| ntp.mywavehome.net/ |  18.213.241.115 | 302 Found | 98 B |
IP18.213.241.115:0
File typeHTML document, ASCII text, with no line terminators Hash298f5be1262c63a158e90966b7a913ff 65ad28c73258c61a2e56b77bae4f1a5fad258ab8 2aa6a94307111faafa3d4fe299efd3056d2b29f24366e3792482ed2b8d5d9d2d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET / HTTP/1.1
Host: ntp.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 07 Dec 2022 21:14:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 98
Connection: keep-alive
Set-Cookie: AWSALB=nk/S38edOzzlKN1ihrPDxQlJhrF6Bjd6XwVP2kTyd6WAfdYpSdWYPFLWTIUF6wJT05viDMxpkmB31LxhjVK0xk1KqHEeWWtuYYWXgDmkm7zW769XkOWBAppb8ZhE; Expires=Wed, 14 Dec 2022 21:14:42 GMT; Path=/
AWSALBCORS=nk/S38edOzzlKN1ihrPDxQlJhrF6Bjd6XwVP2kTyd6WAfdYpSdWYPFLWTIUF6wJT05viDMxpkmB31LxhjVK0xk1KqHEeWWtuYYWXgDmkm7zW769XkOWBAppb8ZhE; Expires=Wed, 14 Dec 2022 21:14:42 GMT; Path=/; SameSite=None
Server: nginx/1.22.0
X-Powered-By: Express
Location: https://ntp.mywavehome.net/
Vary: Accept
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashaea93551fa9deb76ae49a3b4019d64fe e3b8862057ebe839959228e42246d7b1807fc90c 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19054
Expires: Thu, 08 Dec 2022 02:32:17 GMT
Date: Wed, 07 Dec 2022 21:14:43 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash5ceaca9fd4ad000cb435820812fc69c8 8168397aaf7b572c89a9c83f46c0b65e4ac509f2 9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2296
Expires: Wed, 07 Dec 2022 21:52:59 GMT
Date: Wed, 07 Dec 2022 21:14:43 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 21:08:05 GMT
content-type: application/json
age: 398
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash00e7703bd74975689fc9050356aaca6b 9788fe6a36d6f278e8da329ebc5dd87bcd212317 593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9807
Expires: Wed, 07 Dec 2022 23:58:10 GMT
Date: Wed, 07 Dec 2022 21:14:43 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: an/82lVRfsf+1Nh09oO43qQJEel0blhEIumcGwdSmQLW9bBwbxkcNmPCEKlaiafJERc2I9Ap/rAGzr98HQaMtg==
x-amz-request-id: QE2DX2YRMW325BNC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 20:49:30 GMT
age: 1513
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 21:14:43 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 21:07:55 GMT
age: 408
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.88 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.88:0
Hashfde2478896d197f49720d13256da3be7 9c1e292e91d97de6adbe57027a3fdf0646e50a5d 56168b525139b8a0d90bab75ca1dfce0c87bed333925a46a82c99d2a328e0621
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=169817
Date: Wed, 07 Dec 2022 21:14:43 GMT
Etag: "6390f69c-1d7"
Expires: Fri, 09 Dec 2022 20:25:00 GMT
Last-Modified: Wed, 07 Dec 2022 20:25:00 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TDljio5wVzvsshi0PYXZt00fvuRbqeC1En8pX0gIH9B4M6bHYfKBOg==
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash053aff7451e55d4269dd9610ab070f3f b3376256d11d159b0c7280ba1515b78d7d9e12ca 24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5549
Cache-Control: max-age=134676
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:43 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 10:39:19 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
|
|
| ntp.mywavehome.net/ | 18.213.241.115 | 200 OK | 82 kB |
IP18.213.241.115:0
Hash22bfbbdc600eb8055901fbf39c998767 646ba89b7f19ef056866221b0fc7e9790804529e 2d32f97703cddcaa8645817803eb04d29977f61190bf6ca1a3769bc9bd985bce
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET / HTTP/1.1
Host: ntp.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 07 Dec 2022 21:14:43 GMT
content-type: text/html; charset=utf-8
set-cookie: AWSALB=na8WhdZLp0smrbwFC1OsM5UTd/VhTxkKivDKNFU//eq8SWmg7vzrLZY9GhTQqKW8h1BwbFxprH/a4qOjMFwQ35cFI7D5bttnnhhsPXqg7/PNX0ItJrNtLsRROFQg; Expires=Wed, 14 Dec 2022 21:14:43 GMT; Path=/
AWSALBCORS=na8WhdZLp0smrbwFC1OsM5UTd/VhTxkKivDKNFU//eq8SWmg7vzrLZY9GhTQqKW8h1BwbFxprH/a4qOjMFwQ35cFI7D5bttnnhhsPXqg7/PNX0ItJrNtLsRROFQg; Expires=Wed, 14 Dec 2022 21:14:43 GMT; Path=/; SameSite=None; Secure
server: nginx/1.22.0
x-powered-by: Express
content-security-policy: default-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.navigateto.net 'nonce-asdf' *.googleapis.com;prefetch-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com * *.googleapis.com;img-src 'self' data: mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *;font-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *;media-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.navigateto.net 'nonce-asdf';frame-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.google.com *.bing.com *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com *.vimeo.com vimeo.com *.navigateto.net 'nonce-asdf' *.17track.net;style-src 'self' 'unsafe-inline' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.googleapis.com *.navigateto.net *.jsdelivr.net;script-src 'self' 'unsafe-eval' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.navigateto.net 'nonce-asdf' *.17track.net *.googletagmanager.com *.google-analytics.com
etag: W/"925e0-SHjjauNhm7cawoaeQx9RO8m7Amc"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash3074a66f6d9b2e2af9b41ec0e2f4e2db 942e2c49b3848f11da966937f5914c62aed24bce 7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.jsdelivr.net/npm/@mdi/font@4.x/css/materialdesignicons.min.css | 151.101.193.229 | 200 OK | 37 kB |
URL HTTP/2cdn.jsdelivr.net/npm/@mdi/font@4.x/css/materialdesignicons.min.css IP151.101.193.229:0
File typeASCII text, with very long lines (65536), with no line terminators Hashced9d5cb041c7426f9c832a05a9da490 747f551dd11fecb6f64c82df8dbaecdd0192c064 32aeb188222df7d49cd3df40d8dc05a3c93e3f2d9f17d930a7ad10fdfaa8b87d
GET /npm/@mdi/font@4.x/css/materialdesignicons.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.9.95
x-jsd-version-type: version
etag: W/"3690d-+C8LymUllOTB/eRBaefREVF0ZzU"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 21:14:43 GMT
age: 35090
x-served-by: cache-fra-eddf8230100-FRA, cache-bma1647-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 37279
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 |  104.18.20.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 IP104.18.20.226:0
Hash4be7b1605da79647673d8f8acb322b69 0b082625a34c2dbd8aefdc37b9f7dbc111f33c40 5fa6494d7c17461c1cb480227a0a4d6401836dedaeeb4d409c0f9768736f951a
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 21:14:43 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "530C0329653BDACFD2C9071A41E2BC97C169ECEA"
Expires: Thu, 08 Dec 2022 08:00:00 GMT
Last-Modified: Wed, 07 Dec 2022 20:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 736
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776045c89987b4e8-OSL
|
|
| fonts.googleapis.com/icon?family=Material+Icons&display=swap | 142.250.74.106 | 200 OK | 819 B |
URL HTTP/2fonts.googleapis.com/icon?family=Material+Icons&display=swap IP142.250.74.106:0
Hash81f141c18e6052a2cfff096bf5433040 c2ecd625170a66b03d16e9abf825cc8880649ba6 d948cb4a1e3738d6af97a2952c9d9901f62a74c2424dc5aac3e98a5319f06675
GET /icon?family=Material+Icons&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 21:14:43 GMT
date: Wed, 07 Dec 2022 21:14:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 34.212.166.60 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.212.166.60:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Q6iM17utys8Gzb1gJ7wIYw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2NEYjKiZLSTt9Fqbo6kaz7ZztZs=
|
|
| cdn.mywavehome.net/prod/public/85.2f85134618dbeeeb4f3c.js | 143.204.55.16 | 200 OK | 799 B |
URL HTTP/2cdn.mywavehome.net/prod/public/85.2f85134618dbeeeb4f3c.js IP143.204.55.16:0
File typeASCII text, with very long lines (799), with no line terminators Hash0c297cfb98aa513cb4b628d028085dda fd6e19f3f86dd6d58d0d2b2af591051c97f32676 83bdf8178c0e160053073332a81042903959d90ef6a0b9c022cbc6ccf953aaa4
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/85.2f85134618dbeeeb4f3c.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 799
last-modified: Mon, 21 Nov 2022 17:39:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Dec 2022 17:27:29 GMT
etag: "0c297cfb98aa513cb4b628d028085dda"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vkT9Z6Jg15UHOF-ppZiC4t5_MrNqgdVsCLJXFwsnhXTw_ZaDzE0OMg==
age: 15035
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/lang-wav_en.e8af5beb58fd6ca32d71.js | 143.204.55.16 | 200 OK | 752 B |
URL HTTP/2cdn.mywavehome.net/prod/public/lang-wav_en.e8af5beb58fd6ca32d71.js IP143.204.55.16:0
File typeASCII text, with very long lines (752), with no line terminators Hashc76375403bfe5110a7e93ba8e8dc4db5 c5125a71210942a83ea7919df52bb942736e8340 004f59aab6544c93353eefaf6587927a5ee2a161ae57b43d43b5799a63cbf8d4
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/lang-wav_en.e8af5beb58fd6ca32d71.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 752
last-modified: Mon, 21 Nov 2022 17:39:22 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Dec 2022 04:58:15 GMT
etag: "c76375403bfe5110a7e93ba8e8dc4db5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zc-glDwaCFRApd0evMP7h5bmKGoJ8nuueNKNmrw0fM7Jaikrckd9pA==
age: 60236
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 1.3 kB |
IP142.250.74.131:0
File typegzip compressed data, max compression\012- data Hashd1c721d2f54d5ba08d675c8061769e7c 483362df3b8a5154e8d9b15e0185506ad3d707e6 5f2f9a0a6ef7f3510554f48adac9813cabe22864d1b670e06aa1df05148a145a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:33:54 GMT
expires: Thu, 07 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 6050
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashec6ece82a7cb8faa3ba171efae3a9eda 7ee75fba9a9d1078960f7834d71961c38f514b82 301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7911
Expires: Wed, 07 Dec 2022 23:26:36 GMT
Date: Wed, 07 Dec 2022 21:14:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7911
Expires: Wed, 07 Dec 2022 23:26:36 GMT
Date: Wed, 07 Dec 2022 21:14:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7911
Expires: Wed, 07 Dec 2022 23:26:36 GMT
Date: Wed, 07 Dec 2022 21:14:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7911
Expires: Wed, 07 Dec 2022 23:26:36 GMT
Date: Wed, 07 Dec 2022 21:14:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7911
Expires: Wed, 07 Dec 2022 23:26:36 GMT
Date: Wed, 07 Dec 2022 21:14:45 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19ffa93b-2002-4f40-ab8b-aa163e9b5939.jpeg | 34.120.237.76 | 200 OK | 6.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19ffa93b-2002-4f40-ab8b-aa163e9b5939.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash535710165275856757bd7d1689f79de3 d51162b7fcba50022482b7130a556f3a7dfe822f c93e2df13b78cd4b718eb4fe3fe70a9d6d12fd0a0d7f505219ec0d5e6a70653c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19ffa93b-2002-4f40-ab8b-aa163e9b5939.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6186
x-amzn-requestid: 53d1d373-ff6c-4c59-bdeb-fff592bca586
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUsyGOEIAMFwfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e67eb-0156077b52dc07fb124c087b;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:51:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KkP8o_5GoqAukEAUkPrvsHE0v_36vO0wI7_97kvnUkqYc4ziC7UPpw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 16:47:32 GMT
age: 16033
etag: "d51162b7fcba50022482b7130a556f3a7dfe822f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| mywavehome.net/home/pixels | 34.230.145.12 | 200 OK | 2.7 kB |
URL HTTP/2mywavehome.net/home/pixels IP34.230.145.12:0
File typeASCII text, with CRLF line terminators Hasha0d6ff380c7a4d2dea348d722af7c5e6 da01064f2b232a3a966bb249a5cee69f1e51f514 a7b9731ea6d792716c0ca071917d6f3b4b966fae5785550a4feb58ffac18f30a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /home/pixels HTTP/1.1
Host: mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ntp.mywavehome.net/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 21:14:45 GMT
content-type: text/javascript; charset=utf-8
content-length: 2666
cache-control: private
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-credentials: *
x-aspnet-version: 4.0.30319
set-cookie: data={"UserId":"f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2","Keyword":"","UserClass":"20221207","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; domain=.mywavehome.net; expires=Thu, 08-Dec-2022 03:14:44 GMT; path=/; secure; SameSite=None
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb15136d60fd0a5e0f657a4f5c75d540f 36082b7329d473829178f280cb71a83b1531e486 79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tGtiCE9C3j0BUruNaFN2j1mKxCSouLmocmTXpmLMBJaLNyVwkXu1gQ==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 20:49:36 GMT
age: 1509
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg | 34.120.237.76 | 200 OK | 8.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe95ebce9d79ba46cb96af9a45af1762f 985c6761675e6bcc0186f64d55f94cf09352f05c 5837d6bf31e57f955ba2577f112281cc33a5502b358c83192f4e396b57042ac0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8438
x-amzn-requestid: 0f5d1b0e-1193-4006-8a54-555681d9f62e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlqVGMjoAMFS6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb641-6366ea6464122d857407cdff;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:38:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nm0qQpo75zvDYWxv8V3GvOSBFenh8ocfjV9d02Mc2l-ABieIb3h2uA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:53:40 GMT
age: 84065
etag: "985c6761675e6bcc0186f64d55f94cf09352f05c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg | 34.120.237.76 | 200 OK | 6.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash210b27f5f6310d8fad640acce3d9ae0e 08d241e56622cb900754d95bc5d58ed8826d9f32 64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 08:32:51 GMT
age: 45714
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash604a4132da78a0c013b5818644adb121 ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566 eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8701
x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cm3-2HRWIAMFjfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cmRvAOLmk_xZC4RKdin-lozUNeK9-icqkzsQmSjP9scXnnCLxkvJ5A==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:01:53 GMT
age: 83572
etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg | 34.120.237.76 | 200 OK | 8.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash98d2cf29c710d25bd2f03ff216fdd369 b8eb2e11f9655f19334befc036f21489a6473827 614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:19 GMT
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
age: 83846
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashc7a5f887bbc7d30b9cfe15163c3d8ddb 21d65790a1d10a06d198b54218365aa474126e1c 2a2e7930f967d947cc5293c95221913e24596773577bbf56ff402db6236bbda1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=G-ZDEB536PB9 | 172.217.21.168 | 200 OK | 75 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-ZDEB536PB9 IP172.217.21.168:0
File typeASCII text, with very long lines (25283) Hasha6ef18cd28f38edbaade039c0a84c73f 0655ca5794d28dd45ce5308d654a3f6a8c99c0e6 b2d8d2927bce85568e2760803beb9cfc16b3dc4fa47f9f5e2d7519053c6a48c3
GET /gtag/js?id=G-ZDEB536PB9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Dec 2022 21:14:45 GMT
expires: Wed, 07 Dec 2022 21:14:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75241
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashc7a5f887bbc7d30b9cfe15163c3d8ddb 21d65790a1d10a06d198b54218365aa474126e1c 2a2e7930f967d947cc5293c95221913e24596773577bbf56ff402db6236bbda1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash30aec170d58f580f2ed4da4b92d72cc7 3b11a98ba9563f7f266e7a935e3b78bd0c0712aa 7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc221e4deeb8144b7fc354cce5dc563f8 578e9395e2800e2e19bde2a1d49d9501f6aa3364 258bf83c23b05e8bc9b987e849a194b9f81742ee4268f6453a1e88bfaca959f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-ZDEB536PB9>m=2oebu0&_p=993406883&_gaz=1&cid=1590861800.1670447685&ul=en-us&sr=1280x1024&_eu=BA&_s=1&uid=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2&sid=1670447684&sct=1&seg=0&dl=https%3A%2F%2Fntp.mywavehome.net%2F&dt=New%20Tab&en=page_view&_fv=1&_ss=1&_ee=1&ep.transport_type=beacon&ep.transaction_id=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2&ep.project=ntp | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-ZDEB536PB9>m=2oebu0&_p=993406883&_gaz=1&cid=1590861800.1670447685&ul=en-us&sr=1280x1024&_eu=BA&_s=1&uid=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2&sid=1670447684&sct=1&seg=0&dl=https%3A%2F%2Fntp.mywavehome.net%2F&dt=New%20Tab&en=page_view&_fv=1&_ss=1&_ee=1&ep.transport_type=beacon&ep.transaction_id=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2&ep.project=ntp IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g/collect?v=2&tid=G-ZDEB536PB9>m=2oebu0&_p=993406883&_gaz=1&cid=1590861800.1670447685&ul=en-us&sr=1280x1024&_eu=BA&_s=1&uid=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2&sid=1670447684&sct=1&seg=0&dl=https%3A%2F%2Fntp.mywavehome.net%2F&dt=New%20Tab&en=page_view&_fv=1&_ss=1&_ee=1&ep.transport_type=beacon&ep.transaction_id=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2&ep.project=ntp HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
pragma: no-cache
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
date: Wed, 07 Dec 2022 03:11:57 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/plain
age: 64968
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-ZDEB536PB9&cid=1590861800.1670447685>m=2oebu0&aip=1&uid=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2&z=1371820937 | 142.250.74.131 | 200 OK | 42 B |
URL HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-ZDEB536PB9&cid=1590861800.1670447685>m=2oebu0&aip=1&uid=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2&z=1371820937 IP142.250.74.131:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-ZDEB536PB9&cid=1590861800.1670447685>m=2oebu0&aip=1&uid=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2&z=1371820937 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 07 Dec 2022 21:14:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash30aec170d58f580f2ed4da4b92d72cc7 3b11a98ba9563f7f266e7a935e3b78bd0c0712aa 7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc221e4deeb8144b7fc354cce5dc563f8 578e9395e2800e2e19bde2a1d49d9501f6aa3364 258bf83c23b05e8bc9b987e849a194b9f81742ee4268f6453a1e88bfaca959f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| api.mywavehome.net/gglnt?clientId=1590861800.1670447685 | 3.225.226.82 | 200 OK | 0 B |
URL HTTP/2api.mywavehome.net/gglnt?clientId=1590861800.1670447685 IP3.225.226.82:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /gglnt?clientId=1590861800.1670447685 HTTP/1.1
Host: api.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2","Keyword":"","UserClass":"20221207","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; _ga_ZDEB536PB9=GS1.1.1670447684.1.0.1670447684.60.0.0; _ga=GA1.1.1590861800.1670447685
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Content-Length: 0
HTTP/2 200 OK
date: Wed, 07 Dec 2022 21:14:45 GMT
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| api.mywavehome.net/gglnt?clientId=1590861800.1670447685 | 3.225.226.82 | 200 OK | 0 B |
URL HTTP/2api.mywavehome.net/gglnt?clientId=1590861800.1670447685 IP3.225.226.82:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /gglnt?clientId=1590861800.1670447685 HTTP/1.1
Host: api.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2","Keyword":"","UserClass":"20221207","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; _ga_ZDEB536PB9=GS1.1.1670447684.1.0.1670447684.60.0.0; _ga=GA1.1.1590861800.1670447685
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Content-Length: 0
HTTP/2 200 OK
date: Wed, 07 Dec 2022 21:14:45 GMT
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6d7737802f93eeb14503d61c77c137bc fa6861c298d00f879b9f16af4f05470cecfc80af 6b1b9763bcfaeb92a63ad6020651b3745e8279c634eb3505fc9fa875e772af42
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/g/collect?v=2&tid=G-ZDEB536PB9&cid=1590861800.1670447685>m=2oebu0&aip=1&uid=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2 | 64.233.165.156 | 204 No Content | 0 B |
URL HTTP/2stats.g.doubleclick.net/g/collect?v=2&tid=G-ZDEB536PB9&cid=1590861800.1670447685>m=2oebu0&aip=1&uid=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2 IP64.233.165.156:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-ZDEB536PB9&cid=1590861800.1670447685>m=2oebu0&aip=1&uid=f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://ntp.mywavehome.net
date: Wed, 07 Dec 2022 21:14:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6d7737802f93eeb14503d61c77c137bc fa6861c298d00f879b9f16af4f05470cecfc80af 6b1b9763bcfaeb92a63ad6020651b3745e8279c634eb3505fc9fa875e772af42
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 21:14:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ntp.mywavehome.net/favicon.ico | 18.213.241.115 | 200 OK | 0 B |
URL HTTP/2ntp.mywavehome.net/favicon.ico IP18.213.241.115:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /favicon.ico HTTP/1.1
Host: ntp.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: AWSALB=4Uy2w7UclWGb+Zjgjn33dBIySJ2GcULHUFUPLQDFiatVBMEoi2uWiz4v2BLRdU4RSdFaMARwjzxOD//1hNKTntYART8D8jAANCZFWKzUFl/k2eDGHTOYgFjurrQp; AWSALBCORS=4Uy2w7UclWGb+Zjgjn33dBIySJ2GcULHUFUPLQDFiatVBMEoi2uWiz4v2BLRdU4RSdFaMARwjzxOD//1hNKTntYART8D8jAANCZFWKzUFl/k2eDGHTOYgFjurrQp
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 21:14:44 GMT
content-type: image/x-icon
set-cookie: AWSALB=XpsM4wQSaa1X3v4EVKo38dr19lqF8BVdeEjf/MqEKol5XjZo+dcIqt5j53Zqu1WGROyzYjcoD66K+GwCPjphVmzVcf9OMPMvpvtBuofehsmcc8U5uycnNMhbUquy; Expires=Wed, 14 Dec 2022 21:14:44 GMT; Path=/
AWSALBCORS=XpsM4wQSaa1X3v4EVKo38dr19lqF8BVdeEjf/MqEKol5XjZo+dcIqt5j53Zqu1WGROyzYjcoD66K+GwCPjphVmzVcf9OMPMvpvtBuofehsmcc8U5uycnNMhbUquy; Expires=Wed, 14 Dec 2022 21:14:44 GMT; Path=/; SameSite=None; Secure
server: nginx/1.22.0
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Fri, 29 Oct 2021 14:39:48 GMT
etag: W/"47e-17ccc7e1720"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/82.06700032270d93845615.js | 143.204.55.16 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/82.06700032270d93845615.js IP143.204.55.16:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/82.06700032270d93845615.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2","Keyword":"","UserClass":"20221207","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 18:36:09 GMT
server: AmazonS3
content-encoding: br
date: Wed, 07 Dec 2022 01:02:54 GMT
etag: W/"7569074a88443012c97d79a4ee23f523"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RbZbpBvTB_YCjUOZLrVSIacc8ayqLRd5-wIfvXXafBjIVP0Wm8_-XQ==
age: 72896
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Open+Sans&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Open+Sans&display=swap IP142.250.74.106:0
GET /css2?family=Open+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 21:14:43 GMT
date: Wed, 07 Dec 2022 21:14:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/common.501af2fc5f35efed730a.css | 143.204.55.16 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/common.501af2fc5f35efed730a.css IP143.204.55.16:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/common.501af2fc5f35efed730a.css HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 30 Nov 2022 21:56:23 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 07 Dec 2022 14:36:39 GMT
etag: W/"f7b920bcdbb2ac5838adb75efbe09e0a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gpYRcCUgd__p6dcTkvdgRekDces9bGWmAHMIDNqbcCXiiaW7vUxzmQ==
age: 23896
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/vendors~app.5d077802755d03f1d907.js | 143.204.55.16 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/vendors~app.5d077802755d03f1d907.js IP143.204.55.16:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/vendors~app.5d077802755d03f1d907.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 21:56:26 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 07 Dec 2022 14:36:39 GMT
etag: W/"bca5e3580966d1c21a66fdde20109936"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3-RsiPa4BcvSk5Qd7PEGSeZGTRPlBauguSv3sdc_EJ4jGo0-gjaWAw==
age: 23896
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/app.501af2fc5f35efed730a.js | 143.204.55.16 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/app.501af2fc5f35efed730a.js IP143.204.55.16:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/app.501af2fc5f35efed730a.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 21:56:23 GMT
server: AmazonS3
content-encoding: br
date: Tue, 06 Dec 2022 22:04:50 GMT
etag: W/"78e763afb4114e39fd0989a59acd2759"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yNN41e9H9uefB1Ps5s5V2bQ-Tw2fABQPAlhX7mKePz1RpDZyjGoEPw==
age: 83822
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/common.5d077802755d03f1d907.css | 143.204.55.16 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/common.5d077802755d03f1d907.css IP143.204.55.16:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/common.5d077802755d03f1d907.css HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 30 Nov 2022 21:56:23 GMT
server: AmazonS3
content-encoding: gzip
date: Wed, 07 Dec 2022 14:36:39 GMT
etag: W/"f7b920bcdbb2ac5838adb75efbe09e0a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: niag5yYXZrRUk0RYCAOtmrwv7JysunViyFDXUTE8HnbUds6e-c6how==
age: 23896
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/84.ff0e65fa266460afd355.js | 143.204.55.16 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/84.ff0e65fa266460afd355.js IP143.204.55.16:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/84.ff0e65fa266460afd355.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 21:56:23 GMT
server: AmazonS3
content-encoding: br
date: Wed, 07 Dec 2022 19:13:50 GMT
etag: W/"a92651465f54f889849e7dddaa0fc6d7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OHGYTx7tGVHR0cGetbA2mNWu4n2PoYqj0X-AqOJJ-3Z7kjQtP2t--w==
age: 7512
X-Firefox-Spdy: h2
|
|
| ntp.mywavehome.net/home/pixels | 18.213.241.115 | 302 Found | 0 B |
URL HTTP/2ntp.mywavehome.net/home/pixels IP18.213.241.115:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /home/pixels HTTP/1.1
Host: ntp.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: AWSALB=na8WhdZLp0smrbwFC1OsM5UTd/VhTxkKivDKNFU//eq8SWmg7vzrLZY9GhTQqKW8h1BwbFxprH/a4qOjMFwQ35cFI7D5bttnnhhsPXqg7/PNX0ItJrNtLsRROFQg; AWSALBCORS=na8WhdZLp0smrbwFC1OsM5UTd/VhTxkKivDKNFU//eq8SWmg7vzrLZY9GhTQqKW8h1BwbFxprH/a4qOjMFwQ35cFI7D5bttnnhhsPXqg7/PNX0ItJrNtLsRROFQg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Wed, 07 Dec 2022 21:14:44 GMT
content-type: text/plain; charset=utf-8
location: https://mywavehome.net/home/pixels
set-cookie: AWSALB=4Uy2w7UclWGb+Zjgjn33dBIySJ2GcULHUFUPLQDFiatVBMEoi2uWiz4v2BLRdU4RSdFaMARwjzxOD//1hNKTntYART8D8jAANCZFWKzUFl/k2eDGHTOYgFjurrQp; Expires=Wed, 14 Dec 2022 21:14:44 GMT; Path=/
AWSALBCORS=4Uy2w7UclWGb+Zjgjn33dBIySJ2GcULHUFUPLQDFiatVBMEoi2uWiz4v2BLRdU4RSdFaMARwjzxOD//1hNKTntYART8D8jAANCZFWKzUFl/k2eDGHTOYgFjurrQp; Expires=Wed, 14 Dec 2022 21:14:44 GMT; Path=/; SameSite=None; Secure
server: nginx/1.22.0
x-powered-by: Express
content-security-policy: default-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.navigateto.net 'nonce-asdf' *.googleapis.com;prefetch-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com * *.googleapis.com;img-src 'self' data: mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *;font-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *;media-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.navigateto.net 'nonce-asdf';frame-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.google.com *.bing.com *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com *.vimeo.com vimeo.com *.navigateto.net 'nonce-asdf' *.17track.net;style-src 'self' 'unsafe-inline' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.googleapis.com *.navigateto.net *.jsdelivr.net;script-src 'self' 'unsafe-eval' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.navigateto.net 'nonce-asdf' *.17track.net *.googletagmanager.com *.google-analytics.com
vary: Accept, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/83.1669924ecbb490d46c0b.js | 143.204.55.16 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/83.1669924ecbb490d46c0b.js IP143.204.55.16:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/83.1669924ecbb490d46c0b.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"f7327a6e-4d7b-4d99-b8a8-2ce344f8a4e2","Keyword":"","UserClass":"20221207","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Mon, 21 Nov 2022 17:39:20 GMT
server: AmazonS3
content-encoding: br
date: Wed, 07 Dec 2022 04:58:14 GMT
etag: W/"f6f87da3925a3318b993f1575ffcc9e3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xvfih25OC-FTECZx0o54tBTTivX8QTDAxhOFCjwuecKFsPhKU4SD3Q==
age: 62920
X-Firefox-Spdy: h2
|
|