first-law-comic.com/what-are-professional-ethics-and-values/
301 Moved Permanently 0 B URL HTTP/1.1 first-law-comic.com/what-are-professional-ethics-and-values/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /what-are-professional-ethics-and-values/ HTTP/1.1
Host: first-law-comic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 06 Oct 2022 14:24:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 06 Oct 2022 15:24:59 GMT
Location: https://first-law-comic.com/what-are-professional-ethics-and-values/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VVW43BzUhcNq9xthS1ZIbBDvp5v5QK6OWtW9sVObxBkJz3aM%2FcrV7l%2FDfzUbLH1RpZ7l8l9qEWVnavrxCo4%2B92skTan0739pz4XmJucAnDvD8sFaNyLLU8sadtYl01wWy92%2FSnF5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 755f10525dd70b39-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7298
Expires: Thu, 06 Oct 2022 16:26:37 GMT
Date: Thu, 06 Oct 2022 14:24:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RqzAiy5DlDcoUQWAKDt90ralKCsYoeE7vAbxvDnQZ5nBARHAlUSEOg==
Age: 81461
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 94a09d62ab3057cda67a091c8d7478f5
b1c9d223a951d0bc9f17c9f3b84501266a552b58
582364f9f6014520c269f1f794e7c34027bd2697b53e5d02fad43e74a735e471
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "582364F9F6014520C269F1F794E7C34027BD2697B53E5D02FAD43E74A735E471"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15417
Expires: Thu, 06 Oct 2022 18:41:56 GMT
Date: Thu, 06 Oct 2022 14:24:59 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RGm/5RhuqIvh99ymX6qBL4D41v7aeRgwHkHWRjUzvK/1tbjtXN0SEBmFnOVswGKfsP4GtCkuJIc=
x-amz-request-id: T7DH7N55MXY50ZKX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 13:30:48 GMT
age: 3251
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 94ccec9bb97df1196e401efd92d4dd38
d93d5aaa25d998da9746fc6fccf21f7461b935c5
3c4d302dcb6c4ad47b445bf6ea8143ae55588c378c893806541e8a152d7e140e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3C4D302DCB6C4AD47B445BF6EA8143AE55588C378C893806541E8A152D7E140E"
Last-Modified: Wed, 05 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20852
Expires: Thu, 06 Oct 2022 20:12:31 GMT
Date: Thu, 06 Oct 2022 14:24:59 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 14:24:59 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 94ccec9bb97df1196e401efd92d4dd38
d93d5aaa25d998da9746fc6fccf21f7461b935c5
3c4d302dcb6c4ad47b445bf6ea8143ae55588c378c893806541e8a152d7e140e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3C4D302DCB6C4AD47B445BF6EA8143AE55588C378C893806541E8A152D7E140E"
Last-Modified: Wed, 05 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20852
Expires: Thu, 06 Oct 2022 20:12:31 GMT
Date: Thu, 06 Oct 2022 14:24:59 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b0e8a79f3e381ab34a44278947ac7c7e
70d01e6fdc8565c661b6ae8c5a043ddf2da16530
885a8c234fca85e6f6bb3e8fcab6672b9a9742b5d3f74681b17a330fa295d549
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 4.9 kB IP
Hash ab3bb007eafe68816f98cae85d5a05e9
2e032b9e0d409ac9168cb461a26fe98fc60e9be7
c7bafaad76cd63d87c643ba0a3076eb01272ba6b9403c768935a62295fbf96be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/dmsans/v11/rP2Hp2ywxg089UriCZOIHQ.woff2
200 OK 29 kB URL HTTP/2 fonts.gstatic.com/s/dmsans/v11/rP2Hp2ywxg089UriCZOIHQ.woff2
IP
Hash c02d9a09926ee8597cfa8a41e87fd764
c3cfe6fc36a0f2a60df2d01129d2294186109ec6
928579dab72e078aa0cd5a34835ae7ae720e4b120fa1212f4cdc9da2bdcb0767
GET /s/dmsans/v11/rP2Hp2ywxg089UriCZOIHQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18096
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Sep 2022 20:33:03 GMT
expires: Fri, 29 Sep 2023 20:33:03 GMT
cache-control: public, max-age=31536000
age: 582717
last-modified: Thu, 21 Apr 2022 16:54:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 588 B IP
Hash ed02cca58878d7b7966f195bda26b707
3aacf42d4a25d60daa451d1e246e3f42abb2f2fc
cad7ab43f51e95c429bb5cb51767d4544ab7e0aeca34963d7764c550d1381eae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff5f22aafa6751c60631736c305a4c7c
278b89e5c1a978e070be4b66bb780862894b8504
b501664d7591e6dfe95c8641e0020e04b76f16f5cb80a7fc0ee0b36af60a6382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/dmsans/v11/rP2Cp2ywxg089UriAWCrCBimCw.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/dmsans/v11/rP2Cp2ywxg089UriAWCrCBimCw.woff2
IP
Hash b173a395b7ea47b86414a533c442ca57
6d94f9f35c408980ec52bd82cd380abf85bcf38f
40aa687edf562c595f6893cc0a178be00895fac58994c5fa3af933acd0921517
GET /s/dmsans/v11/rP2Cp2ywxg089UriAWCrCBimCw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 22:42:08 GMT
expires: Tue, 03 Oct 2023 22:42:08 GMT
cache-control: public, max-age=31536000
age: 229372
last-modified: Thu, 21 Apr 2022 16:54:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/dmsans/v11/rP2Cp2ywxg089UriASitCBimCw.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/dmsans/v11/rP2Cp2ywxg089UriASitCBimCw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18212, version 1.0\012- data
Hash ca72fb4e277e59be50b8850190822581
159b97b22006fe2a483da0a13d33cfb3cc5aa031
f3c0fa2cd71bb91d0e3acf5d77b93c49a184e9ad941532ca8c07c82eb0bd6a6c
GET /s/dmsans/v11/rP2Cp2ywxg089UriASitCBimCw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18212
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Sep 2022 20:33:04 GMT
expires: Fri, 29 Sep 2023 20:33:04 GMT
cache-control: public, max-age=31536000
age: 582716
last-modified: Thu, 21 Apr 2022 16:54:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2
200 OK 43 kB URL HTTP/2 fonts.gstatic.com/s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2
IP
Hash 0ddb4fb1dc7e5c656b1a6273f92a237c
3e767ab37a51eba20919d6c9f1c71f79c37ebbdb
fca7603fd23feddf876642d4dc25fbbc09ab7b4638dc80eb132cbc066c656fbb
GET /s/lora/v26/0QIvMX1D_JOuMwr7Iw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 03 Oct 2022 19:24:26 GMT
expires: Tue, 03 Oct 2023 19:24:26 GMT
cache-control: public, max-age=31536000
age: 241234
last-modified: Mon, 15 Aug 2022 18:07:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=DM+Sans%3Aital%2Cwght%400%2C400%3B0%2C500%3B0%2C700%3B1%2C400%3B1%2C500%3B1%2C700%7CLora%3Aital%2Cwght%400%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B1%2C400%3B1%2C500%3B1%2C600%3B1%2C700&display=swap
200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=DM+Sans%3Aital%2Cwght%400%2C400%3B0%2C500%3B0%2C700%3B1%2C400%3B1%2C500%3B1%2C700%7CLora%3Aital%2Cwght%400%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B1%2C400%3B1%2C500%3B1%2C600%3B1%2C700&display=swap
IP
Hash fbc0371ba1d83508cec479d095a6a690
0975ab525e64ce6526751c8287c3552d34e86375
fe6edc60382237570fd09d1336e965a5021aebd9115f0914862166fca47308ba
GET /css?family=DM+Sans%3Aital%2Cwght%400%2C400%3B0%2C500%3B0%2C700%3B1%2C400%3B1%2C500%3B1%2C700%7CLora%3Aital%2Cwght%400%2C400%3B0%2C500%3B0%2C600%3B0%2C700%3B1%2C400%3B1%2C500%3B1%2C600%3B1%2C700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 06 Oct 2022 14:25:00 GMT
date: Thu, 06 Oct 2022 14:25:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f9371f81e2eeeead7fe351a49f3b1c40
ae23d6c6c57dd7cf568c3a74594c377b7bb7df43
03c4ba0faa3199d061d1bb37df5d48ba6d81f77a83e243922075efc4d4acf456
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/55fdc514/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/55fdc514/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash ce9b3268e83e864464ee0b1c1bcbd395
aec0d122b7a1674fd2c903e350d7c1e345bdda9a
eccc42a16e7cb2c976a2f247265ef435954d636410182b6e8d6443457252d0e6
GET /s/player/55fdc514/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/wIio4p3RmfY?feature=oembed
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 50095
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 14:56:31 GMT
expires: Thu, 05 Oct 2023 14:56:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 05 Oct 2022 00:20:53 GMT
content-type: text/css
age: 84509
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/55fdc514/www-embed-player.vflset/www-embed-player.js
200 OK 97 kB URL HTTP/2 www.youtube.com/s/player/55fdc514/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (572)
Hash 25913148e87059714551dcf4917e9cda
77186ee8b563a941961829ca4df183e6c0b63660
2c1f6b675637c3df7fce30c177b7a16047d026aca38b4f2e562b8328d775acf0
GET /s/player/55fdc514/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/wIio4p3RmfY?feature=oembed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97396
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 14:56:31 GMT
expires: Thu, 05 Oct 2023 14:56:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 05 Oct 2022 00:20:53 GMT
content-type: text/javascript
age: 84509
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Oct 2022 12:31:58 GMT
expires: Sun, 01 Oct 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 438782
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/55fdc514/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/55fdc514/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/55fdc514/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/wIio4p3RmfY?feature=oembed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 14:56:31 GMT
expires: Thu, 05 Oct 2023 14:56:31 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 05 Oct 2022 00:20:53 GMT
content-type: text/javascript
age: 84509
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 30 Sep 2022 00:48:31 GMT
expires: Sat, 30 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 567389
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2eeefefea40db1bc8acc8e72210342bf
a01bb9bda55d727fc56dee1a7746be732e31af70
f4e1decc0c157041a06f4aec2d66d94c245f0981c971afbd6416615a897e542d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4E1DECC0C157041A06F4AEC2D66D94C245F0981C971AFBD6416615A897E542D"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17025
Expires: Thu, 06 Oct 2022 19:08:45 GMT
Date: Thu, 06 Oct 2022 14:25:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2eeefefea40db1bc8acc8e72210342bf
a01bb9bda55d727fc56dee1a7746be732e31af70
f4e1decc0c157041a06f4aec2d66d94c245f0981c971afbd6416615a897e542d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4E1DECC0C157041A06F4AEC2D66D94C245F0981C971AFBD6416615A897E542D"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17025
Expires: Thu, 06 Oct 2022 19:08:45 GMT
Date: Thu, 06 Oct 2022 14:25:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2eeefefea40db1bc8acc8e72210342bf
a01bb9bda55d727fc56dee1a7746be732e31af70
f4e1decc0c157041a06f4aec2d66d94c245f0981c971afbd6416615a897e542d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4E1DECC0C157041A06F4AEC2D66D94C245F0981C971AFBD6416615A897E542D"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17025
Expires: Thu, 06 Oct 2022 19:08:45 GMT
Date: Thu, 06 Oct 2022 14:25:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Thu, 06 Oct 2022 13:29:41 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 06 Oct 2022 14:04:21 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Y79WdCf8x11_MpVJRDAHM-B0nIeWunqsjWY-NdhgE2BZAe2614R1SA==
Age: 3319
fertilizerfruitful.com/7b382c20982b7697ef9f6703aa1c77ba/invoke.js
200 OK 11 kB URL HTTP/1.1 fertilizerfruitful.com/7b382c20982b7697ef9f6703aa1c77ba/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash 6767ba08139f9e6af8e40ee6f779f52b
72480a0adc6848f5bd4055ff0792452835850518
63520dac6bb22e55cd077b21375006f82ae1724c2d3d280e96b0d0b3fb198ac6
Analyzer Verdict Alert quad9 Sinkholed
GET /7b382c20982b7697ef9f6703aa1c77ba/invoke.js HTTP/1.1
Host: fertilizerfruitful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 06 Oct 2022 14:25:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f16eb114ce9e16696de19a7f91de055d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fertilizerfruitful.com/0f/65/7e/0f657ed4f7d7a84b80fbc385320472c7.js
200 OK 13 kB URL HTTP/1.1 fertilizerfruitful.com/0f/65/7e/0f657ed4f7d7a84b80fbc385320472c7.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37139), with no line terminators
Hash f82626958f0f405bbf6031632d002402
fbaccf8302bfbaf7fa3c4cd446e131fa113adec3
ff177d8380e517545bd9af6b66522cc5986775a06117f94888063d7a7005c06f
Analyzer Verdict Alert quad9 Sinkholed
GET /0f/65/7e/0f657ed4f7d7a84b80fbc385320472c7.js HTTP/1.1
Host: fertilizerfruitful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 06 Oct 2022 14:25:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7206d001451d1e5de022553d32f912c6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fertilizerfruitful.com/227afe07890d0b0183c597a9d7109a59/invoke.js
200 OK 9.3 kB URL HTTP/1.1 fertilizerfruitful.com/227afe07890d0b0183c597a9d7109a59/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25102), with no line terminators
Hash 2bdebeef36f64268e54ae350826889e5
a491914d0f7468aec6619197d6ed895b650336e6
de8209e00d3e77cdceee913955008db7a1a0dd71d9180c59fd7cd7967ccefc75
Analyzer Verdict Alert quad9 Sinkholed
GET /227afe07890d0b0183c597a9d7109a59/invoke.js HTTP/1.1
Host: fertilizerfruitful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 06 Oct 2022 14:25:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8c5331d2376c564c7466592a979593fd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pixel.wp.com/g.gif?v=ext&j=1%3A11.3.2&blog=206692891&post=811976&tz=3&srv=first-law-comic.com&host=first-law-comic.com&ref=&fcp=974&rand=0.7575585112959901
200 OK 50 B URL HTTP/2 pixel.wp.com/g.gif?v=ext&j=1%3A11.3.2&blog=206692891&post=811976&tz=3&srv=first-law-comic.com&host=first-law-comic.com&ref=&fcp=974&rand=0.7575585112959901
IP
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&j=1%3A11.3.2&blog=206692891&post=811976&tz=3&srv=first-law-comic.com&host=first-law-comic.com&ref=&fcp=974&rand=0.7575585112959901 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 14:25:00 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 424 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash c73cf403d6e11ca809bf1007ad736d8a
250e52464e43cdfcc3cb4e2a65d4f6c91138c5e5
407bf9ba6f986bbddd3c96a21d6dc8b7bf01574ae62a187a8a2311f6c50b31b2
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Qo3K87Rfw8DsPUnG7+5mKA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xcXwsydQAy2STTUZMZeY8kP9t9k=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0487695e0218f07012260b1c4679cfb2
2ef42a2e4d45ec28d1811f8f435e8357054601c8
094e6e226db6fe1a0739438731be603ebeca76abe32254cc54b23bd2e7589efb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 14:25:00 GMT
Last-Modified: Thu, 06 Oct 2022 13:04:26 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gPLHjYCncKpl6ZGaSAOVvMuSHgqwRJVxLiiTbcS0HPNUBPuYegteMg==
Age: 4834
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0487695e0218f07012260b1c4679cfb2
2ef42a2e4d45ec28d1811f8f435e8357054601c8
094e6e226db6fe1a0739438731be603ebeca76abe32254cc54b23bd2e7589efb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 14:25:00 GMT
Last-Modified: Thu, 06 Oct 2022 13:24:40 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _nbPRn7q8cyZDH8dULK_sgDCVN7Ha7a3JVk1weqZhsx6E6S8LrzN5A==
Age: 3620
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash c0c92cc4fd6f09922d40e2687d85b3b7
c218cbbe499a9ccffd2d19515dc58435de085e0f
d2aed36669c6deca9b37256a0cc8b5e2407580facf33ed617f2004c3bfac4f77
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:00 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://first-law-comic.com
access-control-allow-credentials: true
set-cookie: uid_id2=05fe7f10-34ec-49fb-8838-0ef5af3ccbbb:3:1; expires=Sun, 03 Oct 2032 14:25:00 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash b3ed59fecae23768ca7c1b797137b0f1
388f93a9bcc5052df825699221fb5f47e2fc8fa3
f621d79e822af6a0bf8fb7887c4c69234ab14a5069edc6ff8bdbe1313aacb438
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:00 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://first-law-comic.com
access-control-allow-credentials: true
set-cookie: uid_id2=bd065b1e-dd95-43a2-81e8-6f9b6ec9d33b:3:1; expires=Sun, 03 Oct 2032 14:25:00 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0487695e0218f07012260b1c4679cfb2
2ef42a2e4d45ec28d1811f8f435e8357054601c8
094e6e226db6fe1a0739438731be603ebeca76abe32254cc54b23bd2e7589efb
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 06 Oct 2022 14:25:00 GMT
Last-Modified: Thu, 06 Oct 2022 13:23:25 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Wuyqd19gYvRdSE63mz9O_Mzha1FjYdGHG83njdr358VHeCgToHX2LQ==
Age: 3695
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 4d73575dc11d7642fce814858b352d38
90714fd05fd24a7875646cee14e2541dc6a8c2e4
747cc75fd07aa638db93770bf44beb27122c7ea362212ef31a0894e091503842
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:01 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://first-law-comic.com
access-control-allow-credentials: true
set-cookie: uid_id2=2d404f95-3fac-4654-8562-aa3b33474785:1:1; expires=Sun, 03 Oct 2032 14:25:01 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f24f49dce99bf22d6f1834c2f702f1f4
5c683d0f6be8cd1a60d95a0cb892007f4363005a
3b3e804ba36f52b1aaad872cd62a8b1f67d59a41c62a68c96d13605103329ff1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eac86f868b3967f1946c7f5fc712b25f
e2ae8eb09715a0af0791c085eb35bf66e0548e30
bceb14e7a478c0e34a0f1d8286eb954566c62051e996bc36189de922a76a6e06
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/55fdc514/player_ias.vflset/en_US/base.js
200 OK 503 B URL HTTP/2 www.youtube.com/s/player/55fdc514/player_ias.vflset/en_US/base.js
IP
Hash ea3456290f983b23277658b1e4c3f171
a112c76dc27dde3a9695c5e3ccfe284d6471193d
ee8bade09eb63eb3ee0b11b5e3ef2883d292a9c96f86e37d5d120dcbc12140df
GET /s/player/55fdc514/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/wIio4p3RmfY?feature=oembed
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 592045
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 15:04:49 GMT
expires: Thu, 05 Oct 2023 15:04:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 05 Oct 2022 00:20:53 GMT
content-type: text/javascript
age: 84011
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 06 Oct 2022 14:12:37 GMT
expires: Thu, 06 Oct 2022 14:27:37 GMT
cache-control: public, max-age=900
age: 744
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Thu, 06 Oct 2022 14:25:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cda9919b2970e3720fec6953dd71ea78
49b86f05a3cc6eba4ac3cd5e70d1987e5b2e5878
d5d13a306ae21604d21737777b0f3d4e9107a3285d3630919de6a1d7d349fbd3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D5D13A306AE21604D21737777B0F3D4E9107A3285D3630919DE6A1D7D349FBD3"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11461
Expires: Thu, 06 Oct 2022 17:36:02 GMT
Date: Thu, 06 Oct 2022 14:25:01 GMT
Connection: keep-alive
static.addtoany.com/menu/page.js
200 OK 1.9 kB URL HTTP/2 static.addtoany.com/menu/page.js
IP
File type ASCII text, with very long lines (2983), with no line terminators
Hash a81804f846b5024e274b1b906dcfa0fd
0977499874835f8b5bb6730e835a724c125be473
351e80af453b043b245d64a0a8db7f096015b1511dca5a48c7f658d9f4ec2168
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:00 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
age: 141444
etag: W/"ba7-5e7bb5238fa5f"
last-modified: Sat, 03 Sep 2022 00:56:47 GMT
vary: Accept-Encoding
via: e4s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 755f10571a2195de-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eac86f868b3967f1946c7f5fc712b25f
e2ae8eb09715a0af0791c085eb35bf66e0548e30
bceb14e7a478c0e34a0f1d8286eb954566c62051e996bc36189de922a76a6e06
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 06 Oct 2022 14:25:01 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash a571807c3bf3149179ee544ddd29c3b4
4944fcb5d79131a85250aa550c97325223b7083a
ffb27c5253b1da81b3867cad467edf270067cceae9c6a304a1510542abf1dac1
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 06 Oct 2022 14:25:01 GMT
server: ESF
cache-control: private
content-length: 30858
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 40a4de06678d96242b71d5318f2fd4ef
546a7d1d92df81916f14155943427b5453ae3924
aed9af25ae57c181702a137d48cb00f5b30297180161451de3b628359dc9ec6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 130ee302a2d581b152c8beccdc64866e
41fba8278d61fd6638376868fbe50c752f858b44
5345486b353cd67707512700d28f5937d9ad53f23b590e82cb624f1e509c1943
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
first-law-comic.com/what-are-professional-ethics-and-values/
200 OK 23 kB URL HTTP/2 first-law-comic.com/what-are-professional-ethics-and-values/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047)
Hash 2ddf52e5c2766936c02848923986a10a
59b3af69adbecd22ca378c12d0cab30c458c61cb
12ef655ff0c73dfc7cec2c57630cf395269e64b2863d618f3e7c51f319c5aa25
GET /what-are-professional-ethics-and-values/ HTTP/1.1
Host: first-law-comic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:24:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Cookie
cache-control: max-age=3, must-revalidate
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e87yPBY%2B6Rs6icRfR89bfZTaZ6YQQJ1nPkN1yEmIby4W85uAZSRlulnIOZpxt7%2B52MZsDV3TrHChN0E4IHyQSg1v8TswJ5O%2FEwjn9yLq1XFA%2Bi%2BcjphnvBYr41ynhknnRnjRWL1E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755f10548e54b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
peeredgerman.com/watch.73324979590.js?key=7b382c20982b7697ef9f6703aa1c77ba&kw=%5B%22what%22%2C%22are%22%2C%22professional%22%2C%22ethics%22%2C%22and%22%2C%22values%22%2C%22%E2%80%93%22%2C%22firstlawcomic%22%5D&refer=https%3A%2F%2Ffirst-law-comic.com%2Fwhat-are-professional-ethics-and-values%2F&tz=0&dev=r&res=12.31&uuid=05fe7f10-34ec-49fb-8838-0ef5af3ccbbb%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 peeredgerman.com/watch.73324979590.js?key=7b382c20982b7697ef9f6703aa1c77ba&kw=%5B%22what%22%2C%22are%22%2C%22professional%22%2C%22ethics%22%2C%22and%22%2C%22values%22%2C%22%E2%80%93%22%2C%22firstlawcomic%22%5D&refer=https%3A%2F%2Ffirst-law-comic.com%2Fwhat-are-professional-ethics-and-values%2F&tz=0&dev=r&res=12.31&uuid=05fe7f10-34ec-49fb-8838-0ef5af3ccbbb%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.73324979590.js?key=7b382c20982b7697ef9f6703aa1c77ba&kw=%5B%22what%22%2C%22are%22%2C%22professional%22%2C%22ethics%22%2C%22and%22%2C%22values%22%2C%22%E2%80%93%22%2C%22firstlawcomic%22%5D&refer=https%3A%2F%2Ffirst-law-comic.com%2Fwhat-are-professional-ethics-and-values%2F&tz=0&dev=r&res=12.31&uuid=05fe7f10-34ec-49fb-8838-0ef5af3ccbbb%3A3%3A1 HTTP/1.1
Host: peeredgerman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 06 Oct 2022 14:25:01 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://first-law-comic.com
Access-Control-Allow-Origin: https://first-law-comic.com
Access-Control-Allow-Credentials: true
Location: https://peeredgerman.com/watch.73324979590.js?key=7b382c20982b7697ef9f6703aa1c77ba&kw=%5B%22what%22%2C%22are%22%2C%22professional%22%2C%22ethics%22%2C%22and%22%2C%22values%22%2C%22%E2%80%93%22%2C%22firstlawcomic%22%5D&refer=https%3A%2F%2Ffirst-law-comic.com%2Fwhat-are-professional-ethics-and-values%2F&tz=0&dev=r&res=12.31&uuid=05fe7f10-34ec-49fb-8838-0ef5af3ccbbb%3A3%3A1&shu=2484f11636490d32e378bf613e08d0ed819036827de6a15006fbd173e84687c14c3ecd937192e35439ec8413a46edd6c4099415146a9489ede864d33416d54a8fd84147df3b57d661aec264c1ec01518382844e0f13f19d36741ad8ada486c&pst=1665066361&rmtc=t
Set-Cookie: u_pl=17206834; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.VaHX5dqFQF5L3ObqiprxhseYR069S5ZRXVeVopE0JPo; expires=Thu, 06 Oct 2022 14:26:01 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c3874fa0156ce4eab953274efe6baa87
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 39a707000f339fcdc7ac3ee2907e3a8a
eb11a5d140624aefd527e63c79c074d82ad7ce93
b50981fb27d8c9842202999d5d2c931ac96bbe22a5f9eb6bc6ef417bf73fd06a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B50981FB27D8C9842202999D5D2C931AC96BBE22A5F9EB6BC6EF417BF73FD06A"
Last-Modified: Wed, 05 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13220
Expires: Thu, 06 Oct 2022 18:05:21 GMT
Date: Thu, 06 Oct 2022 14:25:01 GMT
Connection: keep-alive
i.ytimg.com/vi_webp/wIio4p3RmfY/maxresdefault.webp
200 OK 57 kB URL HTTP/2 i.ytimg.com/vi_webp/wIio4p3RmfY/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a87a11d4285efe5f498aa0c3cde1ffd9
17639a7047bc9478f0de6ac6c47d1803a55aab6e
de472432eaf900ab2f643395806941e236d88fb181d6afe8155759d22486a474
GET /vi_webp/wIio4p3RmfY/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 56748
date: Thu, 06 Oct 2022 14:25:01 GMT
expires: Thu, 06 Oct 2022 16:25:01 GMT
cache-control: public, max-age=7200
etag: "1654078872"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 58ac1b886710ef98c8b70a37dcc2b855
ed76f180385d65285525c3426857e1880e2817c8
7fd9a97b66875a6c87413705781a8800ab15e8faaeb821364914ca2d0dd9c890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 130ee302a2d581b152c8beccdc64866e
41fba8278d61fd6638376868fbe50c752f858b44
5345486b353cd67707512700d28f5937d9ad53f23b590e82cb624f1e509c1943
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/_5KkE2d8P46xk7XI_nTW9-_Prd97P9aV5v4QawtNw26KysqkhXwOhbU38G2ZJesV4B-LIvO3bw=s68-c-k-c0x00ffffff-no-rj
200 OK 3.9 kB URL HTTP/2 yt3.ggpht.com/_5KkE2d8P46xk7XI_nTW9-_Prd97P9aV5v4QawtNw26KysqkhXwOhbU38G2ZJesV4B-LIvO3bw=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 96a5f47eac540b42d0f0179a77ec44df
1cc80b7c926b5b63b0bf92899503e9efef1f8225
c25a2248c25f9f4c8ad0c69dffae913c69cd1776c40c71a6567b188a695aec3d
GET /_5KkE2d8P46xk7XI_nTW9-_Prd97P9aV5v4QawtNw26KysqkhXwOhbU38G2ZJesV4B-LIvO3bw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3877
x-xss-protection: 0
date: Thu, 06 Oct 2022 14:25:01 GMT
expires: Sun, 02 Oct 2022 15:04:55 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 58ac1b886710ef98c8b70a37dcc2b855
ed76f180385d65285525c3426857e1880e2817c8
7fd9a97b66875a6c87413705781a8800ab15e8faaeb821364914ca2d0dd9c890
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
peeredgerman.com/watch.73324979590.js?key=7b382c20982b7697ef9f6703aa1c77ba&kw=%5B%22what%22%2C%22are%22%2C%22professional%22%2C%22ethics%22%2C%22and%22%2C%22values%22%2C%22%E2%80%93%22%2C%22firstlawcomic%22%5D&refer=https%3A%2F%2Ffirst-law-comic.com%2Fwhat-are-professional-ethics-and-values%2F&tz=0&dev=r&res=12.31&uuid=05fe7f10-34ec-49fb-8838-0ef5af3ccbbb%3A3%3A1&shu=2484f11636490d32e378bf613e08d0ed819036827de6a15006fbd173e84687c14c3ecd937192e35439ec8413a46edd6c4099415146a9489ede864d33416d54a8fd84147df3b57d661aec264c1ec01518382844e0f13f19d36741ad8ada486c&pst=1665066361&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 peeredgerman.com/watch.73324979590.js?key=7b382c20982b7697ef9f6703aa1c77ba&kw=%5B%22what%22%2C%22are%22%2C%22professional%22%2C%22ethics%22%2C%22and%22%2C%22values%22%2C%22%E2%80%93%22%2C%22firstlawcomic%22%5D&refer=https%3A%2F%2Ffirst-law-comic.com%2Fwhat-are-professional-ethics-and-values%2F&tz=0&dev=r&res=12.31&uuid=05fe7f10-34ec-49fb-8838-0ef5af3ccbbb%3A3%3A1&shu=2484f11636490d32e378bf613e08d0ed819036827de6a15006fbd173e84687c14c3ecd937192e35439ec8413a46edd6c4099415146a9489ede864d33416d54a8fd84147df3b57d661aec264c1ec01518382844e0f13f19d36741ad8ada486c&pst=1665066361&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2444)
Hash 0d9f5d8c4966c97741b37ee5f3c1b8c2
fc61a57e8d69a75954cbd97cd1892f8199ccd99e
891c3f2188d34a6f3db4874f3bbe3abf290535392918799c42bb0685ac25de02
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.73324979590.js?key=7b382c20982b7697ef9f6703aa1c77ba&kw=%5B%22what%22%2C%22are%22%2C%22professional%22%2C%22ethics%22%2C%22and%22%2C%22values%22%2C%22%E2%80%93%22%2C%22firstlawcomic%22%5D&refer=https%3A%2F%2Ffirst-law-comic.com%2Fwhat-are-professional-ethics-and-values%2F&tz=0&dev=r&res=12.31&uuid=05fe7f10-34ec-49fb-8838-0ef5af3ccbbb%3A3%3A1&shu=2484f11636490d32e378bf613e08d0ed819036827de6a15006fbd173e84687c14c3ecd937192e35439ec8413a46edd6c4099415146a9489ede864d33416d54a8fd84147df3b57d661aec264c1ec01518382844e0f13f19d36741ad8ada486c&pst=1665066361&rmtc=t HTTP/1.1
Host: peeredgerman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Referer: https://first-law-comic.com/
Connection: keep-alive
Cookie: u_pl=17206834; ain=eyJhbGciOiJIUzI1NiJ9.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.VaHX5dqFQF5L3ObqiprxhseYR069S5ZRXVeVopE0JPo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 06 Oct 2022 14:25:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://first-law-comic.com
Access-Control-Allow-Origin: https://first-law-comic.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=05fe7f10-34ec-49fb-8838-0ef5af3ccbbb:3:1; expires=Thu, 13 Oct 2022 14:25:01 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
uncs=1; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
pdhtkv23=true; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
uncs23=1; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2ca9c0218d043ba6b51eb44356d7b8f9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
familiarkindlyshuffle.com/ntv.json?key=227afe07890d0b0183c597a9d7109a59&vstc=4
200 OK 17 kB URL HTTP/1.1 familiarkindlyshuffle.com/ntv.json?key=227afe07890d0b0183c597a9d7109a59&vstc=4
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (16687), with no line terminators
Hash 65d7fd71729307bcd722ee2c242da7b5
ee44a9da5f7ce4a24529cebfe78b301554046f9c
c103a2384fc6cc12ec50ec943e38c12fdd5a5762fb6587c3dc72be6376bab872
GET /ntv.json?key=227afe07890d0b0183c597a9d7109a59&vstc=4 HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:01 GMT
Content-Type: application/json
Content-Length: 16687
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://first-law-comic.com
Access-Control-Allow-Origin: https://first-law-comic.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17266176; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
uncs=1; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
pdhtkv49=true; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
uncs49=1; expires=Fri, 07 Oct 2022 14:25:01 GMT; secure; SameSite=None
nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]; expires=Thu, 06 Oct 2022 14:25:06 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6ac9f684cfe943fe1592062507b42aee
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9784
Expires: Thu, 06 Oct 2022 17:08:06 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9784
Expires: Thu, 06 Oct 2022 17:08:06 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 3.1 kB IP
ASN #20940 Akamai International B.V.
Hash 40e58ceddf3e953bfaccaa807a034111
8951e80ee6956543d642d1e4fa205210280ffa40
16107c7cac7edd81e4ccd982e8628a9301d944e73e638fb29d78ba50664736ac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9784
Expires: Thu, 06 Oct 2022 17:08:06 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b5958f828ccc16a41b22d9ae812bccfc
f350f295dd70152712162d4be5b3b5f0d12cde57
230d7d8e570e433d18ec53b6ca114e2a206e8c265c0c66d73388c49db5c91c64
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6646df0-31a7-4c5a-8148-5fe9e20f3baf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9338
x-amzn-requestid: 4ca2eb3c-eba4-43a4-b79a-89546da3d660
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQBfG7soAMF9cw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa09-1b5bd53052718f620b920a00;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:41:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 6pHftE0vUMqrH2NR_7DzrWlnD0yal7BkAfee7UeVG7DKZNEAYRa9HQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:03:23 GMT
age: 58899
etag: "f350f295dd70152712162d4be5b3b5f0d12cde57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e238ccaa3b9fa88476a8514855e8232f
447cbf348ef10d0136a1811e843c46937defbba1
43dce3c1eb388dfaddca4176acb6eb32f76fc4c03fca18e7a315c9ddb43d2b02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd38ec9d6-fb69-4c6e-aae2-136fd254ae50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7270
x-amzn-requestid: e5d0bb7a-b9d5-49b1-b51c-8db019da641f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQOGEQloAMFjgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfa5a-519d91fb0b83920960da479d;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:42:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: l1HGT5ycH36vVojsOPFptRSU1YJFvLbBsgiWJqzRlRIGgm2o5vf6jg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:58:56 GMT
etag: "447cbf348ef10d0136a1811e843c46937defbba1"
content-type: image/jpeg
age: 59166
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a508ac9cd743bec987b2a24454418265
8c7ecefe6908387e2128dc849a6ba857991ba0ab
afb2c2b51f2ce445ada599068901551beee594b15c152ed7551ab7a8835dde6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F913c841b-40a5-4fa4-bc55-0e9d1369640e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10809
x-amzn-requestid: db4d1d2a-05b8-403e-a7ca-8b8a6a0a4087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjQb-HrTIAMFtNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfab2-74f184406a48e42c0ecc4ec9;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: tv80OXQUu13gDuuFESnEnXMuFdNBmGc1y592euL7QnfZW5PwJym9-g==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:53:39 GMT
etag: "8c7ecefe6908387e2128dc849a6ba857991ba0ab"
content-type: image/jpeg
age: 59483
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9784
Expires: Thu, 06 Oct 2022 17:08:06 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2277f8f2d93b4bc3b05d348343177892
531d9e4ec9078cd2d7376a19fcb287084af36c82
62907648de4a2ed390232a71ab7dce49f1e9c3363cde6a2f30ecae10ab67f93a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11080
x-amzn-requestid: 8fa4d19d-87a5-46c5-96c5-4aec793daad9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO7xE5eoAMFQLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df84b-5c422c7a168c014f57559037;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:34:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: LySueW1si-yWLwecUILV1s57IEV2FdcQ9_pH1Aoe4AYISi7QXXfd3A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:39:28 GMT
age: 60334
etag: "531d9e4ec9078cd2d7376a19fcb287084af36c82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9784
Expires: Thu, 06 Oct 2022 17:08:06 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70ea26af79226e9ff06d6198e2c019dc
ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57
f9393e7b8cbaedc8e1ef87fd89c617cf102f58813d84d866ff68e3124f94d44c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9044
x-amzn-requestid: 127bce04-9f75-4bb1-bbe7-33bf1694d96c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZdZPmHG5oAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ba263-3896085b3b73ff5403237206;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 03:02:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E4yZTPRLFdK717YfwjOIFOJDi0wYpyA736dQELeM5iPLvGDXBosEWg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 05:04:17 GMT
age: 33645
etag: "ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5b87135-538c-4c9f-b146-1da5b13ce157.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5b87135-538c-4c9f-b146-1da5b13ce157.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a7bcc50ecfeeca47de68cb437e966f29
e98c870fd29b56fa4c3847008bedc0f01f222744
47a82bb40ead4346323b68c886cb88528cb2162666e9549b2ab215b86a499985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5b87135-538c-4c9f-b146-1da5b13ce157.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8360
x-amzn-requestid: c1f21bfa-3ceb-4661-97b8-0d7475f0e911
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKLlLG0joAMFQqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f2ed-43993b1377e9fbaf4e9443d2;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:08:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kyp8p-Jm92bA3VDbsKDiD_JnS2eekJFUkMjYXquZ1D15WthqXoSlsA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:57:01 GMT
age: 59281
etag: "e98c870fd29b56fa4c3847008bedc0f01f222744"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
familiarkindlyshuffle.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3syPn%2BhBlL0Ie2gERcGddPdMpmdcdHGNkWDcrLuKepLqqp5Jmequpqr%2FTHKKLsgePIywF8VD55tkg2tYFM8GmSyIBIT0LeLm5sGzsHiUHoOjD%2Fq99%2FX3Hb73Xn2ynZ0SBxk9WXxTbQop6fxC07Gfe891L9krIs6G9rDb%2BaDTvmTr%2FMVep%2Bk8b78esnU17zmu47iOay8JHfbVcL4mIZL9ntvsOc2213QX2hjq%2F2KTWTDUAs9PyZMQvGrct85DsAni6JvF0KynKnnhtSiTNFUaOd97J16PVREjmrV9baEf752poczx0gFUvDu1C5X%2FIwxERawfDxDEe2cmEeQ7U5%2BBRBgj4I%2BhyCcI5QSCTsDUTQh%2BTADGcXUVcXTnqtIF3fibpTVbkcbDPyCKijQenEcc3bsixdC%2BoWSWChUbDPslxHACMZggyQ6Rbp6DKA7B0o8h%2BM9k%2FuEK4mhn1UgFwcvp7EJMIPoTyHAEaixk9ScsZH0LWWIh4ic2c13XdzijTrfHWIv7YdDhjkv9vktdp9NFxmp7I6TJCEyOwPQWEr2FdfHZMfkSOvsBZq2E4RZMWhHrrS3kvEQREhSGoKAEhSAoUoIiL3e5NJ4p73BpssA9q95ZbZVjlQ626a5KB2FMtpNT8kS9Guv%2FOcF6eGJ7nk%2F7oeN3ew53AsfttthCz6c97rtOjy70YEQJYc5Np90UFbnQ%2FAWJqMj%2Fbr%2BPgB7CyEMwMQeauaDF2Pcc0LVxu%2BtgM%2F6uL7RJL0paXGQqEqzJVASuSiRpA%2BmGtS1PyVPTS9nPfIqQHV2%2Be2H%2FEffZ38F0iUSX%2BFDcJxjIW%2BPrqiA711VhyLerSSoisUnrK95IaRrO3X0j3CiU5suLZvTVK6wm6nb%2F7dCkKzTmIh4Y8vUVwXmol5RmIfl%2B2bwbBtcys3Yl03GWrFx7dWk5SnRojFDxBFQcr%2F4JJirS%2BOhg%2Bjwfr%2B5B6Al0ViLKjshZQKhDsGQLJpm5N2oOWs40QWKhyMqx9oLZTykIZDjDNChh%2FoWDWb9tbmGgPdD0JuKoRK5L5LIElSOY7NFxmuijyz99XscXCGRjHEjd2Amklrenq63I03MP6nRap19hxIntt1oO7fQWXN%2BnoR%2B0vW6%2F43JKvXbH63RoC6mp2Mu%2FvfQXAAAA%2F%2F8BAAD%2F%2F%2B6y7sN4BAAA
200 OK 7 B URL HTTP/1.1 familiarkindlyshuffle.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3syPn%2BhBlL0Ie2gERcGddPdMpmdcdHGNkWDcrLuKepLqqp5Jmequpqr%2FTHKKLsgePIywF8VD55tkg2tYFM8GmSyIBIT0LeLm5sGzsHiUHoOjD%2Fq99%2FX3Hb73Xn2ynZ0SBxk9WXxTbQop6fxC07Gfe891L9krIs6G9rDb%2BaDTvmTr%2FMVep%2Bk8b78esnU17zmu47iOay8JHfbVcL4mIZL9ntvsOc2213QX2hjq%2F2KTWTDUAs9PyZMQvGrct85DsAni6JvF0KynKnnhtSiTNFUaOd97J16PVREjmrV9baEf752poczx0gFUvDu1C5X%2FIwxERawfDxDEe2cmEeQ7U5%2BBRBgj4I%2BhyCcI5QSCTsDUTQh%2BTADGcXUVcXTnqtIF3fibpTVbkcbDPyCKijQenEcc3bsixdC%2BoWSWChUbDPslxHACMZggyQ6Rbp6DKA7B0o8h%2BM9k%2FuEK4mhn1UgFwcvp7EJMIPoTyHAEaixk9ScsZH0LWWIh4ic2c13XdzijTrfHWIv7YdDhjkv9vktdp9NFxmp7I6TJCEyOwPQWEr2FdfHZMfkSOvsBZq2E4RZMWhHrrS3kvEQREhSGoKAEhSAoUoIiL3e5NJ4p73BpssA9q95ZbZVjlQ626a5KB2FMtpNT8kS9Guv%2FOcF6eGJ7nk%2F7oeN3ew53AsfttthCz6c97rtOjy70YEQJYc5Np90UFbnQ%2FAWJqMj%2Fbr%2BPgB7CyEMwMQeauaDF2Pcc0LVxu%2BtgM%2F6uL7RJL0paXGQqEqzJVASuSiRpA%2BmGtS1PyVPTS9nPfIqQHV2%2Be2H%2FEffZ38F0iUSX%2BFDcJxjIW%2BPrqiA711VhyLerSSoisUnrK95IaRrO3X0j3CiU5suLZvTVK6wm6nb%2F7dCkKzTmIh4Y8vUVwXmol5RmIfl%2B2bwbBtcys3Yl03GWrFx7dWk5SnRojFDxBFQcr%2F4JJirS%2BOhg%2Bjwfr%2B5B6Al0ViLKjshZQKhDsGQLJpm5N2oOWs40QWKhyMqx9oLZTykIZDjDNChh%2FoWDWb9tbmGgPdD0JuKoRK5L5LIElSOY7NFxmuijyz99XscXCGRjHEjd2Amklrenq63I03MP6nRap19hxIntt1oO7fQWXN%2BnoR%2B0vW6%2F43JKvXbH63RoC6mp2Mu%2FvfQXAAAA%2F%2F8BAAD%2F%2F%2B6y7sN4BAAA
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3syPn%2BhBlL0Ie2gERcGddPdMpmdcdHGNkWDcrLuKepLqqp5Jmequpqr%2FTHKKLsgePIywF8VD55tkg2tYFM8GmSyIBIT0LeLm5sGzsHiUHoOjD%2Fq99%2FX3Hb73Xn2ynZ0SBxk9WXxTbQop6fxC07Gfe891L9krIs6G9rDb%2BaDTvmTr%2FMVep%2Bk8b78esnU17zmu47iOay8JHfbVcL4mIZL9ntvsOc2213QX2hjq%2F2KTWTDUAs9PyZMQvGrct85DsAni6JvF0KynKnnhtSiTNFUaOd97J16PVREjmrV9baEf752poczx0gFUvDu1C5X%2FIwxERawfDxDEe2cmEeQ7U5%2BBRBgj4I%2BhyCcI5QSCTsDUTQh%2BTADGcXUVcXTnqtIF3fibpTVbkcbDPyCKijQenEcc3bsixdC%2BoWSWChUbDPslxHACMZggyQ6Rbp6DKA7B0o8h%2BM9k%2FuEK4mhn1UgFwcvp7EJMIPoTyHAEaixk9ScsZH0LWWIh4ic2c13XdzijTrfHWIv7YdDhjkv9vktdp9NFxmp7I6TJCEyOwPQWEr2FdfHZMfkSOvsBZq2E4RZMWhHrrS3kvEQREhSGoKAEhSAoUoIiL3e5NJ4p73BpssA9q95ZbZVjlQ626a5KB2FMtpNT8kS9Guv%2FOcF6eGJ7nk%2F7oeN3ew53AsfttthCz6c97rtOjy70YEQJYc5Np90UFbnQ%2FAWJqMj%2Fbr%2BPgB7CyEMwMQeauaDF2Pcc0LVxu%2BtgM%2F6uL7RJL0paXGQqEqzJVASuSiRpA%2BmGtS1PyVPTS9nPfIqQHV2%2Be2H%2FEffZ38F0iUSX%2BFDcJxjIW%2BPrqiA711VhyLerSSoisUnrK95IaRrO3X0j3CiU5suLZvTVK6wm6nb%2F7dCkKzTmIh4Y8vUVwXmol5RmIfl%2B2bwbBtcys3Yl03GWrFx7dWk5SnRojFDxBFQcr%2F4JJirS%2BOhg%2Bjwfr%2B5B6Al0ViLKjshZQKhDsGQLJpm5N2oOWs40QWKhyMqx9oLZTykIZDjDNChh%2FoWDWb9tbmGgPdD0JuKoRK5L5LIElSOY7NFxmuijyz99XscXCGRjHEjd2Amklrenq63I03MP6nRap19hxIntt1oO7fQWXN%2BnoR%2B0vW6%2F43JKvXbH63RoC6mp2Mu%2FvfQXAAAA%2F%2F8BAAD%2F%2F%2B6y7sN4BAAA HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17266176; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: eff4b07b1bb8c30e1157c4f1d37c18bd
Strict-Transport-Security: max-age=0; includeSubdomains
intimidatekerneljames.com/sbar.json?key=0f657ed4f7d7a84b80fbc385320472c7&uuid=bd065b1e-dd95-43a2-81e8-6f9b6ec9d33b%3A3%3A1
200 OK 4.2 kB URL HTTP/1.1 intimidatekerneljames.com/sbar.json?key=0f657ed4f7d7a84b80fbc385320472c7&uuid=bd065b1e-dd95-43a2-81e8-6f9b6ec9d33b%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (5735), with no line terminators
Hash 7f1553ac7b831f0de1ad3bf240aa0883
34ee432b108500e3f3db68726443fa3b4a79c301
36118fb4bf33fa6b945df4b45f9489f9e9f171721c79ab227864f23a55713fc7
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=0f657ed4f7d7a84b80fbc385320472c7&uuid=bd065b1e-dd95-43a2-81e8-6f9b6ec9d33b%3A3%3A1 HTTP/1.1
Host: intimidatekerneljames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://first-law-comic.com
Access-Control-Allow-Origin: https://first-law-comic.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17214611; expires=Fri, 07 Oct 2022 14:25:02 GMT; secure; SameSite=None
uid_id2=bd065b1e-dd95-43a2-81e8-6f9b6ec9d33b:3:1; expires=Thu, 13 Oct 2022 14:25:02 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 07 Oct 2022 14:25:02 GMT; secure; SameSite=None
uncs=1; expires=Fri, 07 Oct 2022 14:25:02 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 07 Oct 2022 14:25:02 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 07 Oct 2022 14:25:02 GMT; secure; SameSite=None
slec0f657ed4f7d7a84b80fbc385320472c7=[3396716]; expires=Thu, 06 Oct 2022 14:25:07 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: df5c6e8f4911653c4c2ae737d7e011ef
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 942e73f03b374c0adc3f69e0fa8d99c0
7e356c191072d5a8f4496b387e04ad5486762bba
a5cb8c201c57fd48e813ec365a1ad715380c6a711c19f6588728b87622b2d59f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A5CB8C201C57FD48E813EC365A1AD715380C6A711C19F6588728B87622B2D59F"
Last-Modified: Wed, 05 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9063
Expires: Thu, 06 Oct 2022 16:56:05 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 942e73f03b374c0adc3f69e0fa8d99c0
7e356c191072d5a8f4496b387e04ad5486762bba
a5cb8c201c57fd48e813ec365a1ad715380c6a711c19f6588728b87622b2d59f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A5CB8C201C57FD48E813EC365A1AD715380C6A711C19F6588728B87622B2D59F"
Last-Modified: Wed, 05 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9063
Expires: Thu, 06 Oct 2022 16:56:05 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 942e73f03b374c0adc3f69e0fa8d99c0
7e356c191072d5a8f4496b387e04ad5486762bba
a5cb8c201c57fd48e813ec365a1ad715380c6a711c19f6588728b87622b2d59f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A5CB8C201C57FD48E813EC365A1AD715380C6A711C19F6588728B87622B2D59F"
Last-Modified: Wed, 05 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9063
Expires: Thu, 06 Oct 2022 16:56:05 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg
200 OK 30 kB URL HTTP/2 cdn.cloudimagesb.com/cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash a87779ccaaa4021b0b4f33812742679a
87322480f885dc0b6463c182b7bdb3eb60ab2592
a8f8dbc930527f94496d5a9883b6034e27a673090a89b518596d6e2b656df96f
GET /cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: image/jpeg
content-length: 30127
server: nginx/1.17.6
last-modified: Tue, 10 Aug 2021 09:15:44 GMT
etag: "611243c0-75af"
expires: Sat, 08 Oct 2022 14:25:02 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash d0597a5e98092de15ca6f20d0f8454d5
e7261e87a8606fbbe8712526e5fbe9fb21417afd
93b3a37060323cd1dbf941510cb60124e6f2b302d254b8a479a398066be9b67e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5000
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 14:25:02 GMT
Last-Modified: Thu, 06 Oct 2022 13:01:42 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
cdn.cloudimagesb.com/cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg
200 OK 29 kB URL HTTP/2 cdn.cloudimagesb.com/cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 76f54f42b70d14a6d6bfe2f8b1945265
197daa3737be8968bf39ff28000663c1c17deeb2
c864fde3026e05a2cc34b4348fa4888d3ae44202179277877d082cadd9971abc
GET /cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: image/jpeg
content-length: 28852
server: nginx/1.17.6
last-modified: Tue, 10 Aug 2021 09:18:59 GMT
etag: "61124483-70b4"
expires: Sat, 08 Oct 2022 14:25:02 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
200 OK 28 kB URL HTTP/2 cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash f4fabf64be47ce667e0cfc150667b36c
234d722efa06cbedfdad9c1bb497a942997741dd
272b7875492a55c6f53a4e4704e715cc5b3cc4e5093758cbfedd95441bfe98d8
GET /cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: image/jpeg
content-length: 27606
server: nginx/1.17.6
last-modified: Tue, 10 Aug 2021 09:17:59 GMT
etag: "61124447-6bd6"
expires: Sat, 08 Oct 2022 14:25:02 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
familiarkindlyshuffle.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHRlAU3El3z2R6xkUXY4wE42bdVdSTVFf1TMpUdzVV%2FTPJKbooe%2FAwwl4UD51vkg2uQRTPBpksiASFzC3i5ubBs7B4lB4HRx%2F0e%2B%2Fr7zt87736eCc7Iw4yerr0utoSUtL5hbpjP%2FOO616yV0Wc9e1%2Bu%2FVeq3nJ1vnznVbdedZ%2BNWQbat5zXMdxHddeFjrsqv58RUIkBx233nHqTa%2FuLjTR1%2F%2FHJrNgqAWen5HHIfi4dtc6D8FGiKNvlkKzkarkuVeiTNJUaeR8%2F614I1ZFjGjWdrWFbrw%2FVUOZk%2BVDqHhvYhcq%2F1cYiDGxfjxEEO9PTSLIdyc%2BA4kwRsAfQZGPEMoRBB2BqRsQ%2FIQAjOPKGuLo9hWlC7r5D0srdkxq9%2F%2BEKMakdu884ujrRSn69nUls1So2KDfLSH6I4jeCEl2hHTrHERxBJZ%2BCMF%2FIfP3VxFHu2tGKgheTmYXYgTRHUGGA1BjIas%2BYSHrWsgSCxE%2FtZnrur7DGXXaHcYa3A%2BDFndc6ndd6jqtNjJW2RsgTQZgcgCmt5HobWyIT0%2FIF9DZDzDrJQy3YNIxsd7YRs5LFCFBYQgKSlAIgiIlKPJyj0vjmfI2lyYL3Gn1prVRDlXa26F7Ku2FMdlJzshj1WqsB3OCjfDU9jyfdkPHb3cc7gSO226whY5PO9x3nQ5d6MCIEsKcm0y7JcbkQv1XJGJMHrj1LgJ6BCOPwMQcaOaCFkPfc0DXh822g634u67QJr0oaXGRqUiwOlMRuCqRpDWkm9aOPCNPTC715Nw9hOz48p0LBw%2B5T%2F8BpkskusT74i5BT94cXlMF2b2mCkO%2BXUtSEYktWl3xekrTcO7Oa%2BFmoTRfWTKDL19iFVG1B2%2BGJl2lMRdxz5CvFgXnoV5WmoXk%2BxXzdhhczcz6YqbjLFm9%2BvLySpTo0Bih4hGoOFn7C0yMSe2Dw8nzfPTnjyD0CDorEWXHZBoQ6ggs2YZJZu6NmoOWM02QnEORlUPtBbOfUhDIcIZpUML8BwezfsfcRE97oOkNxFGJXJfIZQkqBzDZw8M00ceXf%2Fqsis8RyNowkLq2G0gtb42J%2FdQnk%2F1W6axKv8GIU9tvNBza6iy4vk9DP2h67W7L5ZR6zZbXatEGUjNmL%2F7%2Bwt8AAAD%2F%2FwEAAP%2F%2FbYHHpngEAAA%3D
200 OK 7 B URL HTTP/1.1 familiarkindlyshuffle.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHRlAU3El3z2R6xkUXY4wE42bdVdSTVFf1TMpUdzVV%2FTPJKbooe%2FAwwl4UD51vkg2uQRTPBpksiASFzC3i5ubBs7B4lB4HRx%2F0e%2B%2Fr7zt87736eCc7Iw4yerr0utoSUtL5hbpjP%2FOO616yV0Wc9e1%2Bu%2FVeq3nJ1vnznVbdedZ%2BNWQbat5zXMdxHddeFjrsqv58RUIkBx233nHqTa%2FuLjTR1%2F%2FHJrNgqAWen5HHIfi4dtc6D8FGiKNvlkKzkarkuVeiTNJUaeR8%2F614I1ZFjGjWdrWFbrw%2FVUOZk%2BVDqHhvYhcq%2F1cYiDGxfjxEEO9PTSLIdyc%2BA4kwRsAfQZGPEMoRBB2BqRsQ%2FIQAjOPKGuLo9hWlC7r5D0srdkxq9%2F%2BEKMakdu884ujrRSn69nUls1So2KDfLSH6I4jeCEl2hHTrHERxBJZ%2BCMF%2FIfP3VxFHu2tGKgheTmYXYgTRHUGGA1BjIas%2BYSHrWsgSCxE%2FtZnrur7DGXXaHcYa3A%2BDFndc6ndd6jqtNjJW2RsgTQZgcgCmt5HobWyIT0%2FIF9DZDzDrJQy3YNIxsd7YRs5LFCFBYQgKSlAIgiIlKPJyj0vjmfI2lyYL3Gn1prVRDlXa26F7Ku2FMdlJzshj1WqsB3OCjfDU9jyfdkPHb3cc7gSO226whY5PO9x3nQ5d6MCIEsKcm0y7JcbkQv1XJGJMHrj1LgJ6BCOPwMQcaOaCFkPfc0DXh822g634u67QJr0oaXGRqUiwOlMRuCqRpDWkm9aOPCNPTC715Nw9hOz48p0LBw%2B5T%2F8BpkskusT74i5BT94cXlMF2b2mCkO%2BXUtSEYktWl3xekrTcO7Oa%2BFmoTRfWTKDL19iFVG1B2%2BGJl2lMRdxz5CvFgXnoV5WmoXk%2BxXzdhhczcz6YqbjLFm9%2BvLySpTo0Bih4hGoOFn7C0yMSe2Dw8nzfPTnjyD0CDorEWXHZBoQ6ggs2YZJZu6NmoOWM02QnEORlUPtBbOfUhDIcIZpUML8BwezfsfcRE97oOkNxFGJXJfIZQkqBzDZw8M00ceXf%2Fqsis8RyNowkLq2G0gtb42J%2FdQnk%2F1W6axKv8GIU9tvNBza6iy4vk9DP2h67W7L5ZR6zZbXatEGUjNmL%2F7%2Bwt8AAAD%2F%2FwEAAP%2F%2FbYHHpngEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHRlAU3El3z2R6xkUXY4wE42bdVdSTVFf1TMpUdzVV%2FTPJKbooe%2FAwwl4UD51vkg2uQRTPBpksiASFzC3i5ubBs7B4lB4HRx%2F0e%2B%2Fr7zt87736eCc7Iw4yerr0utoSUtL5hbpjP%2FOO616yV0Wc9e1%2Bu%2FVeq3nJ1vnznVbdedZ%2BNWQbat5zXMdxHddeFjrsqv58RUIkBx233nHqTa%2FuLjTR1%2F%2FHJrNgqAWen5HHIfi4dtc6D8FGiKNvlkKzkarkuVeiTNJUaeR8%2F614I1ZFjGjWdrWFbrw%2FVUOZk%2BVDqHhvYhcq%2F1cYiDGxfjxEEO9PTSLIdyc%2BA4kwRsAfQZGPEMoRBB2BqRsQ%2FIQAjOPKGuLo9hWlC7r5D0srdkxq9%2F%2BEKMakdu884ujrRSn69nUls1So2KDfLSH6I4jeCEl2hHTrHERxBJZ%2BCMF%2FIfP3VxFHu2tGKgheTmYXYgTRHUGGA1BjIas%2BYSHrWsgSCxE%2FtZnrur7DGXXaHcYa3A%2BDFndc6ndd6jqtNjJW2RsgTQZgcgCmt5HobWyIT0%2FIF9DZDzDrJQy3YNIxsd7YRs5LFCFBYQgKSlAIgiIlKPJyj0vjmfI2lyYL3Gn1prVRDlXa26F7Ku2FMdlJzshj1WqsB3OCjfDU9jyfdkPHb3cc7gSO226whY5PO9x3nQ5d6MCIEsKcm0y7JcbkQv1XJGJMHrj1LgJ6BCOPwMQcaOaCFkPfc0DXh822g634u67QJr0oaXGRqUiwOlMRuCqRpDWkm9aOPCNPTC715Nw9hOz48p0LBw%2B5T%2F8BpkskusT74i5BT94cXlMF2b2mCkO%2BXUtSEYktWl3xekrTcO7Oa%2BFmoTRfWTKDL19iFVG1B2%2BGJl2lMRdxz5CvFgXnoV5WmoXk%2BxXzdhhczcz6YqbjLFm9%2BvLySpTo0Bih4hGoOFn7C0yMSe2Dw8nzfPTnjyD0CDorEWXHZBoQ6ggs2YZJZu6NmoOWM02QnEORlUPtBbOfUhDIcIZpUML8BwezfsfcRE97oOkNxFGJXJfIZQkqBzDZw8M00ceXf%2Fqsis8RyNowkLq2G0gtb42J%2FdQnk%2F1W6axKv8GIU9tvNBza6iy4vk9DP2h67W7L5ZR6zZbXatEGUjNmL%2F7%2Bwt8AAAD%2F%2FwEAAP%2F%2FbYHHpngEAAA%3D HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17266176; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b9af56ebeb313afad461c37fc384b2fa
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg
200 OK 23 kB URL HTTP/2 cdn.cloudimagesb.com/cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 4452445afb73fab8af9ff308eb667024
130401c47d822426e1cce9981c30d775cba1b576
923b0ac505decd181f473f1fa460f21590777993c3581723f127b032d8c45bdd
GET /cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: image/jpeg
content-length: 22987
server: nginx/1.17.6
last-modified: Tue, 10 Aug 2021 09:16:05 GMT
etag: "611243d5-59cb"
expires: Sat, 08 Oct 2022 14:25:02 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
intimidatekerneljames.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYscRRytzq4ieFJyUVTm4EHBne2Pme4ZAwnGuBLcfJAo6knrqzflVnc1Vd3Tkz0FA5LjBj166H2zSYgGiejVILOBHBaEjF5GdG%2F%2BASLk5EFmsjj6u%2Fze6%2FcOr9%2BvPtupDoiPik5PnTFbSmu62m37rVc%2BCIJjrXWVV8PWsBd%2FFHeOtezg9X7c9l9tvS35plkN%2FcD3Az9orSkrUzNcnYlQxZ1%2B0O777U7YDrodDO3%2Fuas8OOpBDA7Is1BisnzfOwrFx8izu6ek2yxN8dpbWaVpaSwG4tZ7%2BWZu6hzZAqbWQ5rfOnTDuIdr92DyG%2FO4MIN%2FjUxNiPfgHlh%2B6zAk2GB3npNpyBxMPI16MIbUYyg6BjdXocRDAnCBs%2BeQZzfPGlvTy49VOlMnZPnRX1D1hCz%2FfhR59s1JrYati0ZXpTK5wzBtoIZjqI0ximoP5dYRqHoPvPwUSvxEVh%2BtI892zzltoMT0ZSb8uMsCuSJEv7vSiWi40gtkbyVO%2ByyWvC%2BiiM0LUmoMlY6h5TaoW0LlPFTKQ5V6qAoPmZi2eBAEiS849Xt9ziORSBYLP6BJGtDAj3uo%2BOwftlEW2%2BB6G9xeQWGvYFNdf0i%2BhK1%2BhLvUwAkPriQYiAa1JKgdQU0JakVQlwT1oLkhtAtdc1NoV7HgcIeHO2pGptzYoTdMuSFzslMckGdm3XlP3vkcm3La8tO4m0jRSROR0F6H9fyU8ajXjUK%2Fk4Q8gVMNlDsC6jxsqQl5of0rCjUhT3zxIRjdg9N74GoJtHoRtB4loQ96adTp%2BdjKv0uVdeWKpvUKN5nibW4yCNOgKJdRXvZ29AF5bn7K6BcNyfdPfMzOTP68%2FTe4bVDYBp%2Bo%2BwQb%2BtrogqnJ7gVTO%2FLtuaJUmdqiszNfLGkpl756R16ujRWnT7nt22%2FwmTCDd96VrlynuVD5hiNfn1RCSLtmLJfkh9PufcnOV%2B7SycrmVbF%2B%2Fs2101lhpXPK5GNQNSHkwT64mpCnvp%2FOX%2FDzv92FsmPYqkFW7ZPDgTJ74MUVuGKR35klWL3wsMJDXTUjG7LFR60ItFxwyhq4%2F3C2wDvuGjbsS6DlVeRZg4FtMNANqN6Gq5ZGZWH3T%2FwczQdMeyOmrbfLtNXXH5fr1LSVRJFP4343SBIqE9YJe2kcCErDThzGMY1Qugk%2F%2FsfxfwAAAP%2F%2FAQAA%2F%2F%2FeY0drjAQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 intimidatekerneljames.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYscRRytzq4ieFJyUVTm4EHBne2Pme4ZAwnGuBLcfJAo6knrqzflVnc1Vd3Tkz0FA5LjBj166H2zSYgGiejVILOBHBaEjF5GdG%2F%2BASLk5EFmsjj6u%2Fze6%2FcOr9%2BvPtupDoiPik5PnTFbSmu62m37rVc%2BCIJjrXWVV8PWsBd%2FFHeOtezg9X7c9l9tvS35plkN%2FcD3Az9orSkrUzNcnYlQxZ1%2B0O777U7YDrodDO3%2Fuas8OOpBDA7Is1BisnzfOwrFx8izu6ek2yxN8dpbWaVpaSwG4tZ7%2BWZu6hzZAqbWQ5rfOnTDuIdr92DyG%2FO4MIN%2FjUxNiPfgHlh%2B6zAk2GB3npNpyBxMPI16MIbUYyg6BjdXocRDAnCBs%2BeQZzfPGlvTy49VOlMnZPnRX1D1hCz%2FfhR59s1JrYati0ZXpTK5wzBtoIZjqI0ximoP5dYRqHoPvPwUSvxEVh%2BtI892zzltoMT0ZSb8uMsCuSJEv7vSiWi40gtkbyVO%2ByyWvC%2BiiM0LUmoMlY6h5TaoW0LlPFTKQ5V6qAoPmZi2eBAEiS849Xt9ziORSBYLP6BJGtDAj3uo%2BOwftlEW2%2BB6G9xeQWGvYFNdf0i%2BhK1%2BhLvUwAkPriQYiAa1JKgdQU0JakVQlwT1oLkhtAtdc1NoV7HgcIeHO2pGptzYoTdMuSFzslMckGdm3XlP3vkcm3La8tO4m0jRSROR0F6H9fyU8ajXjUK%2Fk4Q8gVMNlDsC6jxsqQl5of0rCjUhT3zxIRjdg9N74GoJtHoRtB4loQ96adTp%2BdjKv0uVdeWKpvUKN5nibW4yCNOgKJdRXvZ29AF5bn7K6BcNyfdPfMzOTP68%2FTe4bVDYBp%2Bo%2BwQb%2BtrogqnJ7gVTO%2FLtuaJUmdqiszNfLGkpl756R16ujRWnT7nt22%2FwmTCDd96VrlynuVD5hiNfn1RCSLtmLJfkh9PufcnOV%2B7SycrmVbF%2B%2Fs2101lhpXPK5GNQNSHkwT64mpCnvp%2FOX%2FDzv92FsmPYqkFW7ZPDgTJ74MUVuGKR35klWL3wsMJDXTUjG7LFR60ItFxwyhq4%2F3C2wDvuGjbsS6DlVeRZg4FtMNANqN6Gq5ZGZWH3T%2FwczQdMeyOmrbfLtNXXH5fr1LSVRJFP4343SBIqE9YJe2kcCErDThzGMY1Qugk%2F%2FsfxfwAAAP%2F%2FAQAA%2F%2F%2FeY0drjAQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzYscRRytzq4ieFJyUVTm4EHBne2Pme4ZAwnGuBLcfJAo6knrqzflVnc1Vd3Tkz0FA5LjBj166H2zSYgGiejVILOBHBaEjF5GdG%2F%2BASLk5EFmsjj6u%2Fze6%2FcOr9%2BvPtupDoiPik5PnTFbSmu62m37rVc%2BCIJjrXWVV8PWsBd%2FFHeOtezg9X7c9l9tvS35plkN%2FcD3Az9orSkrUzNcnYlQxZ1%2B0O777U7YDrodDO3%2Fuas8OOpBDA7Is1BisnzfOwrFx8izu6ek2yxN8dpbWaVpaSwG4tZ7%2BWZu6hzZAqbWQ5rfOnTDuIdr92DyG%2FO4MIN%2FjUxNiPfgHlh%2B6zAk2GB3npNpyBxMPI16MIbUYyg6BjdXocRDAnCBs%2BeQZzfPGlvTy49VOlMnZPnRX1D1hCz%2FfhR59s1JrYati0ZXpTK5wzBtoIZjqI0ximoP5dYRqHoPvPwUSvxEVh%2BtI892zzltoMT0ZSb8uMsCuSJEv7vSiWi40gtkbyVO%2ByyWvC%2BiiM0LUmoMlY6h5TaoW0LlPFTKQ5V6qAoPmZi2eBAEiS849Xt9ziORSBYLP6BJGtDAj3uo%2BOwftlEW2%2BB6G9xeQWGvYFNdf0i%2BhK1%2BhLvUwAkPriQYiAa1JKgdQU0JakVQlwT1oLkhtAtdc1NoV7HgcIeHO2pGptzYoTdMuSFzslMckGdm3XlP3vkcm3La8tO4m0jRSROR0F6H9fyU8ajXjUK%2Fk4Q8gVMNlDsC6jxsqQl5of0rCjUhT3zxIRjdg9N74GoJtHoRtB4loQ96adTp%2BdjKv0uVdeWKpvUKN5nibW4yCNOgKJdRXvZ29AF5bn7K6BcNyfdPfMzOTP68%2FTe4bVDYBp%2Bo%2BwQb%2BtrogqnJ7gVTO%2FLtuaJUmdqiszNfLGkpl756R16ujRWnT7nt22%2FwmTCDd96VrlynuVD5hiNfn1RCSLtmLJfkh9PufcnOV%2B7SycrmVbF%2B%2Fs2101lhpXPK5GNQNSHkwT64mpCnvp%2FOX%2FDzv92FsmPYqkFW7ZPDgTJ74MUVuGKR35klWL3wsMJDXTUjG7LFR60ItFxwyhq4%2F3C2wDvuGjbsS6DlVeRZg4FtMNANqN6Gq5ZGZWH3T%2FwczQdMeyOmrbfLtNXXH5fr1LSVRJFP4343SBIqE9YJe2kcCErDThzGMY1Qugk%2F%2FsfxfwAAAP%2F%2FAQAA%2F%2F%2FeY0drjAQAAA%3D%3D HTTP/1.1
Host: intimidatekerneljames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17214611; uid_id2=bd065b1e-dd95-43a2-81e8-6f9b6ec9d33b:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0f657ed4f7d7a84b80fbc385320472c7=[3396716]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 946ea5bb019b47af76bd05a4ed228790
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash da32fcedc22c3f8071079610e24227d2
b80c8b3315fe0dfdbf02cb1e46ec49fce2e6d858
3dbffb2bb666ae31dbbb9611ad68b92c6bc7da1750d5bac1c0dea372f34f39e8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "3DBFFB2BB666AE31DBBB9611AD68B92C6BC7DA1750D5BAC1C0DEA372F34F39E8"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8439
Expires: Thu, 06 Oct 2022 16:45:41 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash da32fcedc22c3f8071079610e24227d2
b80c8b3315fe0dfdbf02cb1e46ec49fce2e6d858
3dbffb2bb666ae31dbbb9611ad68b92c6bc7da1750d5bac1c0dea372f34f39e8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "3DBFFB2BB666AE31DBBB9611AD68B92C6BC7DA1750D5BAC1C0DEA372F34F39E8"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8439
Expires: Thu, 06 Oct 2022 16:45:41 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
familiarkindlyshuffle.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHRlAU3El3z2R6xkUXY4wE42bdVdSTVFf1TMpUdzVV%2FTPJKbqw7MHDCHtRPHS%2BSTa4BlE8G2SyIBIUMreIm5sHz8LiUXocHH1Q9d6r7zt873t1cyc7Iw4yerr0ptoSUtL5hbpjP%2Fee616yV0Wc9e1%2Bu%2FVBq3nJ1vmLnVbded5%2BPWQbat5zXMdxHddeFjrsqv58BUIkBx233nHqTa%2FuLjTR1%2F%2FvTWbBUAs8PyNPQvBx7Z51HoKNEEffLIVmI1XJC69FmaSp0sj5%2FjvxRqyKGNGs7GoL3Xh%2FyoYyJ8uHUPHeRC5U%2Fi8xEGNi%2FXiIIN6fikSQ7050BhJhjIA%2FhiIfIZQjCDoCUzcg%2BAkBGMeVNcTRnStKF3TzH5RW6JjUHvwJUYxJ7f55xNHXi1L07etKZqlQsUG%2FW0L0RxC9EZLsCOnWOYjiCCz9GIL%2FQuYfrCKOdteMVBC8nMwuxAiiO4IMB6DGQlYdYSHrWsgSCxE%2FtZnrur7DGXXaHcYa3A%2BDFndc6ndd6jqtNjJWyRsgTQZgcgCmt5HobWyIT0%2FIF9DZDzDrJQy3YNIxsd7aRs5LFCFBYQgKSlAIgiIlKPJyj0vjmfIOlyYL3Gn2prlRDlXa26F7Ku2FMdlJzsgTlTXWwznBRnhqe55Pu6HjtzsOdwLHbTfYQsenHe67TocudGBECWHOTabdEmNyof4rEjEmD91%2BHwE9gpFHYGIONHNBi6HvOaDrw2bbwVb8XVdok16UtLjIVCRYnakIXJVI0hrSTWtHnpGnJpt6eu4MITu%2BfPfCwSPus3%2BA6RKJLvGhuEfQk7eG11RBdq%2BpwpBv15JURGKLVlu8ntI0nLv7RrhZKM1Xlszgy1dYBVTlwduhSVdpzEXcM%2BSrRcF5qJeVZiH5fsW8GwZXM7O%2BmOk4S1avvrq8EiU6NEaoeAQqTtb%2BAhNjUvvocPI9H%2F%2F5JoQeQWclouyYTANCHYEl2zDJTL1Rc9ByxgmSORRZOdReMHuUgkCGs54GJcx%2F%2BmBW75hb6GkPNL2BOCqR6xK5LEHlACZ7dJgm%2BvjyT59V8TkCWRsGUtd2A6nl7TGxn%2Fmk8vf%2BxOTq%2Bg1GnNp%2Bo%2BHQVmfB9X0a%2BkHTa3dbLqfUa7a8Vos2kJoxe%2Fn3l%2F4GAAD%2F%2FwEAAP%2F%2FawNv6ngEAAA%3D
200 OK 7 B URL HTTP/1.1 familiarkindlyshuffle.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHRlAU3El3z2R6xkUXY4wE42bdVdSTVFf1TMpUdzVV%2FTPJKbqw7MHDCHtRPHS%2BSTa4BlE8G2SyIBIUMreIm5sHz8LiUXocHH1Q9d6r7zt873t1cyc7Iw4yerr0ptoSUtL5hbpjP%2Fee616yV0Wc9e1%2Bu%2FVBq3nJ1vmLnVbded5%2BPWQbat5zXMdxHddeFjrsqv58BUIkBx233nHqTa%2FuLjTR1%2F%2FvTWbBUAs8PyNPQvBx7Z51HoKNEEffLIVmI1XJC69FmaSp0sj5%2FjvxRqyKGNGs7GoL3Xh%2FyoYyJ8uHUPHeRC5U%2Fi8xEGNi%2FXiIIN6fikSQ7050BhJhjIA%2FhiIfIZQjCDoCUzcg%2BAkBGMeVNcTRnStKF3TzH5RW6JjUHvwJUYxJ7f55xNHXi1L07etKZqlQsUG%2FW0L0RxC9EZLsCOnWOYjiCCz9GIL%2FQuYfrCKOdteMVBC8nMwuxAiiO4IMB6DGQlYdYSHrWsgSCxE%2FtZnrur7DGXXaHcYa3A%2BDFndc6ndd6jqtNjJWyRsgTQZgcgCmt5HobWyIT0%2FIF9DZDzDrJQy3YNIxsd7aRs5LFCFBYQgKSlAIgiIlKPJyj0vjmfIOlyYL3Gn2prlRDlXa26F7Ku2FMdlJzsgTlTXWwznBRnhqe55Pu6HjtzsOdwLHbTfYQsenHe67TocudGBECWHOTabdEmNyof4rEjEmD91%2BHwE9gpFHYGIONHNBi6HvOaDrw2bbwVb8XVdok16UtLjIVCRYnakIXJVI0hrSTWtHnpGnJpt6eu4MITu%2BfPfCwSPus3%2BA6RKJLvGhuEfQk7eG11RBdq%2BpwpBv15JURGKLVlu8ntI0nLv7RrhZKM1Xlszgy1dYBVTlwduhSVdpzEXcM%2BSrRcF5qJeVZiH5fsW8GwZXM7O%2BmOk4S1avvrq8EiU6NEaoeAQqTtb%2BAhNjUvvocPI9H%2F%2F5JoQeQWclouyYTANCHYEl2zDJTL1Rc9ByxgmSORRZOdReMHuUgkCGs54GJcx%2F%2BmBW75hb6GkPNL2BOCqR6xK5LEHlACZ7dJgm%2BvjyT59V8TkCWRsGUtd2A6nl7TGxn%2Fmk8vf%2BxOTq%2Bg1GnNp%2Bo%2BHQVmfB9X0a%2BkHTa3dbLqfUa7a8Vos2kJoxe%2Fn3l%2F4GAAD%2F%2FwEAAP%2F%2FawNv6ngEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHRlAU3El3z2R6xkUXY4wE42bdVdSTVFf1TMpUdzVV%2FTPJKbqw7MHDCHtRPHS%2BSTa4BlE8G2SyIBIUMreIm5sHz8LiUXocHH1Q9d6r7zt873t1cyc7Iw4yerr0ptoSUtL5hbpjP%2Fee616yV0Wc9e1%2Bu%2FVBq3nJ1vmLnVbded5%2BPWQbat5zXMdxHddeFjrsqv58BUIkBx233nHqTa%2FuLjTR1%2F%2FvTWbBUAs8PyNPQvBx7Z51HoKNEEffLIVmI1XJC69FmaSp0sj5%2FjvxRqyKGNGs7GoL3Xh%2FyoYyJ8uHUPHeRC5U%2Fi8xEGNi%2FXiIIN6fikSQ7050BhJhjIA%2FhiIfIZQjCDoCUzcg%2BAkBGMeVNcTRnStKF3TzH5RW6JjUHvwJUYxJ7f55xNHXi1L07etKZqlQsUG%2FW0L0RxC9EZLsCOnWOYjiCCz9GIL%2FQuYfrCKOdteMVBC8nMwuxAiiO4IMB6DGQlYdYSHrWsgSCxE%2FtZnrur7DGXXaHcYa3A%2BDFndc6ndd6jqtNjJWyRsgTQZgcgCmt5HobWyIT0%2FIF9DZDzDrJQy3YNIxsd7aRs5LFCFBYQgKSlAIgiIlKPJyj0vjmfIOlyYL3Gn2prlRDlXa26F7Ku2FMdlJzsgTlTXWwznBRnhqe55Pu6HjtzsOdwLHbTfYQsenHe67TocudGBECWHOTabdEmNyof4rEjEmD91%2BHwE9gpFHYGIONHNBi6HvOaDrw2bbwVb8XVdok16UtLjIVCRYnakIXJVI0hrSTWtHnpGnJpt6eu4MITu%2BfPfCwSPus3%2BA6RKJLvGhuEfQk7eG11RBdq%2BpwpBv15JURGKLVlu8ntI0nLv7RrhZKM1Xlszgy1dYBVTlwduhSVdpzEXcM%2BSrRcF5qJeVZiH5fsW8GwZXM7O%2BmOk4S1avvrq8EiU6NEaoeAQqTtb%2BAhNjUvvocPI9H%2F%2F5JoQeQWclouyYTANCHYEl2zDJTL1Rc9ByxgmSORRZOdReMHuUgkCGs54GJcx%2F%2BmBW75hb6GkPNL2BOCqR6xK5LEHlACZ7dJgm%2BvjyT59V8TkCWRsGUtd2A6nl7TGxn%2Fmk8vf%2BxOTq%2Bg1GnNp%2Bo%2BHQVmfB9X0a%2BkHTa3dbLqfUa7a8Vos2kJoxe%2Fn3l%2F4GAAD%2F%2FwEAAP%2F%2FawNv6ngEAAA%3D HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17266176; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c2da1f88d44d7d597c8c33a3823cd4f8
Strict-Transport-Security: max-age=0; includeSubdomains
familiarkindlyshuffle.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHQVAU3En3ZCYz46KLMUaCcbPuKupJ6q8nZaq7mqru6UlO0UXZg4cR9qJ46HyTbHANong2yGRBJChkbhE3Nw%2BehcWj9BgcfdDvva%2B%2F7%2FC99%2Brj7eyU%2BMjoyeLrZlNpTWebNb%2F6zDtBcKm6ouKsX%2B2359%2Bbb1yq2t7znfma%2F2z1VcnXzWzdD3w%2F8IPqkrIyNP3ZkoRK9jtBrePXGvVa0Gygb%2F%2BPXebBUQ%2Bid0oehxLjyl3vPBQfIY6%2BWZRuPTXJc69EmaapseiJvbfi9djkMaJpG1oPYbx3poZxx0sHMPHuxC5M718hU2Pi%2FXgAFu%2BdmQTr7Ux8Mg0Zg4lHkPdGkHoERUfg5gaUOCYAF7iyiji6fcXYnG78w9KSHZPK%2FT%2Bh8jGp3DuPOPp6Qat%2B9brRWapM7NAPC6j%2BCKo7QpIdIt08B5UfgqcfQolfyOz9FcTRzqrTBkoUk9mVGkGFI2g5AHUesvJTHrLQQ5Z4iMRJlQdB0PIFp367w%2FmcaEk2L%2FyAtsKABv58Gxkv7Q2QJgNwPQC3W0jsFtbVp8fkC9jsB7i1Ak54cOmYeG9soScK5JIgdwQ5JcgVQZ4S5L1iV2hXd8VtoV3GgrNaP6tzxdCk3W26a9KujMl2ckoeK1fjPdgjWJcn1Xq9RUPpt9odX%2FjMD9pzvNlp0Y5oBX6HNjtwqoBy5ybTbqoxuVD7FYkakwduvQtGD%2BH0IbiaAc0C0HzYqvuga8NG28dm%2FF2orEsvappf5CZSvMZNBGEKJGkF6Ya3rU%2FJE5NLPTlzD5IfXb5zYf%2Bh4Ok%2FwG2BxBZ4X90l6Oqbw2smJzvXTO7It6tJqiK1ScsrXk9pKmfuvCY3cmPF8qIbfPkSL4my3X9TunSFxkLFXUe%2BWlBCSLtkLJfk%2B2X3tmRXM7e2kNk4S1auvry0HCVWOqdMPAJVx6t%2FgasxqXxwMHmej%2F78EZQdwWYFouyInAWUOQRPtuCSqXtnZmD1VMOSc8izYmjrbPpTKwItp5iyAu4%2FmE37bXcTXVsHTW8gjgr0bIGeLkD1AC57eJgm9ujyT5%2BV8TmYrgyZtpUdpq2%2BNSbVpz6Z7LdMp2X6DU6dVOd80WIylC0mG81GKLlgzSbzecjZnGi3OVI35i%2F%2B%2FsLfAAAA%2F%2F8BAAD%2F%2F%2B1VEk54BAAA
200 OK 7 B URL HTTP/1.1 familiarkindlyshuffle.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHQVAU3En3ZCYz46KLMUaCcbPuKupJ6q8nZaq7mqru6UlO0UXZg4cR9qJ46HyTbHANong2yGRBJChkbhE3Nw%2BehcWj9BgcfdDvva%2B%2F7%2FC99%2Brj7eyU%2BMjoyeLrZlNpTWebNb%2F6zDtBcKm6ouKsX%2B2359%2Bbb1yq2t7znfma%2F2z1VcnXzWzdD3w%2F8IPqkrIyNP3ZkoRK9jtBrePXGvVa0Gygb%2F%2BPXebBUQ%2Bid0oehxLjyl3vPBQfIY6%2BWZRuPTXJc69EmaapseiJvbfi9djkMaJpG1oPYbx3poZxx0sHMPHuxC5M718hU2Pi%2FXgAFu%2BdmQTr7Ux8Mg0Zg4lHkPdGkHoERUfg5gaUOCYAF7iyiji6fcXYnG78w9KSHZPK%2FT%2Bh8jGp3DuPOPp6Qat%2B9brRWapM7NAPC6j%2BCKo7QpIdIt08B5UfgqcfQolfyOz9FcTRzqrTBkoUk9mVGkGFI2g5AHUesvJTHrLQQ5Z4iMRJlQdB0PIFp367w%2FmcaEk2L%2FyAtsKABv58Gxkv7Q2QJgNwPQC3W0jsFtbVp8fkC9jsB7i1Ak54cOmYeG9soScK5JIgdwQ5JcgVQZ4S5L1iV2hXd8VtoV3GgrNaP6tzxdCk3W26a9KujMl2ckoeK1fjPdgjWJcn1Xq9RUPpt9odX%2FjMD9pzvNlp0Y5oBX6HNjtwqoBy5ybTbqoxuVD7FYkakwduvQtGD%2BH0IbiaAc0C0HzYqvuga8NG28dm%2FF2orEsvappf5CZSvMZNBGEKJGkF6Ya3rU%2FJE5NLPTlzD5IfXb5zYf%2Bh4Ok%2FwG2BxBZ4X90l6Oqbw2smJzvXTO7It6tJqiK1ScsrXk9pKmfuvCY3cmPF8qIbfPkSL4my3X9TunSFxkLFXUe%2BWlBCSLtkLJfk%2B2X3tmRXM7e2kNk4S1auvry0HCVWOqdMPAJVx6t%2FgasxqXxwMHmej%2F78EZQdwWYFouyInAWUOQRPtuCSqXtnZmD1VMOSc8izYmjrbPpTKwItp5iyAu4%2FmE37bXcTXVsHTW8gjgr0bIGeLkD1AC57eJgm9ujyT5%2BV8TmYrgyZtpUdpq2%2BNSbVpz6Z7LdMp2X6DU6dVOd80WIylC0mG81GKLlgzSbzecjZnGi3OVI35i%2F%2B%2FsLfAAAA%2F%2F8BAAD%2F%2F%2B1VEk54BAAA
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHQVAU3En3ZCYz46KLMUaCcbPuKupJ6q8nZaq7mqru6UlO0UXZg4cR9qJ46HyTbHANong2yGRBJChkbhE3Nw%2BehcWj9BgcfdDvva%2B%2F7%2FC99%2Brj7eyU%2BMjoyeLrZlNpTWebNb%2F6zDtBcKm6ouKsX%2B2359%2Bbb1yq2t7znfma%2F2z1VcnXzWzdD3w%2F8IPqkrIyNP3ZkoRK9jtBrePXGvVa0Gygb%2F%2BPXebBUQ%2Bid0oehxLjyl3vPBQfIY6%2BWZRuPTXJc69EmaapseiJvbfi9djkMaJpG1oPYbx3poZxx0sHMPHuxC5M718hU2Pi%2FXgAFu%2BdmQTr7Ux8Mg0Zg4lHkPdGkHoERUfg5gaUOCYAF7iyiji6fcXYnG78w9KSHZPK%2FT%2Bh8jGp3DuPOPp6Qat%2B9brRWapM7NAPC6j%2BCKo7QpIdIt08B5UfgqcfQolfyOz9FcTRzqrTBkoUk9mVGkGFI2g5AHUesvJTHrLQQ5Z4iMRJlQdB0PIFp367w%2FmcaEk2L%2FyAtsKABv58Gxkv7Q2QJgNwPQC3W0jsFtbVp8fkC9jsB7i1Ak54cOmYeG9soScK5JIgdwQ5JcgVQZ4S5L1iV2hXd8VtoV3GgrNaP6tzxdCk3W26a9KujMl2ckoeK1fjPdgjWJcn1Xq9RUPpt9odX%2FjMD9pzvNlp0Y5oBX6HNjtwqoBy5ybTbqoxuVD7FYkakwduvQtGD%2BH0IbiaAc0C0HzYqvuga8NG28dm%2FF2orEsvappf5CZSvMZNBGEKJGkF6Ya3rU%2FJE5NLPTlzD5IfXb5zYf%2Bh4Ok%2FwG2BxBZ4X90l6Oqbw2smJzvXTO7It6tJqiK1ScsrXk9pKmfuvCY3cmPF8qIbfPkSL4my3X9TunSFxkLFXUe%2BWlBCSLtkLJfk%2B2X3tmRXM7e2kNk4S1auvry0HCVWOqdMPAJVx6t%2FgasxqXxwMHmej%2F78EZQdwWYFouyInAWUOQRPtuCSqXtnZmD1VMOSc8izYmjrbPpTKwItp5iyAu4%2FmE37bXcTXVsHTW8gjgr0bIGeLkD1AC57eJgm9ujyT5%2BV8TmYrgyZtpUdpq2%2BNSbVpz6Z7LdMp2X6DU6dVOd80WIylC0mG81GKLlgzSbzecjZnGi3OVI35i%2F%2B%2FsLfAAAA%2F%2F8BAAD%2F%2F%2B1VEk54BAAA HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17266176; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7c3a8efe9742514498c108b4b2468144
Strict-Transport-Security: max-age=0; includeSubdomains
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
familiarkindlyshuffle.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoehBlL8IeBkFRcCfdk5nMjIsuxhgJxs26q6gnqb%2BelKnuaqq6pyc5RRdkDx5G2IviofNNssE1LIpng0wWRAJC5hZxc%2FPgWVg8So%2FBcR%2F0e%2B%2Fr7zt87736bDs7JT4yerL4ttlUWtPZZs2vvvBBEFyqrqg461f77fmP5huXqrb3cme%2B5r9YfVPydTNb9wPfD%2FyguqSsDE1%2FtiShkv1OUOv4tUa9FjQb6NuHscs8OOpB9E7J01BiXLnnnYfiI8TRd4vSracmeemNKNM0NRY9sfdevB6bPEY0bUPrIYz3ztQw7njpACbendiF6f0nZGpMvJ8PwOK9M5NgvZ2JT6YhYzDxBPLeCFKPoOgI3NyAEscE4AJXVhFHt68Ym9ONf1lasmNSefAXVD4mlfvnEUd3F7TqV68bnaXKxA79sIDqj6C6IyTZIdLNc1D5IXj6KZT4lcw%2BWEEc7aw6baBEMZldqRFUOIKWA1DnISs%2F5SELPWSJh0icVHkQBC1fcOq3O5zPiZZk88IPaCsMaODPt5Hx0t4AaTIA1wNwu4XEbmFdfXFMvobNfoJbK%2BCEB5eOiffOFnqiQC4JckeQU4JcEeQpQd4rdoV2dVfcFtplLDir9bM6VwxN2t2muybtyphsJ6fkqXI13qM9gnV5Uq3XWzSUfqvd8YXP%2FKA9x5udFu2IVuB3aLMDpwood24y7aYakwu135CoMXnk1odg9BBOH4KrGdAsAM2HrboPujZstH1sxj%2BEyrr0oqb5RW4ixWvcRBCmQJJWkG542%2FqUPDO5VPW5zyH50eU7F%2FYfC57%2FE9wWSGyBj9U9gq6%2BObxmcrJzzeSOfL%2BapCpSm7S84vWUpnLmzltyIzdWLC%2B6wTev8ZIo2%2F13pUtXaCxU3HXk2wUlhLRLxnJJflx270t2NXNrC5mNs2Tl6utLy1FipXPKxCNQdbz6N7gak8onB5Pn%2BeT4LpQdwWYFouyInAWUOQRPtuCSqXtnZmD1VMMSD3lWDG2dTX9qRaDlFFNWwP0Ps2m%2F7W6ia%2Bug6Q3EUYGeLdDTBagewGWPD9PEHl3%2B5csyvgLTlSHTtrLDtNW3Jqsdk2dn7pfptEy%2Fw6mT6pwvWkyGssVko9kIJRes2WQ%2BDzmbE%2B02R%2BrG%2FNU%2FXvkHAAD%2F%2FwEAAP%2F%2FbmY7K3gEAAA%3D
200 OK 7 B URL HTTP/1.1 familiarkindlyshuffle.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoehBlL8IeBkFRcCfdk5nMjIsuxhgJxs26q6gnqb%2BelKnuaqq6pyc5RRdkDx5G2IviofNNssE1LIpng0wWRAJC5hZxc%2FPgWVg8So%2FBcR%2F0e%2B%2Fr7zt87736bDs7JT4yerL4ttlUWtPZZs2vvvBBEFyqrqg461f77fmP5huXqrb3cme%2B5r9YfVPydTNb9wPfD%2FyguqSsDE1%2FtiShkv1OUOv4tUa9FjQb6NuHscs8OOpB9E7J01BiXLnnnYfiI8TRd4vSracmeemNKNM0NRY9sfdevB6bPEY0bUPrIYz3ztQw7njpACbendiF6f0nZGpMvJ8PwOK9M5NgvZ2JT6YhYzDxBPLeCFKPoOgI3NyAEscE4AJXVhFHt68Ym9ONf1lasmNSefAXVD4mlfvnEUd3F7TqV68bnaXKxA79sIDqj6C6IyTZIdLNc1D5IXj6KZT4lcw%2BWEEc7aw6baBEMZldqRFUOIKWA1DnISs%2F5SELPWSJh0icVHkQBC1fcOq3O5zPiZZk88IPaCsMaODPt5Hx0t4AaTIA1wNwu4XEbmFdfXFMvobNfoJbK%2BCEB5eOiffOFnqiQC4JckeQU4JcEeQpQd4rdoV2dVfcFtplLDir9bM6VwxN2t2muybtyphsJ6fkqXI13qM9gnV5Uq3XWzSUfqvd8YXP%2FKA9x5udFu2IVuB3aLMDpwood24y7aYakwu135CoMXnk1odg9BBOH4KrGdAsAM2HrboPujZstH1sxj%2BEyrr0oqb5RW4ixWvcRBCmQJJWkG542%2FqUPDO5VPW5zyH50eU7F%2FYfC57%2FE9wWSGyBj9U9gq6%2BObxmcrJzzeSOfL%2BapCpSm7S84vWUpnLmzltyIzdWLC%2B6wTev8ZIo2%2F13pUtXaCxU3HXk2wUlhLRLxnJJflx270t2NXNrC5mNs2Tl6utLy1FipXPKxCNQdbz6N7gak8onB5Pn%2BeT4LpQdwWYFouyInAWUOQRPtuCSqXtnZmD1VMMSD3lWDG2dTX9qRaDlFFNWwP0Ps2m%2F7W6ia%2Bug6Q3EUYGeLdDTBagewGWPD9PEHl3%2B5csyvgLTlSHTtrLDtNW3Jqsdk2dn7pfptEy%2Fw6mT6pwvWkyGssVko9kIJRes2WQ%2BDzmbE%2B02R%2BrG%2FNU%2FXvkHAAD%2F%2FwEAAP%2F%2FbmY7K3gEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoehBlL8IeBkFRcCfdk5nMjIsuxhgJxs26q6gnqb%2BelKnuaqq6pyc5RRdkDx5G2IviofNNssE1LIpng0wWRAJC5hZxc%2FPgWVg8So%2FBcR%2F0e%2B%2Fr7zt87736bDs7JT4yerL4ttlUWtPZZs2vvvBBEFyqrqg461f77fmP5huXqrb3cme%2B5r9YfVPydTNb9wPfD%2FyguqSsDE1%2FtiShkv1OUOv4tUa9FjQb6NuHscs8OOpB9E7J01BiXLnnnYfiI8TRd4vSracmeemNKNM0NRY9sfdevB6bPEY0bUPrIYz3ztQw7njpACbendiF6f0nZGpMvJ8PwOK9M5NgvZ2JT6YhYzDxBPLeCFKPoOgI3NyAEscE4AJXVhFHt68Ym9ONf1lasmNSefAXVD4mlfvnEUd3F7TqV68bnaXKxA79sIDqj6C6IyTZIdLNc1D5IXj6KZT4lcw%2BWEEc7aw6baBEMZldqRFUOIKWA1DnISs%2F5SELPWSJh0icVHkQBC1fcOq3O5zPiZZk88IPaCsMaODPt5Hx0t4AaTIA1wNwu4XEbmFdfXFMvobNfoJbK%2BCEB5eOiffOFnqiQC4JckeQU4JcEeQpQd4rdoV2dVfcFtplLDir9bM6VwxN2t2muybtyphsJ6fkqXI13qM9gnV5Uq3XWzSUfqvd8YXP%2FKA9x5udFu2IVuB3aLMDpwood24y7aYakwu135CoMXnk1odg9BBOH4KrGdAsAM2HrboPujZstH1sxj%2BEyrr0oqb5RW4ixWvcRBCmQJJWkG542%2FqUPDO5VPW5zyH50eU7F%2FYfC57%2FE9wWSGyBj9U9gq6%2BObxmcrJzzeSOfL%2BapCpSm7S84vWUpnLmzltyIzdWLC%2B6wTev8ZIo2%2F13pUtXaCxU3HXk2wUlhLRLxnJJflx270t2NXNrC5mNs2Tl6utLy1FipXPKxCNQdbz6N7gak8onB5Pn%2BeT4LpQdwWYFouyInAWUOQRPtuCSqXtnZmD1VMMSD3lWDG2dTX9qRaDlFFNWwP0Ps2m%2F7W6ia%2Bug6Q3EUYGeLdDTBagewGWPD9PEHl3%2B5csyvgLTlSHTtrLDtNW3Jqsdk2dn7pfptEy%2Fw6mT6pwvWkyGssVko9kIJRes2WQ%2BDzmbE%2B02R%2BrG%2FNU%2FXvkHAAD%2F%2FwEAAP%2F%2FbmY7K3gEAAA%3D HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17266176; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4c1226ec7f7dde8019ad15d563f4b353
Strict-Transport-Security: max-age=0; includeSubdomains
familiarkindlyshuffle.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHQVAU3En3ZCYz46KLMUaCcbPuKupJ6q8nZaq7mqru6UlO0YVlDx5G2IviofNNssE1iOLZIJMFkaCQuUXc3Dx4FhaP0mNw9EHVe6%2B%2B7%2FC979XN7eyU%2BMjoyeKbZlNpTWebNb%2F63HtBcKm6ouKsX%2B235z%2BYb1yq2t6Lnfma%2F3z1dcnXzWzdD3w%2F8IPqkrIyNP3ZEoRK9jtBrePXGvVa0Gygb%2F%2Ffu8yDox5E75Q8CSXGlXveeSg%2BQhx9syjdemqSF16LMk1TY9ETe%2B%2FE67HJY0TTMrQewnjvjA3jjpcOYOLdiVyY3r9EpsbE%2B%2FEALN47EwnW25noZBoyBhOPIe%2BNIPUIio7AzQ0ocUwALnBlFXF054qxOd34B6UlOiaVB39C5WNSuX8ecfT1glb96nWjs1SZ2KEfFlD9EVR3hCQ7RLp5Dio%2FBE8%2FhhK%2FkNkHK4ijnVWnDZQoJrMrNYIKR9ByAOo8ZOVRHrLQQ5Z4iMRJlQdB0PIFp367w%2FmcaEk2L%2FyAtsKABv58Gxkv5Q2QJgNwPQC3W0jsFtbVp8fkC9jsB7i1Ak54cOmYeG9toScK5JIgdwQ5JcgVQZ4S5L1iV2hXd8UdoV3GgrNcP8tzxdCk3W26a9KujMl2ckqeKK3xHu4RrMuTar3eoqH0W%2B2OL3zmB%2B053uy0aEe0Ar9Dmx04VUC5c5NpN9WYXKj9ikSNyUO33wejh3D6EFzNgGYBaD5s1X3QtWGj7WMz%2Fi5U1qUXNc0vchMpXuMmgjAFkrSCdMPb1qfkqcmmnp45heRHl%2B9e2H8kePYPcFsgsQU%2BVPcIuvrW8JrJyc41kzvy7WqSqkht0nKL11Oaypm7b8iN3FixvOgGX77CS6As99%2BWLl2hsVBx15GvFpQQ0i4ZyyX5ftm9K9nVzK0tZDbOkpWrry4tR4mVzikTj0DV8epf4GpMKh8dTL7n4z%2FfhLIj2KxAlB2Rs4Ayh%2BDJFlwyVe%2FMDKyeclgygzwrhrbOpo9aEWg57Skr4P7Ts2m97W6ha%2Bug6Q3EUYGeLdDTBagewGWPDtPEHl3%2B6bMyPgfTlSHTtrLDtNW3x6T6zCelv%2FcnJpfXb3DqpDrnixaToWwx2Wg2QskFazaZz0PO5kS7zZG6MX%2F595f%2BBgAA%2F%2F8BAAD%2F%2F%2BvXugJ4BAAA
200 OK 7 B URL HTTP/1.1 familiarkindlyshuffle.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHQVAU3En3ZCYz46KLMUaCcbPuKupJ6q8nZaq7mqru6UlO0YVlDx5G2IviofNNssE1iOLZIJMFkaCQuUXc3Dx4FhaP0mNw9EHVe6%2B%2B7%2FC979XN7eyU%2BMjoyeKbZlNpTWebNb%2F63HtBcKm6ouKsX%2B235z%2BYb1yq2t6Lnfma%2F3z1dcnXzWzdD3w%2F8IPqkrIyNP3ZEoRK9jtBrePXGvVa0Gygb%2F%2Ffu8yDox5E75Q8CSXGlXveeSg%2BQhx9syjdemqSF16LMk1TY9ETe%2B%2FE67HJY0TTMrQewnjvjA3jjpcOYOLdiVyY3r9EpsbE%2B%2FEALN47EwnW25noZBoyBhOPIe%2BNIPUIio7AzQ0ocUwALnBlFXF054qxOd34B6UlOiaVB39C5WNSuX8ecfT1glb96nWjs1SZ2KEfFlD9EVR3hCQ7RLp5Dio%2FBE8%2FhhK%2FkNkHK4ijnVWnDZQoJrMrNYIKR9ByAOo8ZOVRHrLQQ5Z4iMRJlQdB0PIFp367w%2FmcaEk2L%2FyAtsKABv58Gxkv5Q2QJgNwPQC3W0jsFtbVp8fkC9jsB7i1Ak54cOmYeG9toScK5JIgdwQ5JcgVQZ4S5L1iV2hXd8UdoV3GgrNcP8tzxdCk3W26a9KujMl2ckqeKK3xHu4RrMuTar3eoqH0W%2B2OL3zmB%2B053uy0aEe0Ar9Dmx04VUC5c5NpN9WYXKj9ikSNyUO33wejh3D6EFzNgGYBaD5s1X3QtWGj7WMz%2Fi5U1qUXNc0vchMpXuMmgjAFkrSCdMPb1qfkqcmmnp45heRHl%2B9e2H8kePYPcFsgsQU%2BVPcIuvrW8JrJyc41kzvy7WqSqkht0nKL11Oaypm7b8iN3FixvOgGX77CS6As99%2BWLl2hsVBx15GvFpQQ0i4ZyyX5ftm9K9nVzK0tZDbOkpWrry4tR4mVzikTj0DV8epf4GpMKh8dTL7n4z%2FfhLIj2KxAlB2Rs4Ayh%2BDJFlwyVe%2FMDKyeclgygzwrhrbOpo9aEWg57Skr4P7Ts2m97W6ha%2Bug6Q3EUYGeLdDTBagewGWPDtPEHl3%2B6bMyPgfTlSHTtrLDtNW3x6T6zCelv%2FcnJpfXb3DqpDrnixaToWwx2Wg2QskFazaZz0PO5kS7zZG6MX%2F595f%2BBgAA%2F%2F8BAAD%2F%2F%2BvXugJ4BAAA
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3owoelHZi7CHQVAU3En3ZCYz46KLMUaCcbPuKupJ6q8nZaq7mqru6UlO0YVlDx5G2IviofNNssE1iOLZIJMFkaCQuUXc3Dx4FhaP0mNw9EHVe6%2B%2B7%2FC979XN7eyU%2BMjoyeKbZlNpTWebNb%2F63HtBcKm6ouKsX%2B235z%2BYb1yq2t6Lnfma%2F3z1dcnXzWzdD3w%2F8IPqkrIyNP3ZEoRK9jtBrePXGvVa0Gygb%2F%2Ffu8yDox5E75Q8CSXGlXveeSg%2BQhx9syjdemqSF16LMk1TY9ETe%2B%2FE67HJY0TTMrQewnjvjA3jjpcOYOLdiVyY3r9EpsbE%2B%2FEALN47EwnW25noZBoyBhOPIe%2BNIPUIio7AzQ0ocUwALnBlFXF054qxOd34B6UlOiaVB39C5WNSuX8ecfT1glb96nWjs1SZ2KEfFlD9EVR3hCQ7RLp5Dio%2FBE8%2FhhK%2FkNkHK4ijnVWnDZQoJrMrNYIKR9ByAOo8ZOVRHrLQQ5Z4iMRJlQdB0PIFp367w%2FmcaEk2L%2FyAtsKABv58Gxkv5Q2QJgNwPQC3W0jsFtbVp8fkC9jsB7i1Ak54cOmYeG9toScK5JIgdwQ5JcgVQZ4S5L1iV2hXd8UdoV3GgrNcP8tzxdCk3W26a9KujMl2ckqeKK3xHu4RrMuTar3eoqH0W%2B2OL3zmB%2B053uy0aEe0Ar9Dmx04VUC5c5NpN9WYXKj9ikSNyUO33wejh3D6EFzNgGYBaD5s1X3QtWGj7WMz%2Fi5U1qUXNc0vchMpXuMmgjAFkrSCdMPb1qfkqcmmnp45heRHl%2B9e2H8kePYPcFsgsQU%2BVPcIuvrW8JrJyc41kzvy7WqSqkht0nKL11Oaypm7b8iN3FixvOgGX77CS6As99%2BWLl2hsVBx15GvFpQQ0i4ZyyX5ftm9K9nVzK0tZDbOkpWrry4tR4mVzikTj0DV8epf4GpMKh8dTL7n4z%2FfhLIj2KxAlB2Rs4Ayh%2BDJFlwyVe%2FMDKyeclgygzwrhrbOpo9aEWg57Skr4P7Ts2m97W6ha%2Bug6Q3EUYGeLdDTBagewGWPDtPEHl3%2B6bMyPgfTlSHTtrLDtNW3x6T6zCelv%2FcnJpfXb3DqpDrnixaToWwx2Wg2QskFazaZz0PO5kS7zZG6MX%2F595f%2BBgAA%2F%2F8BAAD%2F%2F%2BvXugJ4BAAA HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17266176; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6aad24dc247d9c4a797da9a882592997
Strict-Transport-Security: max-age=0; includeSubdomains
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash d2eee4b2a25fab02e6fe142119924a85
a4a5972d9e34c726a2be6225e237fc7b82a254ec
fd4fc4af88ded4cae67a7d2d1b4b2c87ee1dd4889d10e300ffe16f39e830277c
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1306
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 06 Oct 2022 14:25:02 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/img/1.jpg
200 OK 22 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/img/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x292, components 3\012- data
Hash e1f754e6014f2a7636aa19acdf37eaa7
72ded7fb65560b2702630d5208386654f294e8e9
8b9e400d61eb3c28929db8209c3136b14e2112d6eb8b4f504b74f6cca67b50fe
GET /sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/img/1.jpg HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: image/jpeg
content-length: 21845
last-modified: Wed, 03 Aug 2022 08:33:45 GMT
etag: "62ea32e9-5555"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5545233
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X3X42Kiri%2Bc6QH1z10IUcanW1%2Bes0t277Rm71daJxywwCq68vfswlOqT%2B98mRihlTRaqQcj3Jw0MJFfbmdHzzFbl7o5CRPEMvvIsBJAm0wA4aHRN8fSexUZ5%2BeXNpZFpzb0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 755f1066ec1b75cf-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
intimidatekerneljames.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fmessage_redcircle2%2F3%2Findex.html&l=1559&fd=74
200 OK 0 B URL HTTP/1.1 intimidatekerneljames.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fmessage_redcircle2%2F3%2Findex.html&l=1559&fd=74
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fmessage_redcircle2%2F3%2Findex.html&l=1559&fd=74 HTTP/1.1
Host: intimidatekerneljames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17214611; uid_id2=bd065b1e-dd95-43a2-81e8-6f9b6ec9d33b:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0f657ed4f7d7a84b80fbc385320472c7=[3396716]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
familiarkindlyshuffle.com/65/aa/28/65aa283021630dfd9030555c4c61a78c.js
200 OK 29 kB URL HTTP/1.1 familiarkindlyshuffle.com/65/aa/28/65aa283021630dfd9030555c4c61a78c.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash fd15e47a3c99b60bb6cc029d76907067
a28162846a089bf919163cb2cbbf8b99bd3599a8
4d597c9933a734218819de9dc29eb5c18b03c65919e5793a29a5bbb7d29b9d47
GET /65/aa/28/65aa283021630dfd9030555c4c61a78c.js HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17266176; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1a62667434f66f60b42fef6c796c523f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
familiarkindlyshuffle.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3syPn%2BhFZS%2FCHgZBUXAn3ZOZzIyLLsYYCcbNuquoJ6l%2FPSlT3dVUdU9PcoquyB48jLAXxUPnm2SDaxDFs0EmCyJBIXOLuLl58CwsHqVng6MPqt579X2H732vPt7OTomPjJ4svm42ldZ0tlnzq8%2B8EwSXqisqzvrVfnv%2BvfnGpartPd%2BZr%2FnPVl%2BVfN3M1v3A9wM%2FqC4pK0PTny1BqGS%2FE9Q6fq1RrwXNBvr2v73LPDjqQfROyeNQYly5652H4iPE0TeL0q2nJnnulSjTNDUWPbH3VrwemzxGNC1D6yGM987YMO546QAm3p3Ihen9Q2RqTLwfD8DivTORYL2diU6mIWMw8Qjy3ghSj6DoCNzcgBLHBOACV1YRR7evGJvTjQcoLdExqdz%2FEyofk8q984ijrxe06levG52lysQO%2FbCA6o%2BguiMk2SHSzXNQ%2BSF4%2BiGU%2BIXM3l9BHO2sOm2gRDGZXakRVDiClgNQ5yErj%2FKQhR6yxEMkTqo8CIKWLzj12x3O50RLsnnhB7QVBjTw59vIeClvgDQZgOsBuN1CYrewrj49Jl%2FAZj%2FArRVwwoNLx8R7Yws9USCXBLkjyClBrgjylCDvFbtCu7orbgvtMhac5fpZniuGJu1u012TdmVMtpNT8lhpjff%2FHsG6PKnW6y0aSr%2FV7vjCZ37QnuPNTot2RCvwO7TZgVMFlDs3mXZTjcmF2q9I1Jj879a7YPQQTh%2BCqxnQLADNh626D7o2bLR9bMbfhcq69KKm%2BUVuIsVr3EQQpkCSVpBueNv6lDwx2dSTM79B8qPLdy7sPxQ8%2FQe4LZDYAu%2BruwRdfXN4zeRk55rJHfl2NUlVpDZpucXrKU3lzJ3X5EZurFhedIMvX%2BIlUJb7b0qXrtBYqLjryFcLSghpl4zlkny%2F7N6W7Grm1hYyG2fJytWXl5ajxErnlIlHoOp49S9wNSaVDw4m3%2FPRnz%2BCsiPYrECUHZGzgDKH4MkWXDJV78wMrJ5yWFJBnhVDW2fTR60ItJz2lBVw%2F%2BrZtN52N9G1ddD0BuKoQM8W6OkCVA%2FgsoeHaWKPLv%2F0WRmfg%2BnKkGlb2WHa6ltjUn3qk9Lfe%2BV1%2BsBpp06qc75oMRnKFpONZiOUXLBmk%2Fk85GxOtNscqRvzF39%2F4W8AAAD%2F%2FwEAAP%2F%2FS%2BEM2ngEAAA%3D
200 OK 7 B URL HTTP/1.1 familiarkindlyshuffle.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3syPn%2BhFZS%2FCHgZBUXAn3ZOZzIyLLsYYCcbNuquoJ6l%2FPSlT3dVUdU9PcoquyB48jLAXxUPnm2SDaxDFs0EmCyJBIXOLuLl58CwsHqVng6MPqt579X2H732vPt7OTomPjJ4svm42ldZ0tlnzq8%2B8EwSXqisqzvrVfnv%2BvfnGpartPd%2BZr%2FnPVl%2BVfN3M1v3A9wM%2FqC4pK0PTny1BqGS%2FE9Q6fq1RrwXNBvr2v73LPDjqQfROyeNQYly5652H4iPE0TeL0q2nJnnulSjTNDUWPbH3VrwemzxGNC1D6yGM987YMO546QAm3p3Ihen9Q2RqTLwfD8DivTORYL2diU6mIWMw8Qjy3ghSj6DoCNzcgBLHBOACV1YRR7evGJvTjQcoLdExqdz%2FEyofk8q984ijrxe06levG52lysQO%2FbCA6o%2BguiMk2SHSzXNQ%2BSF4%2BiGU%2BIXM3l9BHO2sOm2gRDGZXakRVDiClgNQ5yErj%2FKQhR6yxEMkTqo8CIKWLzj12x3O50RLsnnhB7QVBjTw59vIeClvgDQZgOsBuN1CYrewrj49Jl%2FAZj%2FArRVwwoNLx8R7Yws9USCXBLkjyClBrgjylCDvFbtCu7orbgvtMhac5fpZniuGJu1u012TdmVMtpNT8lhpjff%2FHsG6PKnW6y0aSr%2FV7vjCZ37QnuPNTot2RCvwO7TZgVMFlDs3mXZTjcmF2q9I1Jj879a7YPQQTh%2BCqxnQLADNh626D7o2bLR9bMbfhcq69KKm%2BUVuIsVr3EQQpkCSVpBueNv6lDwx2dSTM79B8qPLdy7sPxQ8%2FQe4LZDYAu%2BruwRdfXN4zeRk55rJHfl2NUlVpDZpucXrKU3lzJ3X5EZurFhedIMvX%2BIlUJb7b0qXrtBYqLjryFcLSghpl4zlkny%2F7N6W7Grm1hYyG2fJytWXl5ajxErnlIlHoOp49S9wNSaVDw4m3%2FPRnz%2BCsiPYrECUHZGzgDKH4MkWXDJV78wMrJ5yWFJBnhVDW2fTR60ItJz2lBVw%2F%2BrZtN52N9G1ddD0BuKoQM8W6OkCVA%2FgsoeHaWKPLv%2F0WRmfg%2BnKkGlb2WHa6ltjUn3qk9Lfe%2BV1%2BsBpp06qc75oMRnKFpONZiOUXLBmk%2Fk85GxOtNscqRvzF39%2F4W8AAAD%2F%2FwEAAP%2F%2FS%2BEM2ngEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3syPn%2BhFZS%2FCHgZBUXAn3ZOZzIyLLsYYCcbNuquoJ6l%2FPSlT3dVUdU9PcoquyB48jLAXxUPnm2SDaxDFs0EmCyJBIXOLuLl58CwsHqVng6MPqt579X2H732vPt7OTomPjJ4svm42ldZ0tlnzq8%2B8EwSXqisqzvrVfnv%2BvfnGpartPd%2BZr%2FnPVl%2BVfN3M1v3A9wM%2FqC4pK0PTny1BqGS%2FE9Q6fq1RrwXNBvr2v73LPDjqQfROyeNQYly5652H4iPE0TeL0q2nJnnulSjTNDUWPbH3VrwemzxGNC1D6yGM987YMO546QAm3p3Ihen9Q2RqTLwfD8DivTORYL2diU6mIWMw8Qjy3ghSj6DoCNzcgBLHBOACV1YRR7evGJvTjQcoLdExqdz%2FEyofk8q984ijrxe06levG52lysQO%2FbCA6o%2BguiMk2SHSzXNQ%2BSF4%2BiGU%2BIXM3l9BHO2sOm2gRDGZXakRVDiClgNQ5yErj%2FKQhR6yxEMkTqo8CIKWLzj12x3O50RLsnnhB7QVBjTw59vIeClvgDQZgOsBuN1CYrewrj49Jl%2FAZj%2FArRVwwoNLx8R7Yws9USCXBLkjyClBrgjylCDvFbtCu7orbgvtMhac5fpZniuGJu1u012TdmVMtpNT8lhpjff%2FHsG6PKnW6y0aSr%2FV7vjCZ37QnuPNTot2RCvwO7TZgVMFlDs3mXZTjcmF2q9I1Jj879a7YPQQTh%2BCqxnQLADNh626D7o2bLR9bMbfhcq69KKm%2BUVuIsVr3EQQpkCSVpBueNv6lDwx2dSTM79B8qPLdy7sPxQ8%2FQe4LZDYAu%2BruwRdfXN4zeRk55rJHfl2NUlVpDZpucXrKU3lzJ3X5EZurFhedIMvX%2BIlUJb7b0qXrtBYqLjryFcLSghpl4zlkny%2F7N6W7Grm1hYyG2fJytWXl5ajxErnlIlHoOp49S9wNSaVDw4m3%2FPRnz%2BCsiPYrECUHZGzgDKH4MkWXDJV78wMrJ5yWFJBnhVDW2fTR60ItJz2lBVw%2F%2BrZtN52N9G1ddD0BuKoQM8W6OkCVA%2FgsoeHaWKPLv%2F0WRmfg%2BnKkGlb2WHa6ltjUn3qk9Lfe%2BV1%2BsBpp06qc75oMRnKFpONZiOUXLBmk%2Fk85GxOtNscqRvzF39%2F4W8AAAD%2F%2FwEAAP%2F%2FS%2BEM2ngEAAA%3D HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17266176; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3b98c8e9f424c395b01bdcd138a803a5
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash da32fcedc22c3f8071079610e24227d2
b80c8b3315fe0dfdbf02cb1e46ec49fce2e6d858
3dbffb2bb666ae31dbbb9611ad68b92c6bc7da1750d5bac1c0dea372f34f39e8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "3DBFFB2BB666AE31DBBB9611AD68B92C6BC7DA1750D5BAC1C0DEA372F34F39E8"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8439
Expires: Thu, 06 Oct 2022 16:45:41 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
creepingbrings.com/sfp.js
200 OK 28 kB URL HTTP/2 creepingbrings.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 1e77d95764eab5287b0fbba66721b36b
914f622bc0c251c2ad4a61a900ab9ec77e52fb40
366dfe66a86ff840901c1f53055e2cd0a04e09b94e6d322dc673e417e6be4d3e
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:01 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 199a876496bcdf1fdef923778f332634
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 06 Oct 2022 14:25:00 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j5Ot5PVKJaiWfCo6oH1OCUj2vVoetzvrGlJ%2Bv4AvIm6MtkpmQFNoCSWZpODh5V%2BmNHewTYpOHvyDpBY7yqS8W3RD8UOKSVU%2FWFM7IKnF4IWkYQ5onq8sXXLYHt37vCLhIx1sabM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 755f105c2ca175d7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
familiarkindlyshuffle.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3syPn%2BhFZS%2FCHhpBUXAn3T2T6RkXXYwxEoybdVdRT1Jd1TMpU93VVPWfSU7RFdmDhxH2onjofJNscA2ieDbIZEEkKGRuETc3D56FxaP07ODog6r3Xn3f4Xvfq493sjPiIKOnS6%2BrLSElnV%2BoO%2FYz77juJXtVxFnf7rdb77Wal2ydP99p1Z1n7VdDtqHmPcd1HNdx7WWhw67qz1cgRHLQcesdp9706u5CE339395kFgy1wPMz8jgEH9fuWuch2Ahx9M1SaDZSlTz3SpRJmiqNnO%2B%2FFW%2FEqogRzcquttCN96dsKHOyfAgV703kQuX%2FEAMxJtaPhwji%2FalIBPnuRGcgEcYI%2BCMo8hFCOYKgIzB1A4KfEIBxXFlDHN2%2BonRBNx%2BgtELHpHb%2FT4hiTGr3ziOOvl6Uom9fVzJLhYoN%2Bt0Soj%2BC6I2QZEdIt85BFEdg6YcQ%2FBcyf38VcbS7ZqSC4OVkdiFGEN0RZDgANRay6ggLWddClliI%2BKnNXNf1Hc6o0%2B4w1uB%2BGLS441K%2F61LXabWRsUreAGkyAJMDML2NRG9jQ3x6Qr6Azn6AWS9huAWTjon1xjZyXqIICQpDUFCCQhAUKUGRl3tcGs%2BUt7k0WeBOszfNjXKo0t4O3VNpL4zJTnJGHqussf6fE2yEp7bn%2BbQbOn6743AncNx2gy10fNrhvut06EIHRpQQ5txk2i0xJhfqvyIRY%2FK%2FW%2B8ioEcw8ghMzIFmLmgx9D0HdH3YbDvYir%2FrCm3Si5IWF5mKBKszFYGrEklaQ7pp7cgz8sRkU0%2FO%2FYaQHV%2B%2Bc%2BHgIffpP8B0iUSXeF%2FcJejJm8NrqiC711RhyLdrSSoisUWrLV5PaRrO3Xkt3CyU5itLZvDlS6wCqvLgzdCkqzTmIu4Z8tWi4DzUy0qzkHy%2FYt4Og6uZWV%2FMdJwlq1dfXl6JEh0aI1Q8AhUna3%2BBiTGpfXA4%2BZ6P%2FvwRhB5BZyWi7JhMA0IdgSXbMMlMvVFz0HLGCZIaiqwcai%2BYPUpBIMNZT4MS5l99MKt3zE30tAea3kAclch1iVyWoHIAkz08TBN9fPmnz6r4HIGsDQOpa7uB1PLWmNhPfVL5e6%2B6zh44bcSp7TcaDm11Flzfp6EfNL12t%2BVySr1my2u1aAOpGbMXf3%2FhbwAAAP%2F%2FAQAA%2F%2F%2FLNdkyeAQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 familiarkindlyshuffle.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3syPn%2BhFZS%2FCHhpBUXAn3T2T6RkXXYwxEoybdVdRT1Jd1TMpU93VVPWfSU7RFdmDhxH2onjofJNscA2ieDbIZEEkKGRuETc3D56FxaP07ODog6r3Xn3f4Xvfq493sjPiIKOnS6%2BrLSElnV%2BoO%2FYz77juJXtVxFnf7rdb77Wal2ydP99p1Z1n7VdDtqHmPcd1HNdx7WWhw67qz1cgRHLQcesdp9706u5CE339395kFgy1wPMz8jgEH9fuWuch2Ahx9M1SaDZSlTz3SpRJmiqNnO%2B%2FFW%2FEqogRzcquttCN96dsKHOyfAgV703kQuX%2FEAMxJtaPhwji%2FalIBPnuRGcgEcYI%2BCMo8hFCOYKgIzB1A4KfEIBxXFlDHN2%2BonRBNx%2BgtELHpHb%2FT4hiTGr3ziOOvl6Uom9fVzJLhYoN%2Bt0Soj%2BC6I2QZEdIt85BFEdg6YcQ%2FBcyf38VcbS7ZqSC4OVkdiFGEN0RZDgANRay6ggLWddClliI%2BKnNXNf1Hc6o0%2B4w1uB%2BGLS441K%2F61LXabWRsUreAGkyAJMDML2NRG9jQ3x6Qr6Azn6AWS9huAWTjon1xjZyXqIICQpDUFCCQhAUKUGRl3tcGs%2BUt7k0WeBOszfNjXKo0t4O3VNpL4zJTnJGHqussf6fE2yEp7bn%2BbQbOn6743AncNx2gy10fNrhvut06EIHRpQQ5txk2i0xJhfqvyIRY%2FK%2FW%2B8ioEcw8ghMzIFmLmgx9D0HdH3YbDvYir%2FrCm3Si5IWF5mKBKszFYGrEklaQ7pp7cgz8sRkU0%2FO%2FYaQHV%2B%2Bc%2BHgIffpP8B0iUSXeF%2FcJejJm8NrqiC711RhyLdrSSoisUWrLV5PaRrO3Xkt3CyU5itLZvDlS6wCqvLgzdCkqzTmIu4Z8tWi4DzUy0qzkHy%2FYt4Og6uZWV%2FMdJwlq1dfXl6JEh0aI1Q8AhUna3%2BBiTGpfXA4%2BZ6P%2FvwRhB5BZyWi7JhMA0IdgSXbMMlMvVFz0HLGCZIaiqwcai%2BYPUpBIMNZT4MS5l99MKt3zE30tAea3kAclch1iVyWoHIAkz08TBN9fPmnz6r4HIGsDQOpa7uB1PLWmNhPfVL5e6%2B6zh44bcSp7TcaDm11Flzfp6EfNL12t%2BVySr1my2u1aAOpGbMXf3%2FhbwAAAP%2F%2FAQAA%2F%2F%2FLNdkyeAQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RST2gkxReu3syPn%2BhFZS%2FCHhpBUXAn3T2T6RkXXYwxEoybdVdRT1Jd1TMpU93VVPWfSU7RFdmDhxH2onjofJNscA2ieDbIZEEkKGRuETc3D56FxaP07ODog6r3Xn3f4Xvfq493sjPiIKOnS6%2BrLSElnV%2BoO%2FYz77juJXtVxFnf7rdb77Wal2ydP99p1Z1n7VdDtqHmPcd1HNdx7WWhw67qz1cgRHLQcesdp9706u5CE339395kFgy1wPMz8jgEH9fuWuch2Ahx9M1SaDZSlTz3SpRJmiqNnO%2B%2FFW%2FEqogRzcquttCN96dsKHOyfAgV703kQuX%2FEAMxJtaPhwji%2FalIBPnuRGcgEcYI%2BCMo8hFCOYKgIzB1A4KfEIBxXFlDHN2%2BonRBNx%2BgtELHpHb%2FT4hiTGr3ziOOvl6Uom9fVzJLhYoN%2Bt0Soj%2BC6I2QZEdIt85BFEdg6YcQ%2FBcyf38VcbS7ZqSC4OVkdiFGEN0RZDgANRay6ggLWddClliI%2BKnNXNf1Hc6o0%2B4w1uB%2BGLS441K%2F61LXabWRsUreAGkyAJMDML2NRG9jQ3x6Qr6Azn6AWS9huAWTjon1xjZyXqIICQpDUFCCQhAUKUGRl3tcGs%2BUt7k0WeBOszfNjXKo0t4O3VNpL4zJTnJGHqussf6fE2yEp7bn%2BbQbOn6743AncNx2gy10fNrhvut06EIHRpQQ5txk2i0xJhfqvyIRY%2FK%2FW%2B8ioEcw8ghMzIFmLmgx9D0HdH3YbDvYir%2FrCm3Si5IWF5mKBKszFYGrEklaQ7pp7cgz8sRkU0%2FO%2FYaQHV%2B%2Bc%2BHgIffpP8B0iUSXeF%2FcJejJm8NrqiC711RhyLdrSSoisUWrLV5PaRrO3Xkt3CyU5itLZvDlS6wCqvLgzdCkqzTmIu4Z8tWi4DzUy0qzkHy%2FYt4Og6uZWV%2FMdJwlq1dfXl6JEh0aI1Q8AhUna3%2BBiTGpfXA4%2BZ6P%2FvwRhB5BZyWi7JhMA0IdgSXbMMlMvVFz0HLGCZIaiqwcai%2BYPUpBIMNZT4MS5l99MKt3zE30tAea3kAclch1iVyWoHIAkz08TBN9fPmnz6r4HIGsDQOpa7uB1PLWmNhPfVL5e6%2B6zh44bcSp7TcaDm11Flzfp6EfNL12t%2BVySr1my2u1aAOpGbMXf3%2FhbwAAAP%2F%2FAQAA%2F%2F%2FLNdkyeAQAAA%3D%3D HTTP/1.1
Host: familiarkindlyshuffle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17266176; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec227afe07890d0b0183c597a9d7109a59=[2106764,2229213,2229214,2229212]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6fca877d1427f291c3651283700b19f6
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 61e5079a0e6812f78348c7a622279320
5295836d509d9eaee1c31bd129d08b65d0860a89
ff528b3e3551facb4aaf40f7c4befd70da4e707d5aed4bc9b49ca7905791f14d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "FF528B3E3551FACB4AAF40F7C4BEFD70DA4E707D5AED4BC9B49CA7905791F14D"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4521
Expires: Thu, 06 Oct 2022 15:40:23 GMT
Date: Thu, 06 Oct 2022 14:25:02 GMT
Connection: keep-alive
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/css/style.css
200 OK 1.0 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/css/style.css
IP
Hash 20710b5df582884b3779bc24c1977cdd
58e7736a6a076efdf1e4d7a9fea88bfe4ace2fa7
49592242422c4a7f3bd1d57f6818aaa9c7ae5e236f13fc01939ab9abc3cd74b5
GET /sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: text/css
last-modified: Mon, 31 Jan 2022 15:54:46 GMT
etag: W/"61f80646-e35"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lspU4xzE52MWUbFIQYtG2%2BRHfGAfrF4FOR%2FNEWVzLLoAK8qd5R9yZigBG0eQLdzjWoHYMQEa1UEgIT2miflp5%2B7skuRwKogm8IclBf8FCxPaoka8WnMvSeFzrWB4GKSZg80%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 755f1066dbf775cf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/js/script.js
200 OK 189 B URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/js/script.js
IP
Hash e92fccb89580145c885f0359badbd628
bed02f01f78b1f585462796e01527a268ac7f24c
f9fdf22943d31068189a6e1329d6bc9bf9ebc39b5ce4ccbd1d3a2f99f82a0597
GET /sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/js/script.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: application/javascript
last-modified: Tue, 17 Aug 2021 13:04:06 GMT
etag: W/"611bb3c6-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BzoLCMOl6F9vkj5q8l7Hg5Os%2BrNxqt5tqoUF3%2FNqaRvXMsaQjgT9tRpkZkem3dz9xb9VkW6tl3eUpALp6O6v7G1aXjQ0Tzq%2FctB6JUEhp2YWazM%2BOoYTbhLEMItJNfJjLf0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 755f1066dc0375cf-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=2d404f95-3fac-4654-8562-aa3b33474785&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=0f657ed4f7d7a84b80fbc385320472c7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=14
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=2d404f95-3fac-4654-8562-aa3b33474785&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=0f657ed4f7d7a84b80fbc385320472c7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=14
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=2d404f95-3fac-4654-8562-aa3b33474785&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=0f657ed4f7d7a84b80fbc385320472c7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=14 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 06 Oct 2022 14:25:02 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1182198a476a5af33c7773c4298d0f55
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/index.html
200 OK 5.2 kB URL HTTP/2 cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/index.html
IP
File type HTML document text\012- HTML document, ASCII text
Hash 7c1cbd635bc37392a527fb7327e2683c
1bc47330e4b42d08c62512353a0215bdf4ff4b05
7b872d9074f101ce76b4d80bbaafa53fa9115d093cde778a0791eaaf6e07f259
GET /sb/notifications/utility/default/us/blog/Progamerage/message_redcircle2/3/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://first-law-comic.com
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: text/html
last-modified: Tue, 01 Feb 2022 10:33:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 13136
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FKdYiSNKpcMZbB3RptTsFP9mE7jXMgwWvdTHY0q%2B12AZCxxFvbZqTOP1NF2ybZ%2BRGqW8Um5q55D7JY1ypC%2BUSwyC7O3ZGKjFs4bpRv1rJzGSHVOgrbtmGjBZRDmDQKWDn5MsdfQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 755f1065f843b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 61e5079a0e6812f78348c7a622279320
5295836d509d9eaee1c31bd129d08b65d0860a89
ff528b3e3551facb4aaf40f7c4befd70da4e707d5aed4bc9b49ca7905791f14d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "FF528B3E3551FACB4AAF40F7C4BEFD70DA4E707D5AED4BC9B49CA7905791F14D"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4520
Expires: Thu, 06 Oct 2022 15:40:23 GMT
Date: Thu, 06 Oct 2022 14:25:03 GMT
Connection: keep-alive
intimidatekerneljames.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRi9r4kiuFK6UVRm4ULBmbw3v8dCizVGgmlTWkVd6f31Jtfc9%2B7j3vfmTbIKFqTLKbp08XImaagGqejWIpNCFwEho5sRzc4%2FQISuXMhMg6Pf5jvnnbM473z3s93slPjI6GT5itlWWtOlRsUvvfJBEFworak465f67eZHzfqFku293mlW%2FFdLb0u%2BaZaqfuD7gR%2BUVpSVoekvTUWo5LATVDp%2BpV6tBI06%2Bvb%2F3GUeHPUgeqfkWSgxXnzgnYfiI8TRvWXpNlOTvPZWlGmaGoueOHgv3oxNHiOaw9B6COODMzeMO1m5DxPvz%2BLC9P41MjUm3sP7YPHBWUiw3t4sJ9OQMZh4GnlvBKlHUHQEbm5CiRMCcIGr64ijO1eNzenWY5VO1TFZfPQXVD4mi7%2BfRxx9c1mrfumG0VmqTOzQDwuo%2FgiqO0KSHSHdPgeVH4Gnn0KJn8jSozXE0d660wZKTF5mwm82WCDLQnQa5XqNVsvtQLbLzbDDmpJ3RK3GZgUpNYIKR9ByAOoWkDkPmfKQhR6yxEMkJiUeBEHLF5z67Q7nNdGSrCn8gLbCgAZ%2Bs42MT%2F9hgDQZgOsBuN1BYnewqW6fkC9hsx%2FhNgo44cGlBD1RIJcEuSPIKUGuCPKUIO8V%2B0K7qivuCO0yFpzt6tmuFUOTdnfpvkm7Mia7ySl5Ztqd9%2BTh59iUk5IfNhstKephS7Rou87afsh4rd2oVf16q8pbcKqAcudAnYdtNSYvVH5FosbkiS8%2BBKNHcPoIXC2AZi%2BC5sNW1QfdGNbbPrbj70JlXVrWNC9zEyle4SaCMAWSdBHplrerT8lzs1PWftGQ%2FPjSx%2BzK%2BM%2B7f4PbAokt8Il6QNDVt4bXTU72rpvckW%2FXk1RFaptOz3wjpalc%2BOoduZUbK1aX3eDuG3wqTOHhu9KlazQWKu468vVlJYS0K8ZySX5Yde9Ldi1zG5czG2fJ2rU3V1ajxErnlIlHoGpMyMNjcDUmT30%2Fmb3g53%2B7B2VHsFmBKDsmZwNljsCTHbhknt%2BZBVg997DEQ54VQ1tl849aEWg555QVcP%2FhbI533S107Uug6U3EUYGeLdDTBagewGULwzSxx5d%2Brs0GTHtDpq23x7TVtx%2BX69SkVPNFi8lQtpisN%2Bqh5II1GsznIWc10W5zpG7ML%2F5x8R8AAAD%2F%2FwEAAP%2F%2FXreSg4wEAAA%3D
200 OK 7 B URL HTTP/1.1 intimidatekerneljames.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRi9r4kiuFK6UVRm4ULBmbw3v8dCizVGgmlTWkVd6f31Jtfc9%2B7j3vfmTbIKFqTLKbp08XImaagGqejWIpNCFwEho5sRzc4%2FQISuXMhMg6Pf5jvnnbM473z3s93slPjI6GT5itlWWtOlRsUvvfJBEFworak465f67eZHzfqFku293mlW%2FFdLb0u%2BaZaqfuD7gR%2BUVpSVoekvTUWo5LATVDp%2BpV6tBI06%2Bvb%2F3GUeHPUgeqfkWSgxXnzgnYfiI8TRvWXpNlOTvPZWlGmaGoueOHgv3oxNHiOaw9B6COODMzeMO1m5DxPvz%2BLC9P41MjUm3sP7YPHBWUiw3t4sJ9OQMZh4GnlvBKlHUHQEbm5CiRMCcIGr64ijO1eNzenWY5VO1TFZfPQXVD4mi7%2BfRxx9c1mrfumG0VmqTOzQDwuo%2FgiqO0KSHSHdPgeVH4Gnn0KJn8jSozXE0d660wZKTF5mwm82WCDLQnQa5XqNVsvtQLbLzbDDmpJ3RK3GZgUpNYIKR9ByAOoWkDkPmfKQhR6yxEMkJiUeBEHLF5z67Q7nNdGSrCn8gLbCgAZ%2Bs42MT%2F9hgDQZgOsBuN1BYnewqW6fkC9hsx%2FhNgo44cGlBD1RIJcEuSPIKUGuCPKUIO8V%2B0K7qivuCO0yFpzt6tmuFUOTdnfpvkm7Mia7ySl5Ztqd9%2BTh59iUk5IfNhstKephS7Rou87afsh4rd2oVf16q8pbcKqAcudAnYdtNSYvVH5FosbkiS8%2BBKNHcPoIXC2AZi%2BC5sNW1QfdGNbbPrbj70JlXVrWNC9zEyle4SaCMAWSdBHplrerT8lzs1PWftGQ%2FPjSx%2BzK%2BM%2B7f4PbAokt8Il6QNDVt4bXTU72rpvckW%2FXk1RFaptOz3wjpalc%2BOoduZUbK1aX3eDuG3wqTOHhu9KlazQWKu468vVlJYS0K8ZySX5Yde9Ldi1zG5czG2fJ2rU3V1ajxErnlIlHoGpMyMNjcDUmT30%2Fmb3g53%2B7B2VHsFmBKDsmZwNljsCTHbhknt%2BZBVg997DEQ54VQ1tl849aEWg555QVcP%2FhbI533S107Uug6U3EUYGeLdDTBagewGULwzSxx5d%2Brs0GTHtDpq23x7TVtx%2BX69SkVPNFi8lQtpisN%2Bqh5II1GsznIWc10W5zpG7ML%2F5x8R8AAAD%2F%2FwEAAP%2F%2FXreSg4wEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRi9r4kiuFK6UVRm4ULBmbw3v8dCizVGgmlTWkVd6f31Jtfc9%2B7j3vfmTbIKFqTLKbp08XImaagGqejWIpNCFwEho5sRzc4%2FQISuXMhMg6Pf5jvnnbM473z3s93slPjI6GT5itlWWtOlRsUvvfJBEFworak465f67eZHzfqFku293mlW%2FFdLb0u%2BaZaqfuD7gR%2BUVpSVoekvTUWo5LATVDp%2BpV6tBI06%2Bvb%2F3GUeHPUgeqfkWSgxXnzgnYfiI8TRvWXpNlOTvPZWlGmaGoueOHgv3oxNHiOaw9B6COODMzeMO1m5DxPvz%2BLC9P41MjUm3sP7YPHBWUiw3t4sJ9OQMZh4GnlvBKlHUHQEbm5CiRMCcIGr64ijO1eNzenWY5VO1TFZfPQXVD4mi7%2BfRxx9c1mrfumG0VmqTOzQDwuo%2FgiqO0KSHSHdPgeVH4Gnn0KJn8jSozXE0d660wZKTF5mwm82WCDLQnQa5XqNVsvtQLbLzbDDmpJ3RK3GZgUpNYIKR9ByAOoWkDkPmfKQhR6yxEMkJiUeBEHLF5z67Q7nNdGSrCn8gLbCgAZ%2Bs42MT%2F9hgDQZgOsBuN1BYnewqW6fkC9hsx%2FhNgo44cGlBD1RIJcEuSPIKUGuCPKUIO8V%2B0K7qivuCO0yFpzt6tmuFUOTdnfpvkm7Mia7ySl5Ztqd9%2BTh59iUk5IfNhstKephS7Rou87afsh4rd2oVf16q8pbcKqAcudAnYdtNSYvVH5FosbkiS8%2BBKNHcPoIXC2AZi%2BC5sNW1QfdGNbbPrbj70JlXVrWNC9zEyle4SaCMAWSdBHplrerT8lzs1PWftGQ%2FPjSx%2BzK%2BM%2B7f4PbAokt8Il6QNDVt4bXTU72rpvckW%2FXk1RFaptOz3wjpalc%2BOoduZUbK1aX3eDuG3wqTOHhu9KlazQWKu468vVlJYS0K8ZySX5Yde9Ldi1zG5czG2fJ2rU3V1ajxErnlIlHoGpMyMNjcDUmT30%2Fmb3g53%2B7B2VHsFmBKDsmZwNljsCTHbhknt%2BZBVg997DEQ54VQ1tl849aEWg555QVcP%2FhbI533S107Uug6U3EUYGeLdDTBagewGULwzSxx5d%2Brs0GTHtDpq23x7TVtx%2BX69SkVPNFi8lQtpisN%2Bqh5II1GsznIWc10W5zpG7ML%2F5x8R8AAAD%2F%2FwEAAP%2F%2FXreSg4wEAAA%3D HTTP/1.1
Host: intimidatekerneljames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17214611; uid_id2=bd065b1e-dd95-43a2-81e8-6f9b6ec9d33b:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0f657ed4f7d7a84b80fbc385320472c7=[3396716]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:03 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5152a47a22a26e79a01a685817fc0b61
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0119667a49070dc7a06156fcdc462fb5
32eae001dab07cf11b86324b415e6ef652035f4d
8cd60209d89765a1efaf7885928094182d3d032cb0a827bdb0ce2a0e2204cb83
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8CD60209D89765A1EFAF7885928094182D3D032CB0A827BDB0CE2A0E2204CB83"
Last-Modified: Tue, 04 Oct 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13509
Expires: Thu, 06 Oct 2022 18:10:12 GMT
Date: Thu, 06 Oct 2022 14:25:03 GMT
Connection: keep-alive
intimidatekerneljames.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 intimidatekerneljames.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: intimidatekerneljames.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Cookie: u_pl=17214611; uid_id2=bd065b1e-dd95-43a2-81e8-6f9b6ec9d33b:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec0f657ed4f7d7a84b80fbc385320472c7=[3396716]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Thu, 06 Oct 2022 14:25:03 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0e2f6155cd2336caaeaf0e6041a31652
0649f2daff3524149f877008d8276d9d7bd03599
d2b84f46aeeab6185f788a69c227c7557640ebf3de0323f2781d05770e198ad5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2B84F46AEEAB6185F788A69C227C7557640EBF3DE0323F2781D05770E198AD5"
Last-Modified: Tue, 04 Oct 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13706
Expires: Thu, 06 Oct 2022 18:13:29 GMT
Date: Thu, 06 Oct 2022 14:25:03 GMT
Connection: keep-alive
spellingunacceptable.com/pixel/purst?dl=0&th=0&sc=0&rs=3440&rd=3440&fd=471&bv=22.8.v.2&tmpl=136
200 OK 0 B URL HTTP/1.1 spellingunacceptable.com/pixel/purst?dl=0&th=0&sc=0&rs=3440&rd=3440&fd=471&bv=22.8.v.2&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=3440&rd=3440&fd=471&bv=22.8.v.2&tmpl=136 HTTP/1.1
Host: spellingunacceptable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 06 Oct 2022 14:25:03 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 06 Oct 2022 14:25:03 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1ef40e42f9531893a8b52ef3c8c4fad5
Strict-Transport-Security: max-age=0; includeSubdomains
stats.wp.com/e-202240.js
200 OK 0 B IP
GET /e-202240.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 14:25:00 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Mon, 25 Sep 2023 06:12:14 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
200 OK 0 B URL HTTP/2 addresseepaper.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 14:25:02 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 2adcc31271de5274c63731935f605567
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Thu, 06 Oct 2022 14:25:02 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ocpUTnUIZ0JLJ58DxA35F8brO9I9IFthNUBYhF2SoKA1umMxXK%2B1Jg03NZtu2FqRdAj4vfrWDsrls6uVO01CItLB6%2B3cIk807ivA63ErrQXlGoGebpi%2BfdQGZImWc8MttvJqCE0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 755f10680f06754d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/embed/wIio4p3RmfY?feature=oembed
200 OK 0 B URL HTTP/2 www.youtube.com/embed/wIio4p3RmfY?feature=oembed
IP
GET /embed/wIio4p3RmfY?feature=oembed HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://first-law-comic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 06 Oct 2022 14:25:00 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=q55IaUSGzZk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=sgJrI9pVfVg; Domain=.youtube.com; Expires=Tue, 04-Apr-2023 14:25:00 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+818; expires=Sat, 05-Oct-2024 14:25:00 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
188.114.96.1
172.217.21.170
93.184.220.29
23.36.77.32
3.67.146.56
104.22.70.197