wildcard.macauleypetersen.click/
103.224.182.210302 Found 2 B URL User Request GET HTTP/1.1 wildcard.macauleypetersen.click/
IP 103.224.182.210:443
ASN #133618 Trellian Pty. Limited
Certificate IssuerLet's Encrypt
Subjectsparerrom.com
Fingerprint58:3F:DA:76:45:9A:A7:63:A8:90:E1:A5:F8:A3:24:0A:A9:5D:9B:37
ValidityMon, 06 Nov 2023 20:51:35 GMT - Sun, 04 Feb 2024 20:51:34 GMT
Hash e1c06d85ae7b8b032bef47e42e4c08f9
71853c6197a6a7f222db0f1978c7cb232b87c5ee
75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070
GET / HTTP/1.1
Host: wildcard.macauleypetersen.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Tue, 28 Nov 2023 15:59:12 GMT
server: Apache
set-cookie: __tad=1701187152.4730354; expires=Fri, 25-Nov-2033 15:59:12 GMT; Max-Age=315360000
location: http://ww6.wildcard.macauleypetersen.click/
content-length: 2
content-type: text/html; charset=UTF-8
connection: close
ww6.wildcard.macauleypetersen.click/
35.186.238.101200 OK 1.2 kB URL User Request GET HTTP/1.1 ww6.wildcard.macauleypetersen.click/
IP 35.186.238.101:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1177), with no line terminators
Hash 37883aa7c0d6e92c04a350d04ea33fda
a3f52fc0e5e112190b2ff79528c3ff5bfd3d216b
72eb0b7d8ddb3f5f391cef068fd50b63fc0288846c36427a23b4e93c8ed431dc
GET / HTTP/1.1
Host: ww6.wildcard.macauleypetersen.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 15:59:12 GMT
Content-Type: text/html
Content-Length: 1177
Last-Modified: Mon, 13 Nov 2023 23:14:44 GMT
ETag: "6552ade4-499"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_kVeSiUIQEirEzbPGlTFova2d+UhSIIorjDmEFRbSIPMThEDpk3oK2nPqYuOlCma7mZHspfsSzuxk+rEtmQ9HVQ
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
img1.wsimg.com/parking-lander/static/css/main.ba077a97.css
95.101.10.131200 OK 187 B URL GET HTTP/2 img1.wsimg.com/parking-lander/static/css/main.ba077a97.css
IP 95.101.10.131:443
ASN #20940 Akamai International B.V.
Requested by http://ww6.wildcard.macauleypetersen.click/
Certificate IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
Hash 92cc7bc9897bfb97adb18591dc4642cb
1c42dc26c819be8dd5f5ada83532d7982353e6b3
73cf1f3e2f04d158ad8de2ad926353b2ba0f1e25b145fe063f467120a1341ea8
GET /parking-lander/static/css/main.ba077a97.css HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww6.wildcard.macauleypetersen.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: MxGmn305T3+mY2YFiYdRlbHjfL5LgqRcNcgZXu5Wp9cgXqZF0DhQjiqOuVsJI6cQs1rP36ZLJTg=
x-amz-request-id: 6K2SYNVRAQN48GKM
last-modified: Mon, 13 Nov 2023 23:32:18 GMT
etag: "92cc7bc9897bfb97adb18591dc4642cb"
x-amz-server-side-encryption: AES256
x-amz-version-id: S.cohGeac3FUy_snjCsO9LOvUc0sPSaD
accept-ranges: bytes
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 15:59:13 GMT
date: Tue, 28 Nov 2023 15:59:13 GMT
content-length: 187
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
img1.wsimg.com/parking-lander/static/js/main.ed307b3c.js
95.101.10.131200 OK 202 kB URL GET HTTP/2 img1.wsimg.com/parking-lander/static/js/main.ed307b3c.js
IP 95.101.10.131:443
ASN #20940 Akamai International B.V.
Requested by http://ww6.wildcard.macauleypetersen.click/
Certificate IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File type ASCII text, with very long lines (65465)
Size 202 kB (201490 bytes)
Hash 12be8e7ca274474fda2d91c5d8be2866
a41a80ed51a84ae8973a9e2779489f419d12cc6a
5bb6b8410758c3743d0845a1923ec00bdc91cc116c52eb513bf23fb1adf6219e
GET /parking-lander/static/js/main.ed307b3c.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww6.wildcard.macauleypetersen.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: Y1M+FUxISHjOk8nyCHRsIEP5dZa4fcuo6h0aZ/drC5YA7gf5k2KoGxf+355MwWcYwIhARXt82gPw2/RT6ZaCVA==
x-amz-request-id: 6K2JXDCZJ9QT0PKC
last-modified: Mon, 13 Nov 2023 23:32:12 GMT
etag: "12be8e7ca274474fda2d91c5d8be2866"
x-amz-server-side-encryption: AES256
x-amz-version-id: J9lW9zbdfJIPV6UpIMUQKyHI1xEGGym7
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 15:59:13 GMT
date: Tue, 28 Nov 2023 15:59:13 GMT
content-length: 201490
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
ww6.wildcard.macauleypetersen.click/px.js?ch=1&abp=1
35.186.238.101200 OK 476 B URL GET HTTP/1.1 ww6.wildcard.macauleypetersen.click/px.js?ch=1&abp=1
IP 35.186.238.101:80
Requested by http://ww6.wildcard.macauleypetersen.click/
Hash d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc
GET /px.js?ch=1&abp=1 HTTP/1.1
Host: ww6.wildcard.macauleypetersen.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww6.wildcard.macauleypetersen.click/
Cookie: caf_ipaddr=91.90.42.154; country=NO; city=""; expiry_partner=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 15:59:13 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Mon, 13 Nov 2023 23:14:15 GMT
ETag: "6552adc7-1dc"
Accept-Ranges: bytes
Via: 1.1 google
ww6.wildcard.macauleypetersen.click/px.js?ch=2&abp=1
35.186.238.101200 OK 476 B URL GET HTTP/1.1 ww6.wildcard.macauleypetersen.click/px.js?ch=2&abp=1
IP 35.186.238.101:80
Requested by http://ww6.wildcard.macauleypetersen.click/
Hash d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc
GET /px.js?ch=2&abp=1 HTTP/1.1
Host: ww6.wildcard.macauleypetersen.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww6.wildcard.macauleypetersen.click/
Cookie: caf_ipaddr=91.90.42.154; country=NO; city=""; expiry_partner=
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 15:59:13 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Mon, 13 Nov 2023 23:15:22 GMT
ETag: "6552ae0a-1dc"
Accept-Ranges: bytes
Via: 1.1 google
www.google.com/adsense/domains/caf.js?abp=1
142.250.74.132200 OK 55 kB URL GET HTTP/2 www.google.com/adsense/domains/caf.js?abp=1
IP 142.250.74.132:443
Requested by http://ww6.wildcard.macauleypetersen.click/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type gzip compressed data, max compression\012- data
Hash 89387bb2e38f5cf2dc6eb09f2ae01154
22343996b01012b7a1583d20c7bc1fc5dcd68534
992198cb3eea48c1e13bdc6359d609df0c9c5ab490068e1e53594bc933ff2fd9
GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww6.wildcard.macauleypetersen.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 28 Nov 2023 15:59:13 GMT
expires: Tue, 28 Nov 2023 15:59:13 GMT
cache-control: private, max-age=3600
etag: "14990009047394774639"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2