55c93c895 7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c Loading...

	secure1.ghostgundvd.com/GStyle/lander/js/lander.js	2.3 MB	2023-03-11	2024-02-07
Pretty URL secure1.ghostgundvd.com/GStyle/lander/js/lander.js IP 67.227.241.84 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:49:01 Last Seen2024-02-07 06:05:02 Times Seen1 Hash a8511873e01ed4c1a6c9ea561ddd96f6 c55e1b2f29d597b5877ec11a99a5b1ec8e4239b2 0da859a7c75e111ef8832edb53dd5e56a206df9ab49d5152549251c3a60ae514 Loading...

	secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f	5.0 kB	2023-03-11	2024-02-07
Pretty URL secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f IP 67.227.241.84 ASN #32244 LIQUIDWEB Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 22:49:01 Last Seen2024-02-07 06:05:02 Times Seen1 Hash 81b1a8078df839030c31b2d23478eab1 2b81a531b980b43b5ac52f5ed3f9191c5bd3892c 3b4968b20b7b0ff23b96be18869dee6208f520530e06fcee4a87fd3c316638d9 Loading...

	analytics.ghostgundvd.com/a4d2877c-2a4c-46df-b9ac-7ff89e34adc8/install.js	870 B	2023-03-11	2024-02-07
Pretty URL analytics.ghostgundvd.com/a4d2877c-2a4c-46df-b9ac-7ff89e34adc8/install.js IP 35.242.204.87 ASN #396982 GOOGLE-CLOUD-PLATFORM Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 15:55:43 Last Seen2024-02-07 06:05:03 Times Seen2 Hash 0bada96e5de84be563b291abe1a17e30 eaa30d63d182a37cbfb0da0060b5b43d2ae22bfb 0088c5db863cf49c6582d22a49152e9af9a5324d69861008d3f5f02c0df8f57a Loading...

	analytics.ugarllc.com/a649dcb0-2ed3-463d-bf42-125f37660d8f/install.js	837 B	2023-03-11	2023-11-30
Pretty URL analytics.ugarllc.com/a649dcb0-2ed3-463d-bf42-125f37660d8f/install.js IP 3.249.67.204 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 15:55:43 Last Seen2023-11-30 15:08:13 Times Seen3 Hash c89c5458278883777bac67f068889f4e 16f4638b3c992369dd4933b05f73b048eea9640e 2b7286ec15b7d816a0ac95490abf5ff5cc961d34c7f1dc65d6c0b0014566ee30 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 2aa74ac3a264c3e10ae463a262aaf72c	20 kB	2023-03-07	2024-04-21
Pretty Observations First Seen2023-03-07 01:29:18 Last Seen2024-04-21 22:38:01 Times Seen1093 Hash 2aa74ac3a264c3e10ae463a262aaf72c c5ff579cf0cc2ba1d98711b366ec148152abbaf5 9c1ea695852f01d2fc6027d572b126b740a9c4634540fb0d39ea3656377eef77 Loading...

HTTP Transactions (75)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4036
Expires: Wed, 30 Nov 2022 05:39:28 GMT
Date: Wed, 30 Nov 2022 04:32:12 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 611
Cache-Control: max-age=108550
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:32:12 GMT
Etag: "6385df6f-1d7"
Expires: Thu, 01 Dec 2022 10:41:22 GMT
Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9042
Expires: Wed, 30 Nov 2022 07:02:54 GMT
Date: Wed, 30 Nov 2022 04:32:12 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 04:17:59 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 853
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: ZxRbX+Wem3rWzmtyg59lYMpb0aGiIdCjKR2nDXgdOYbk/X7NmEIWLky11l8py35nXUo14x4sOE8=
x-amz-request-id: 0Y76D1FE6W3K4XV5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 03:45:04 GMT
age: 2828
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 04:32:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 04:08:56 GMT
cache-control: public,max-age=3600
age: 1397
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 612
Cache-Control: max-age=103487
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:32:13 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 09:17:00 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f

67.227.241.84

200 OK

38 kB

URL HTTP/1.1
secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (555)
Size
38 kB (38138 bytes)
Hash
40d09ecb551b145ec0261cc70d933b5f
7a7cc6918d6d745f3a440f825180c64739169d5a
998155c293b7101f8327533298072f1fd489f551ebea029d1848678edc80f8b0

HTTP Headers

GET /offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:12 GMT
Server: Apache
Set-Cookie: sessionId=acbae689a2d545768322446f6561ccab; expires=Fri, 30-Dec-2022 04:32:13 GMT; Max-Age=2592000; path=/
affId=1114; expires=Fri, 30-Dec-2022 04:32:13 GMT; Max-Age=2592000; path=/
c1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
c2=102f772aa50b099355ccd9f5dcd1b3; expires=Fri, 30-Dec-2022 04:32:13 GMT; Max-Age=2592000; path=/
c3=102f2c54a3bfffa51f7d997fb68b0f; expires=Fri, 30-Dec-2022 04:32:13 GMT; Max-Age=2592000; path=/
XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; expires=Wed, 30-Nov-2022 06:32:13 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D; expires=Wed, 30-Nov-2022 06:32:13 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Cache-Control: no-cache, private, max-age=600
Expires: Wed, 30 Nov 2022 04:42:12 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 38138
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8

cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.min.css

104.17.25.14

200 OK

9.9 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.min.css
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (55782)
Size
9.9 kB (9939 bytes)
Hash
9deb21ef6e0dbe67a9cf6c3e2a7ff70f
316b23ed5bc104f7ca1877975d01536d9ff8da91
45e1be9cb5efade345937e4656f68478d149d8624ad7eb88c69b5a0e8ecec081

HTTP Headers

GET /ajax/libs/font-awesome/5.9.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:32:13 GMT
content-type: text/css; charset=utf-8
content-length: 9939
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e60-da9f"
last-modified: Mon, 04 May 2020 16:10:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5894890
expires: Mon, 20 Nov 2023 04:32:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=obUn%2BdTFdXOzB5TpIEfn%2BJ31Fn4ptnKOl6ETArw6Rk6WApWCHbFRogf5U5KqBSYj3IhYPr%2BXuVWhUjEnXgREavTAyYq2nCAJ3bGOvE0kfAN4Qq5Tp7Hj9oQoQaOi4vVmP6U9R6zC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7720dba48bfbb50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.bundle.min.js

104.17.25.14

200 OK

20 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.bundle.min.js
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65297)
Size
20 kB (19586 bytes)
Hash
3f6897691bf629eeeab02ffdeecc88a4
54d32eb7f8378cda078067b309ba1f3d6c588bee
c3f9adaa0f5017e6ad33cae228ddaf59c110fa72615f58bfdd5587eb7a3dcd57

HTTP Headers

GET /ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:32:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 19586
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04010-1332b"
last-modified: Mon, 04 May 2020 16:17:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 600528
expires: Mon, 20 Nov 2023 04:32:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WuYilFTvdllsgV4QLnPRABVcCqKAthJjG5QtOYNBHKp2uMNTZnnorV8jApNvM7jnvNSxFhlT2YOq6up0O0QwWzSSzkbUI0qxAkeRq5i1tgUSKyB3bQjQ8ATHhQLozGVyqPGzG0n%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7720dba4ec20b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js

104.17.25.14

200 OK

28 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65451)
Size
28 kB (27748 bytes)
Hash
638a4990025383a0f83ebf29bdb84a68
153e8818dc42f598e47fde8cf398f1447649a4d0
878e34b89800bb271d3588e526eb3598eb3822e263f3bdaf53645847d39d0ad6

HTTP Headers

GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:32:13 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2949757
expires: Mon, 20 Nov 2023 04:32:13 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LbXvkt70TjXHwZ7TAp2%2Fs9MEqK3FaJtACPMkIzyg4FUfyAxkB3bC1C5ZVWuvUu7MX%2FVXTy%2BDdvGl40H8%2BJMDPbLRlPh6lI8YuoFPTvpL%2F7VXurR%2FeocJ%2Bs9YY9BpPwanNFMW9KjQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7720dba4ec21b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:32:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:32:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

push.services.mozilla.com/

52.39.57.61

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.39.57.61:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VfQ8IB3GpFFSUp3RD6gt4Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: y2umP3hFTQkCdCOHxvnXwvn6IcM=

secure1.ghostgundvd.com/AR308/js/mailcheck.min.js

67.227.241.84

200 OK

1.1 kB

URL HTTP/1.1
secure1.ghostgundvd.com/AR308/js/mailcheck.min.js
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
C source, ASCII text, with very long lines (525)
Size
1.1 kB (1128 bytes)
Hash
238209e02f2c94482e2e60aea891d7c8
6b70efd418661991849f06c11446f7da7e8ce085
68a718c45173af86ab291c90e205ddb632177eeae3be49298a4203c3f3ab13fa

HTTP Headers

GET /AR308/js/mailcheck.min.js HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 12 Aug 2022 15:00:36 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1128
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript

secure1.ghostgundvd.com/AR308/js/pushcrew.js

67.227.241.84

200 OK

363 B

URL HTTP/1.1
secure1.ghostgundvd.com/AR308/js/pushcrew.js
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
ASCII text, with very long lines (637), with no line terminators
Size
363 B (363 bytes)
Hash
d4c26aea49ece76a37c3cb7779d011a1
d3dca778e6a2b5606554a3ddbf380c876c69f511
5dceac918ddff77e814ee2b15895247cf6b5a56bd5b6f7e2b6b76cc0efbc4f46

HTTP Headers

GET /AR308/js/pushcrew.js HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 12 Aug 2022 15:00:36 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 363
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript

secure1.ghostgundvd.com/GStyle/js/store.legacy.min.js

67.227.241.84

200 OK

4.6 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/js/store.legacy.min.js
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
ASCII text, with very long lines (13072), with CRLF line terminators
Size
4.6 kB (4576 bytes)
Hash
cc34528e395597a6606995df44b6325a
bfef1e8c5f2b5e62ebca7894f9ef307bd6c8b0c1
8d9aa9e490b935f926d64996d64dbac0701e517fa9006a784c5242e645b34c11

HTTP Headers

GET /GStyle/js/store.legacy.min.js HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 17 Oct 2019 19:33:34 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 4576
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript

secure1.ghostgundvd.com/GStyle/lander/css/lander.css

67.227.241.84

200 OK

73 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/css/lander.css
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (53232)
Size
73 kB (72782 bytes)
Hash
10f0df9c83793c92bc132afe6e452a10
798a6134b82ba5cadaa75384b5541b4969bac62c
bc45dcc6b1a3fdb0a8e0da787179a5ab754a564912ad2395fb785e1f4c714197

HTTP Headers

GET /GStyle/lander/css/lander.css HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 26 Aug 2022 02:59:37 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/css

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
75286563d358613cf676cea4ac4a8cab
9a35ac1dd2ac4bd96f2ca37fc77ed90861c21afd
5ab34f6a69c1acce7382719aacf8f9440ab8669da9c9b5a7811cc118c21677a0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5AB34F6A69C1ACCE7382719AACF8F9440AB8669DA9C9B5A7811CC118C21677A0"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6055
Expires: Wed, 30 Nov 2022 06:13:08 GMT
Date: Wed, 30 Nov 2022 04:32:13 GMT
Connection: keep-alive

fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700

142.250.74.106

200 OK

78 kB

URL HTTP/2
fonts.googleapis.com/css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700
IP
142.250.74.106:0
ASN
#15169 GOOGLE

File type
data
Size
78 kB (77888 bytes)
Hash
494aa509dd6b5c3a4faa3be32e165b1f
a7a763c57249eb58e0e3f2d1e5c33ccb22d02d33
7927cb61003db2e13f0771422a2b1fc76d50f6e2fbffe6ffdffce186f7c749ec

HTTP Headers

GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 04:32:13 GMT
date: Wed, 30 Nov 2022 04:32:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

secure1.ghostgundvd.com/GStyle/lander/images/c0/28e980f2b1457f86590c60b824cbed/addtocart.png

67.227.241.84

200 OK

9.7 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/c0/28e980f2b1457f86590c60b824cbed/addtocart.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 521 x 100, 8-bit colormap, non-interlaced\012- data
Size
9.7 kB (9675 bytes)
Hash
d01debb663d75ab0f4004c75f2144e3d
985c7aa963d6ff9192a3bf5967f70f38038475fb
36101196dbd9b30fcbd9e41975c2251175b98c7ce164ec44721425212d9c54e9

HTTP Headers

GET /GStyle/lander/images/c0/28e980f2b1457f86590c60b824cbed/addtocart.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:21 GMT
Accept-Ranges: bytes
Content-Length: 9675
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/00/2dd0171a1743caa2efe4a25031fd7c/still-legal-update2.png

67.227.241.84

200 OK

47 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/00/2dd0171a1743caa2efe4a25031fd7c/still-legal-update2.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 834 x 542, 8-bit colormap, non-interlaced\012- data
Size
47 kB (46694 bytes)
Hash
bc20138e487afe69cbbf3d230621f740
b69b257007f1cc631ccd7f231b9a2162d740135d
7c219431878f279beac9ed0fe6a065c0ccb0c553992bcbd091eebad6329aa9e0

HTTP Headers

GET /GStyle/lander/images/00/2dd0171a1743caa2efe4a25031fd7c/still-legal-update2.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 02:59:49 GMT
Accept-Ranges: bytes
Content-Length: 46694
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
c14366e29ed95ec71fb654732b928ceb
f81215706453d8523415f90c9ef90bc53cefad90
9faa5ff7f4287af493dd11d3dfe2929dac59e156e7e4b24c8f6fb01cdfbea9e5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9FAA5FF7F4287AF493DD11D3DFE2929DAC59E156E7E4B24C8F6FB01CDFBEA9E5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5078
Expires: Wed, 30 Nov 2022 05:56:52 GMT
Date: Wed, 30 Nov 2022 04:32:14 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
49eee25f3ccd585a29e34e80cf5bb160
73eca8be91deedd049304862759a3d8084c0b07e
531e5685527861b3ed7e8e3865c5a6a40d3f92f5c9d89df3f385dab72406fb56

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2

216.58.207.227

200 OK

24 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size
24 kB (23580 bytes)
Hash
e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537

HTTP Headers

GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 17:11:08 GMT
expires: Wed, 29 Nov 2023 17:11:08 GMT
cache-control: public, max-age=31536000
age: 40866
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:33:54 GMT
expires: Thu, 23 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 550700
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:15 GMT
expires: Thu, 23 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 550679
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2

216.58.207.227

200 OK

23 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Size
23 kB (23040 bytes)
Hash
de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49

HTTP Headers

GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 12:29:22 GMT
expires: Fri, 24 Nov 2023 12:29:22 GMT
cache-control: public, max-age=31536000
age: 489772
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:32:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

secure1.ghostgundvd.com/GStyle/lander/images/3a/1a5386d4d64afcba109f5c1e4456fc/atfscreenshot.png

67.227.241.84

200 OK

81 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/3a/1a5386d4d64afcba109f5c1e4456fc/atfscreenshot.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 658 x 916, 8-bit colormap, non-interlaced\012- data
Size
81 kB (81421 bytes)
Hash
f11567b9746137a22d75838629155485
fe05044163bfe1def562d1b216fef38a5a5dede6
06c3fb495946a3fbd89b2a9f1eb17c357f9b356d8169b988b581840f341b8549

HTTP Headers

GET /GStyle/lander/images/3a/1a5386d4d64afcba109f5c1e4456fc/atfscreenshot.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:06 GMT
Accept-Ranges: bytes
Content-Length: 81421
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/78/2530fa64ef4985b434b6d8423524e5/cagunowners.png

67.227.241.84

200 OK

43 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/78/2530fa64ef4985b434b6d8423524e5/cagunowners.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 431 x 457, 8-bit colormap, non-interlaced\012- data
Size
43 kB (43053 bytes)
Hash
b5b8322b3904ee6870a7dbfce3de011f
0d4c692511ff7ffb2b5e46c5d688a8c2a000b24b
80da83aa8ec5c296822789f2d842b3a7805434331c6bca9ff1c0009bdae32796

HTTP Headers

GET /GStyle/lander/images/78/2530fa64ef4985b434b6d8423524e5/cagunowners.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:14 GMT
Accept-Ranges: bytes
Content-Length: 43053
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/4f/086a5134c611e7b72451ae77f262f5/Glock.jpg

67.227.241.84

200 OK

40 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/4f/086a5134c611e7b72451ae77f262f5/Glock.jpg
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 592x350, components 3\012- data
Size
40 kB (40259 bytes)
Hash
a9771a6612c2a4570d5f2b645b78345f
bd053c33fae34d8fed7ec5292b232a770224df0b
3399154480093eed8b1a05cb699897f84840657069ee342353fe1dc2ecb90d32

HTTP Headers

GET /GStyle/lander/images/4f/086a5134c611e7b72451ae77f262f5/Glock.jpg HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:07 GMT
Accept-Ranges: bytes
Content-Length: 40259
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

secure1.ghostgundvd.com/GStyle/lander/images/5c/50b0da36d841369bab594fabe15a1d/amazon.png

67.227.241.84

200 OK

41 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/5c/50b0da36d841369bab594fabe15a1d/amazon.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 397 x 287, 8-bit/color RGB, non-interlaced\012- data
Size
41 kB (41332 bytes)
Hash
d8d4125919ea0fb6b1d5d95e0059d5d4
82791bca152275b3b79fa08b176f4be3171e45f9
6321bc35c347fd998868a2592ca27bb7ef7924f1b507422ca4cb0743bdb1c9e9

HTTP Headers

GET /GStyle/lander/images/5c/50b0da36d841369bab594fabe15a1d/amazon.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:10 GMT
Accept-Ranges: bytes
Content-Length: 41332
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

analytics.ugarllc.com/a649dcb0-2ed3-463d-bf42-125f37660d8f/install.js

3.249.67.204

200 OK

837 B

URL HTTP/1.1
analytics.ugarllc.com/a649dcb0-2ed3-463d-bf42-125f37660d8f/install.js
IP
3.249.67.204:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (837), with no line terminators
Size
837 B (837 bytes)
Hash
c89c5458278883777bac67f068889f4e
16f4638b3c992369dd4933b05f73b048eea9640e
2b7286ec15b7d816a0ac95490abf5ff5cc961d34c7f1dc65d6c0b0014566ee30

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /a649dcb0-2ed3-463d-bf42-125f37660d8f/install.js HTTP/1.1
Host: analytics.ugarllc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-powered-by: Express
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=0
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 04:32:14 GMT
etag: W/"345-18463b8d967"
last-modified: Thu, 10 Nov 2022 22:46:09 GMT
server: nginx/1.22.0
vary: Accept-Encoding
content-length: 837
connection: Close

secure1.ghostgundvd.com/GStyle/lander/images/52/6238b6eb3e4b6ca02d53ce838b3028/GstyleDVDcostfree.png

67.227.241.84

200 OK

43 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/52/6238b6eb3e4b6ca02d53ce838b3028/GstyleDVDcostfree.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 228 x 366, 8-bit colormap, non-interlaced\012- data
Size
43 kB (43234 bytes)
Hash
eff08e3d1d6717accc1bbbb1c3449b70
8301d383d80cff5695b48df763244c1dd26782ca
2074613133fbd28291ef940d04f800af86f1e1f30e58ff69665c38f206a343e5

HTTP Headers

GET /GStyle/lander/images/52/6238b6eb3e4b6ca02d53ce838b3028/GstyleDVDcostfree.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:09 GMT
Accept-Ranges: bytes
Content-Length: 43234
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/30/23a4ce394347638d47f2e166695fb7/glockupperreceiver.png

67.227.241.84

200 OK

28 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/30/23a4ce394347638d47f2e166695fb7/glockupperreceiver.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 714 x 217, 8-bit grayscale, non-interlaced\012- data
Size
28 kB (28071 bytes)
Hash
d3a13d89aff0ad973a4e4b3a6004853a
fceaf59f0b16d10c24295538d8939bf18a6de1b4
bc1ac5ba7df973308f2c893d3b47716c74df2cccca01894f84cb751c5237cb94

HTTP Headers

GET /GStyle/lander/images/30/23a4ce394347638d47f2e166695fb7/glockupperreceiver.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:04 GMT
Accept-Ranges: bytes
Content-Length: 28071
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/10/0b51313dee4981901c3afa4ef226ab/glocklowerreceiver.png

67.227.241.84

200 OK

38 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/10/0b51313dee4981901c3afa4ef226ab/glocklowerreceiver.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 647 x 338, 8-bit grayscale, non-interlaced\012- data
Size
38 kB (37671 bytes)
Hash
ab7f80fce22dd6e95a35b802825ad323
eba5d6ce9240af3c606913fddc0f47c74ee1aecb
aa673cb26cbb956673f6cb977efd39fabd1d3336f55782ee3b3747c118453342

HTTP Headers

GET /GStyle/lander/images/10/0b51313dee4981901c3afa4ef226ab/glocklowerreceiver.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 02:59:56 GMT
Accept-Ranges: bytes
Content-Length: 37671
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/js/lander.js

67.227.241.84

200 OK

677 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/js/lander.js
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
ASCII text, with very long lines (32749)
Size
677 kB (677272 bytes)
Hash
438b71903ab767493d6a6d3866677fd3
d9fe35f16a5e3899dcdff1c429bb3723680704df
a3c45c0d418506f81fa9b24434bda1afd6813decb52e0b648ba89c2b71547351

HTTP Headers

GET /GStyle/lander/js/lander.js HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 26 Aug 2022 03:00:03 GMT
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: application/javascript

secure1.ghostgundvd.com/offers/assets.clickfunnels.com/images/black-geo.png

67.227.241.84

404 Not Found

2.1 kB

URL HTTP/1.1
secure1.ghostgundvd.com/offers/assets.clickfunnels.com/images/black-geo.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Size
2.1 kB (2123 bytes)
Hash
e881f8e66a93d0960ba6fad410094769
7f1bd10fd60815735fad95387ecaed0cfaf3b287
b43a9db67408b4398f147b571163d5b272af8c46eb4dca9f1bc2be44a6ded26d

HTTP Headers

GET /offers/assets.clickfunnels.com/images/black-geo.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 404 Not Found
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Cache-Control: no-cache, private
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2123
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

secure1.ghostgundvd.com/GStyle/lander/images/b8/7b2b15afeb432a8b61d3be670f84f2/glock-field-stripped.png

67.227.241.84

200 OK

66 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/b8/7b2b15afeb432a8b61d3be670f84f2/glock-field-stripped.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 665 x 567, 8-bit grayscale, non-interlaced\012- data
Size
66 kB (66383 bytes)
Hash
8437611e25ec3978029e651054bac8d7
676e1297a4e65a4960e8349c84e9e64058312f67
e0991f2963b5aa308df6f6aecbbb702f35c5f28a3aaee99897fd9e0f387c2b43

HTTP Headers

GET /GStyle/lander/images/b8/7b2b15afeb432a8b61d3be670f84f2/glock-field-stripped.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:13 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:18 GMT
Accept-Ranges: bytes
Content-Length: 66383
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:13 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

analytics.ghostgundvd.com/a4d2877c-2a4c-46df-b9ac-7ff89e34adc8/install.js

35.242.204.87

200 OK

870 B

URL HTTP/1.1
analytics.ghostgundvd.com/a4d2877c-2a4c-46df-b9ac-7ff89e34adc8/install.js
IP
35.242.204.87:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
ASCII text, with very long lines (870), with no line terminators
Size
870 B (870 bytes)
Hash
0bada96e5de84be563b291abe1a17e30
eaa30d63d182a37cbfb0da0060b5b43d2ae22bfb
0088c5db863cf49c6582d22a49152e9af9a5324d69861008d3f5f02c0df8f57a

HTTP Headers

GET /a4d2877c-2a4c-46df-b9ac-7ff89e34adc8/install.js HTTP/1.1
Host: analytics.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-powered-by: Express
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=0
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 04:32:14 GMT
etag: W/"366-18463b97160"
last-modified: Thu, 10 Nov 2022 22:46:48 GMT
server: nginx/1.22.0
vary: Accept-Encoding
content-length: 870
connection: Close

secure1.ghostgundvd.com/GStyle/lander/images/2b/b34cae2e364c4a972b8f9f78a3fd33/agencyglockprice.png

67.227.241.84

200 OK

23 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/2b/b34cae2e364c4a972b8f9f78a3fd33/agencyglockprice.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 240 x 324, 8-bit colormap, non-interlaced\012- data
Size
23 kB (23357 bytes)
Hash
3ddeaf6755e6b85ec903d759eb386f1d
0adb4312a55cba8daa9489a248a7313573918d83
7308e5a69175cb91d1c493a5f28caefd96f40ccebe516b43179c8c50939bc316

HTTP Headers

GET /GStyle/lander/images/2b/b34cae2e364c4a972b8f9f78a3fd33/agencyglockprice.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:01 GMT
Accept-Ranges: bytes
Content-Length: 23357
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/6d/5cb7dace0f41aeb62e223ec0133053/25486-3-add-to-cart-button.png

67.227.241.84

200 OK

8.2 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/6d/5cb7dace0f41aeb62e223ec0133053/25486-3-add-to-cart-button.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 763 x 220, 8-bit colormap, non-interlaced\012- data
Size
8.2 kB (8210 bytes)
Hash
3a76cd538b38acce19ebee490ce01d9c
8e1dff6dc4e427bd1afc455fd5d1896b6fd54464
a9bb1ec136ab7a3fa0b05533126d590f856c4f9f351bb1903c60e22a4b6d16be

HTTP Headers

GET /GStyle/lander/images/6d/5cb7dace0f41aeb62e223ec0133053/25486-3-add-to-cart-button.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:13 GMT
Accept-Ranges: bytes
Content-Length: 8210
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/0c/b389df66104891aecc142d925b1096/ghostglockmanual.png

67.227.241.84

200 OK

164 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/0c/b389df66104891aecc142d925b1096/ghostglockmanual.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 618 x 745, 8-bit colormap, non-interlaced\012- data
Size
164 kB (163852 bytes)
Hash
216d37ed1cc2d5c2b2c9662779df36cc
487a25d615b3f09c4b5aea7aa49dd0ee62aa7b87
c1c827e4b08e6a5e9d975d6bc16ad63d835e733b9a90a6082adb1008d8ecfab8

HTTP Headers

GET /GStyle/lander/images/0c/b389df66104891aecc142d925b1096/ghostglockmanual.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 02:59:54 GMT
Accept-Ranges: bytes
Content-Length: 163852
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/8a/3dc74da9c9492e8dcba5f7b90460b8/gstyle-system.png

67.227.241.84

200 OK

293 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/8a/3dc74da9c9492e8dcba5f7b90460b8/gstyle-system.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 1000 x 982, 8-bit colormap, non-interlaced\012- data
Size
293 kB (292598 bytes)
Hash
ae88daaaf71e863aad0987f713b83408
6842800820ff81da5fcd7193583a2a1eb9922b56
3a6e5207fc2cc4ba104abef9aad9f6722c2476e2fef2253f632e2a6b067e9c6f

HTTP Headers

GET /GStyle/lander/images/8a/3dc74da9c9492e8dcba5f7b90460b8/gstyle-system.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:17 GMT
Accept-Ranges: bytes
Content-Length: 292598
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/30/ffb157dbfd4332b6ed5a041ffcc8c8/cc101booknobg.png

67.227.241.84

200 OK

42 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/30/ffb157dbfd4332b6ed5a041ffcc8c8/cc101booknobg.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 500 x 521, 8-bit colormap, non-interlaced\012- data
Size
42 kB (42438 bytes)
Hash
0e1be392a94956eb463bbc46e4e86d37
d46d6dd5b8ea23a9b8f896512dc8a9384bd3c482
4ade020904ab709fb7376c6215b10b78e2389f9bdbbb289db154ba67ecc3b2e5

HTTP Headers

GET /GStyle/lander/images/30/ffb157dbfd4332b6ed5a041ffcc8c8/cc101booknobg.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:05 GMT
Accept-Ranges: bytes
Content-Length: 42438
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/e6/7453948a8041da8b8a8e0666f66a7d/GhostGlockDVD.png

67.227.241.84

200 OK

181 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/e6/7453948a8041da8b8a8e0666f66a7d/GhostGlockDVD.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 536 x 876, 8-bit colormap, non-interlaced\012- data
Size
181 kB (181115 bytes)
Hash
55c9f768a763c09db57b68619ec1c66e
39268e58dc5c3564112b944e99d02f68e8b12a9a
e83a7df1a103f2eb63128ba53a6d741da247ca9dfa1a890ed8a284d39d19f287

HTTP Headers

GET /GStyle/lander/images/e6/7453948a8041da8b8a8e0666f66a7d/GhostGlockDVD.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:22 GMT
Accept-Ranges: bytes
Content-Length: 181115
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/c4-c169b0140511e58e33315b4e86d73a-7.png

67.227.241.84

404 Not Found

2.1 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/c4-c169b0140511e58e33315b4e86d73a-7.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Size
2.1 kB (2123 bytes)
Hash
e881f8e66a93d0960ba6fad410094769
7f1bd10fd60815735fad95387ecaed0cfaf3b287
b43a9db67408b4398f147b571163d5b272af8c46eb4dca9f1bc2be44a6ded26d

HTTP Headers

GET /GStyle/lander/images/c4-c169b0140511e58e33315b4e86d73a-7.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 404 Not Found
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Cache-Control: no-cache, private
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2123
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

secure1.ghostgundvd.com/GStyle/lander/images/bc/73e4d958084d86b6ae6fe352eb398c/howtohideyourgunsreportcover.png

67.227.241.84

200 OK

105 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/bc/73e4d958084d86b6ae6fe352eb398c/howtohideyourgunsreportcover.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 454 x 490, 8-bit colormap, non-interlaced\012- data
Size
105 kB (104734 bytes)
Hash
c3ba52bdf70200438be30cba4604342d
7472bff9e5ab5095e08cf52b3f2de2f3a7d53c6d
2d2c77648baf2d282458823142a1cb9734786c7e3fb3a2160d7b7d4f0e654b86

HTTP Headers

GET /GStyle/lander/images/bc/73e4d958084d86b6ae6fe352eb398c/howtohideyourgunsreportcover.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:20 GMT
Accept-Ranges: bytes
Content-Length: 104734
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/82/1fbf424bc54c7b9ce2fa1003386a03/5shootingddrillstargetstablet.png

67.227.241.84

200 OK

69 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/82/1fbf424bc54c7b9ce2fa1003386a03/5shootingddrillstargetstablet.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 392 x 526, 8-bit colormap, non-interlaced\012- data
Size
69 kB (69437 bytes)
Hash
5946dd8d3864ec70818261da96cbecc8
c3f045ab80b22e56a6ebe4359a4d1691b31c5f2e
dcbbc89af71bf05cfb6cb6cc7b1405fecbe5b2aba82cf8f65351d2696fd6a7a0

HTTP Headers

GET /GStyle/lander/images/82/1fbf424bc54c7b9ce2fa1003386a03/5shootingddrillstargetstablet.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:16 GMT
Accept-Ranges: bytes
Content-Length: 69437
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/67/89d695ab2445c9a4783afe40f1fbae/money_back_guarantee.gif

67.227.241.84

200 OK

5.9 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/67/89d695ab2445c9a4783afe40f1fbae/money_back_guarantee.gif
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
GIF image data, version 89a, 285 x 223\012- data
Size
5.9 kB (5905 bytes)
Hash
67a0029d4435dbbf07557ffd95b0abeb
605bb5e855ee93c89b629771d1ae473e1550df0e
defc12d4d5994d4425d5f4098420410ce0469ac0318f203664fd775dcbd7ad74

HTTP Headers

GET /GStyle/lander/images/67/89d695ab2445c9a4783afe40f1fbae/money_back_guarantee.gif HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:12 GMT
Accept-Ranges: bytes
Content-Length: 5905
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/gif

secure1.ghostgundvd.com/GStyle/lander/images/ef/50d69d0eef4723a7eb3589f36a5515/glock_physical_family_bundle.png

67.227.241.84

200 OK

154 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/ef/50d69d0eef4723a7eb3589f36a5515/glock_physical_family_bundle.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 1000 x 514, 8-bit colormap, non-interlaced\012- data
Size
154 kB (154549 bytes)
Hash
72e741f4152dc3a420fe8f5e86a913af
2cb51eac0d1a1aa3d52ec47290014dd18c8cfe5d
8c897e85a4762073e5147d177fb9514c04b940058987d190df4b703b91bc33aa

HTTP Headers

GET /GStyle/lander/images/ef/50d69d0eef4723a7eb3589f36a5515/glock_physical_family_bundle.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:23 GMT
Accept-Ranges: bytes
Content-Length: 154549
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/65/9a38ed460c42e996ec177f95e7d6b0/fpc_logo.png

67.227.241.84

200 OK

9.1 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/65/9a38ed460c42e996ec177f95e7d6b0/fpc_logo.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 1200 x 428, 4-bit colormap, non-interlaced\012- data
Size
9.1 kB (9061 bytes)
Hash
083ce8a3c8bfac84241a200f0dbac688
6d82c72ae61f4c56395e1f9f9814ae61a7857353
9c0bc1f45fad99a6a5f3ad8190c4a3e298c9ef8917ec23cf10529266245a2a37

HTTP Headers

GET /GStyle/lander/images/65/9a38ed460c42e996ec177f95e7d6b0/fpc_logo.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 03:00:11 GMT
Accept-Ranges: bytes
Content-Length: 9061
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

secure1.ghostgundvd.com/GStyle/lander/images/08/451eb493a54e0b9e8d76074cfcb093/goa-logo.png

67.227.241.84

200 OK

93 kB

URL HTTP/1.1
secure1.ghostgundvd.com/GStyle/lander/images/08/451eb493a54e0b9e8d76074cfcb093/goa-logo.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
PNG image data, 1879 x 1855, 8-bit colormap, non-interlaced\012- data
Size
93 kB (93396 bytes)
Hash
801045e7b157b702cef655c41d86d9f4
665d20f01abf69b6c21ac87b3ce34725a35837d4
555f0bef19acb7180603129f1766164ec64cfd30189cf796254f3cb3a9921cdd

HTTP Headers

GET /GStyle/lander/images/08/451eb493a54e0b9e8d76074cfcb093/goa-logo.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Fri, 26 Aug 2022 02:59:51 GMT
Accept-Ranges: bytes
Content-Length: 93396
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9844
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 04:32:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9844
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 04:32:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9844
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 04:32:14 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9844
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 04:32:14 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (13195 bytes)
Hash
9fb14804c284e300f976848e30396e9c
6004b4b7afd22dded903f026d245bc90a6706767
1cf96b0b6c83f182d018fa4ffb9924038bf282755091e7bacff2a624220260d5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13195
x-amzn-requestid: 1303b72c-fe18-46a3-b3c1-06f3b8550d90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvHW6oAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1b3dbbb005a238117076d1f3;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pw2Wm8mI8MxRAOVsdvvWLEuxPN5ffcgWBZ_KecuuS5stoTHF4hxECg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:49 GMT
age: 24445
etag: "6004b4b7afd22dded903f026d245bc90a6706767"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9674 bytes)
Hash
5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:46 GMT
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
age: 24448
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10958 bytes)
Hash
777ce44582c70bf01a31da4cab366f36
57e1d34f146d5ccd9943aa97bcc3158f7103bb07
fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: e4GuUolL0WIMXvnF7BZ80j-dMMSILN2gd-1mqFwNns-zCUBsJa8iHQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:43:04 GMT
age: 24550
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7f230eb-6b67-4a80-b973-d8ea78fe73ae.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12853 bytes)
Hash
e08af5b1d18986e112913c6e69cc8ce6
151b60134a66305bd72dbb3810f67a57720b2af1
555a62d98f4002ad187a6b480d534a1dbe3c64d1f4d17cffad2ab985c10ca462

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7f230eb-6b67-4a80-b973-d8ea78fe73ae.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12853
x-amzn-requestid: 25e4402d-98d0-4c38-a927-397c37724bea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhdpHAuIAMFweQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c57-506672a36959d9ea09ef5155;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gHL2sFE-o1u5kEIUiabbP6u5CXr3ihI4mKiAVkfReyuJuTF5k5ktSg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:48 GMT
age: 24446
etag: "151b60134a66305bd72dbb3810f67a57720b2af1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.3 kB (8337 bytes)
Hash
2cb669522a324cd5d9ba1b1743138d38
71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0
a997731964710b80affb001f7f2e2f05a93550b06c1626279516d78b11332803

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8337
x-amzn-requestid: 88e6ec5a-6b04-4787-91e4-02f316d0d6e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhgYHViIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c68-10f0d81a09c0ae930f6be726;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8XATm-S2y3wzXWzJxgof2GIbXx_7WzuEMKrhI5By_tGaB8EiYeGkLg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:59:07 GMT
age: 23587
etag: "71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.7 kB (4706 bytes)
Hash
9b96b63164d7dc37268951510afb359f
5991d60e238558f9fe4e1759fe18dde628cb7be4
cd7a88b3173bae9ad466d41b9ae9a2ed9e18157660697f1f1b070043194c3db4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe74cbd5b-36b7-497f-97d1-4e7073a47375.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4706
x-amzn-requestid: ce0b287a-7242-402b-8261-c519a1310309
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhHxETjoAMFcTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bcb-7a69d6d14ad0fd707ede2882;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YOLFLV-a93jrA__gtWEzu2Vz8fpQJgvYGDk5fVsjhKVULRHdnKmfHw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
age: 24459
etag: "5991d60e238558f9fe4e1759fe18dde628cb7be4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

secure1.ghostgundvd.com/offers/assets.clickfunnels.com/images/closemodal.png

67.227.241.84

404 Not Found

2.1 kB

URL HTTP/1.1
secure1.ghostgundvd.com/offers/assets.clickfunnels.com/images/closemodal.png
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5395)
Size
2.1 kB (2123 bytes)
Hash
e881f8e66a93d0960ba6fad410094769
7f1bd10fd60815735fad95387ecaed0cfaf3b287
b43a9db67408b4398f147b571163d5b272af8c46eb4dca9f1bc2be44a6ded26d

HTTP Headers

GET /offers/assets.clickfunnels.com/images/closemodal.png HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 404 Not Found
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Cache-Control: no-cache, private
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2123
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

secure1.ghostgundvd.com/favicon.ico

67.227.241.84

200 OK

0 B

URL HTTP/1.1
secure1.ghostgundvd.com/favicon.ico
IP
67.227.241.84:0
ASN
#32244 LIQUIDWEB

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: secure1.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
Cookie: sessionId=acbae689a2d545768322446f6561ccab; affId=1114; c2=102f772aa50b099355ccd9f5dcd1b3; c3=102f2c54a3bfffa51f7d997fb68b0f; XSRF-TOKEN=eyJpdiI6IkZJbGFvcmhGeGljbTBEWmtIdkZzVkE9PSIsInZhbHVlIjoicHN5T3l6R1lSNDY3TkNibU9keExHS0hFVWowSFlqU0pYd3VKdHZJL0gvWlU3ZkhHSEZpMUNyMmdqcU1TbjR0bjQ0K3k4SXU5TmkxOTJORGY5YlRXK0gxdjRuL0dQc1VqNU1ydGVtWExFOVhXL3ZvYUJaRExtdGF3bUxSODZqN2EiLCJtYWMiOiJjMDk2Yjk2YjM1YzVmMDI5MDA1MWYwZmI4NGEwOGJlYTgzMTg0OTM2M2I3ZDFmY2RlNTZhNDJjZDU2MDk5NTUwIn0%3D; laravel_session=eyJpdiI6IkZzOHhjTnU2aU9CVVhDaUwzRllQREE9PSIsInZhbHVlIjoielE5SExGeWZMSnF4K1hkRk12WkpQTmFHaW9WM3k5b3JDUDlzSFE5cE15VFdQYm9sdUtSMU0vQ0ZkWFdUNEF4OStxcmczakM4N2M0Z3J3VlhLa2loTk1FTzArRENTL0NXc3FJY05PZGFraTBOVnVsczdaY1lORFhhRGJNdEYrM1MiLCJtYWMiOiI2OTA4MTIwMmIzMzRhNDg0OGNiOTI4NmQzMzVhY2VjMTI2MjQyNGJhYWQwMDc5NWQ2OTI2MmEwMDkwYmNkYmM1In0%3D

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:32:14 GMT
Server: Apache
Last-Modified: Mon, 21 Dec 2020 21:10:54 GMT
Accept-Ranges: bytes
Content-Length: 0
Cache-Control: max-age=2592000
Expires: Fri, 30 Dec 2022 04:32:14 GMT
Vary: User-Agent
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/x-icon

analytics.ghostgundvd.com/v2/a4d2877c-2a4c-46df-b9ac-7ff89e34adc8/cerebro.min.js

35.242.204.87

200 OK

17 kB

URL HTTP/1.1
analytics.ghostgundvd.com/v2/a4d2877c-2a4c-46df-b9ac-7ff89e34adc8/cerebro.min.js
IP
35.242.204.87:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
Unicode text, UTF-8 text, with very long lines (55378)
Size
17 kB (17356 bytes)
Hash
aa465db170f49207134d4f70097bb8f1
678f6e37a246342b90bbd243059e6ccae29bbe84
b9462e9f6ea2d9125621185892e2cf27716f72db868a9c63826080b59cefe34d

HTTP Headers

GET /v2/a4d2877c-2a4c-46df-b9ac-7ff89e34adc8/cerebro.min.js HTTP/1.1
Host: analytics.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-powered-by: Express
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=0
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 04:32:15 GMT
etag: W/"d89a-18463b8ca6b"
last-modified: Thu, 10 Nov 2022 22:46:05 GMT
server: nginx/1.22.0
vary: Accept-Encoding
connection: Close
Transfer-Encoding: chunked

ocsp.sca1b.amazontrust.com/

143.204.42.158

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.158:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
416369ac14ab76dd4e4f482c5493a840
43ac8f6811a007a386ca3707c47de27e03920b2e
6315de39a3ad55ec773822bc6bbf9fd6191db5d612211088494fcfd81c444bd5

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=125577
Date: Wed, 30 Nov 2022 04:32:16 GMT
Etag: "63862459-1d7"
Expires: Thu, 01 Dec 2022 15:25:13 GMT
Last-Modified: Tue, 29 Nov 2022 15:25:13 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4YYfOLdYjDzQ7gQqW7M0Tl6sYL3ms17k7sIAJRnuWaqVJ1ALHrOB7Q==

settings.cerebro.services/___i

54.187.99.70

200 OK

18 B

URL HTTP/2
settings.cerebro.services/___i
IP
54.187.99.70:0
ASN
#16509 AMAZON-02

File type
ASCII text, with no line terminators
Size
18 B (18 bytes)
Hash
bf33217eea81fa3ac7fb2634ab0bb3c9
a62ff5e289e74df5bc612724b55fb84f22f121bc
0d2e6bd3c2e6f3993f861b87bbee36e7d8403c5e34a740432844b3fa8b263322

HTTP Headers

GET /___i HTTP/1.1
Host: settings.cerebro.services
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://secure1.ghostgundvd.com/
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:32:16 GMT
content-type: application/json; charset=utf-8
content-length: 18
server: nginx/1.20.0
x-powered-by: Express
access-control-allow-origin: *
etag: W/"12-pi/14onnTfW8YScktV+4TyLxIbw"
X-Firefox-Spdy: h2

analytics.ghostgundvd.com/impression

35.242.204.87

204 No Content

0 B

URL HTTP/1.1
analytics.ghostgundvd.com/impression
IP
35.242.204.87:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /impression HTTP/1.1
Host: analytics.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type,x-anonymous-id,x-channel,x-ip-address,x-library,x-message-id,x-timestamp,x-url,x-user-id,x-version,x-visitor-id
Referer: http://secure1.ghostgundvd.com/
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
x-powered-by: Express
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: *
content-length: 0
date: Wed, 30 Nov 2022 04:32:16 GMT
server: nginx/1.22.0
connection: Close

analytics.ghostgundvd.com/impression

35.242.204.87

200 OK

4 B

URL HTTP/1.1
analytics.ghostgundvd.com/impression
IP
35.242.204.87:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
5b3abf9c1aa7556c3a36fea4e695c5d2
3fd967d09a748e1f2b26d6fe562e7155aa87e9de
98c4922bb641c65c7a30b7bcafdf230b9b00b6693631c56146ab25b2786ee4a3

HTTP Headers

POST /impression HTTP/1.1
Host: analytics.ghostgundvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: Basic YTRkMjg3N2MtMmE0Yy00NmRmLWI5YWMtN2ZmODllMzRhZGM4Og==
x-message-id: 0dcc4c4a-6638-4b6f-8ab7-5bd09549e539
x-timestamp: 2022-11-30T04:32:15.397Z
x-channel: browser
x-anonymous-id: 6386dccef3a9dbbfe808fd66
x-user-id: null
x-visitor-id: 94d4becc704af97ad9b7161ef0f8c2eb
x-ip-address: 91.90.42.154
x-url: http://secure1.ghostgundvd.com/offers/GStyle/?tid=102f2c54a3bfffa51f7d997fb68b0f&ebd_affid=2263&ebd_oid=1158&ebd_urlid=7767&ebd_affsource=&ebd_affsub=&ebd_affsub2=&ebd_affsub3=&ebd_affsub4=&ebd_affsub5=&ebd_affunq1=1114&ebd_affunq2=C4+Traffic,+Inc.&ebd_affunq3=102f2c54a3bfffa51f7d997fb68b0f&ebd_affunq4=30&ebd_affunq5=17&utm_campaign={utm_campaign}&utm_source={utm_source}&utm_medium={utm_medium}&utm_content=102f2c54a3bfffa51f7d997fb68b0f&utm_term={utm_term}&aff_click_id=102f772aa50b099355ccd9f5dcd1b3&campaign_id=2522&aff_id=2263&hostNameId=21807&affId=1114&c1=&c2=102f772aa50b099355ccd9f5dcd1b3&c3=102f2c54a3bfffa51f7d997fb68b0f&source=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_unique1=1114&aff_unique2=C4+Traffic,+Inc.&aff_unique3=102f2c54a3bfffa51f7d997fb68b0f&aff_unique4=30&aff_unique5=17&ad_id=102f2c54a3bfffa51f7d997fb68b0f
x-library: cerebro.js
x-version: 1.1.0
content-type: application/json
Content-Length: 54
Origin: http://secure1.ghostgundvd.com
Connection: keep-alive
Referer: http://secure1.ghostgundvd.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-powered-by: Express
access-control-allow-origin: *
content-type: application/json; charset=utf-8
date: Wed, 30 Nov 2022 04:32:17 GMT
etag: W/"4-P9ln0Jp0jh8rJtb+Vi5xVaqH6d4"
server: nginx/1.22.0
vary: Accept-Encoding
content-length: 4
connection: Close

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations