www.armyleaf.sa.com/kvmesxtxu/hxdpqmma875575mnvkfc/vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
200 OK 517 B URL HTTP/1.1 www.armyleaf.sa.com/kvmesxtxu/hxdpqmma875575mnvkfc/vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b349c181d992d8b69f1dcd25bc14cd1f
31d29ea585d7e25a8fd8943f892d844c5cf31613
6a595f2289e415b501e31441c86a2b15cf4820cebcb95da9d5aeac68d56e5f64
Analyzer Verdict Alert fortinet Malware
quad9 Sinkholed
GET /kvmesxtxu/hxdpqmma875575mnvkfc/vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AW06cg9V2gWCJ14JM8c8NMzA7guBdgoVJaWXnDQVc6zlMrEkpvDMyAdAjs5fwjWV1CR3UPQkynE6dWR3UuWo3vpb0SbAPneu9CGLpSHNa97Cm87sjCLykAs7zalif4jr10ZKQK37"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ad07d69b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 15:15:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: snh77ZBFHdOXwUg4Xm-JUxN7arb3GJf5_XodJT-wpnsvRv4fUqIVxw==
Age: 3544
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3390
Expires: Mon, 26 Sep 2022 17:10:53 GMT
Date: Mon, 26 Sep 2022 16:14:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1017811d25642601e984edc1676d118d
c177c4f7a897584bf91347fa4990c83d6bfd0321
f35bb3a8c877dd8d3c5920f3c917722f12b157aff398e2ec30fab51fa6caa2ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F35BB3A8C877DD8D3C5920F3C917722F12B157AFF398E2EC30FAB51FA6CAA2EF"
Last-Modified: Mon, 26 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12251
Expires: Mon, 26 Sep 2022 19:38:34 GMT
Date: Mon, 26 Sep 2022 16:14:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: EchUkNsK3VSDHzkbFEqkJdAeDzqVNDYdtllJ6UKxLqf16rRCtZTYYz3nCOLDGMnzW710B04+KpA=
x-amz-request-id: Y8C9WYJJXZFZECAN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 26 Sep 2022 15:48:45 GMT
age: 1538
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 16:14:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-22484186-3
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-22484186-3
IP
File type ASCII text, with very long lines (1720)
Hash c5e50ba2f57967971b6afdd1e3c32356
1e73dc07e98ed5c6a7bb8f3025b21df366abfe74
d32236c47bb571522f9d69e0933d4878aed484bc2e446587649a4b6b3e173539
GET /gtag/js?id=UA-22484186-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 16:14:23 GMT
expires: Mon, 26 Sep 2022 16:14:23 GMT
cache-control: private, max-age=900
last-modified: Mon, 26 Sep 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42260
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.armyleaf.sa.com/jquery-1.11.0.min.js
200 OK 33 kB URL HTTP/1.1 www.armyleaf.sa.com/jquery-1.11.0.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 95fe3f4dd117c33f6015e1c3d6df1d0d
d5b8856932d1ea63f51824de0bb50670d2e960bc
e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
Analyzer Verdict Alert quad9 Sinkholed
GET /jquery-1.11.0.min.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/kvmesxtxu/hxdpqmma875575mnvkfc/vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:03:39 GMT
ETag: W/"62e8238b-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yx27ls9%2BOxRGxllRn9YNqlD1Q7AhXxXUqFo5wVjD%2BLulTIP7Bv0ZKmsm0CP3SWkXFZ%2F5BJpDs%2FQxKWrLYGiAUoI3rFBtXIKq74i6iLs8q2NWh0BEATaeeJP3cg63us3UqmUPZK7c"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad2a8e6b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/s/gts1p5/rJt0REDlw3A
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/rJt0REDlw3A
IP
Hash df3477fc3babf240b16a715c82a2c236
ed93c59dd3f1acdfb9c002ae14a94c25d6fe79ba
b042a70a26baf53d1d52dc7fcaaa8f338fdcbbdc943a95125b18a5bdc714dbbf
POST /s/gts1p5/rJt0REDlw3A HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:23 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 26 Sep 2022 16:10:46 GMT
Expires: Mon, 26 Sep 2022 16:42:05 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0w_BZ_yWTB6hb8Nd38oZzs2C2o_uyZYwrcwMxlN7U08IfuZir2g0sg==
Age: 217
ocsp.pki.goog/s/gts1p5/rJt0REDlw3A
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/rJt0REDlw3A
IP
Hash df3477fc3babf240b16a715c82a2c236
ed93c59dd3f1acdfb9c002ae14a94c25d6fe79ba
b042a70a26baf53d1d52dc7fcaaa8f338fdcbbdc943a95125b18a5bdc714dbbf
POST /s/gts1p5/rJt0REDlw3A HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:23 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/flipclock.css
200 OK 1.4 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/flipclock.css
IP
File type ASCII text, with very long lines (7726), with no line terminators
Hash 0dc87eeac215cd6aaf25d722d2e5888f
890688e3a41b20ad25249c8367f45273764c7757
a6ef0d00ef3be3df2a3d6d378418b501afca9238433e61420c1d3947cfb69e0c
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/flipclock.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-1e2e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fJNTQqOr9BplD70d4msoEx9b5ZlnuWpIP%2B8GjHwaXnVw7zCT2VDADwbYrh%2B5KXuBKShJvpw6Neb3SRqh8WOnIFpwjs1KzRE9E%2BsQkm8ksJ%2B4nxsOc6CxtmrqgNRXmJdjRMOiNx%2FO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad6decab50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/intlTelInput.css
200 OK 3.1 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/intlTelInput.css
IP
File type ASCII text, with very long lines (21119), with no line terminators
Hash 86ffe28459f65fe5ee3fa41187de1ef0
54b79fc47cd6e28db115204834c99aec6333c30f
cbbc17461b4b2f8db91309930fa34e02f9eb0e6507591d637043e740d9f75460
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/intlTelInput.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-527f"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ei6L7lbCxlhnkpgFj3rhgVBz0Qp2XnhdjtM7vRHNzYZChFf3GMOtjwlDjWrOA1Fykz19nNE%2FaWdG8AgCGYnrOXUcmlKxFtH4WI5Rf6jrWJsaoXZYyz6UlrMOiiNNNZJLoA0LZZzv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad6dc2ab518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 5adb7eb1d103eadeeafac36e663ffdd3
23b784388dd634fa736cd60aed71570661e73d02
5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 349
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:23 GMT
Last-Modified: Mon, 26 Sep 2022 16:08:34 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/css.txt
200 OK 1.5 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/css.txt
IP
Hash 3a416367b3fb0f1f100b50c3230c94cc
363cb95cf1cd3e60aee5807a283e68a80e9f49e7
32a7b23daaa0624126d7ff50590cf575088b09f42b9d248cb30e25c3a056b46f
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/css.txt HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:23 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-98a7"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5n4gP00fxd5dMRkU7euV%2BgfWt1GDyQjPwh23tKKqIJeLIfagiuPvjVLBNAyrngZdDYjrWvE0j%2B4E8EBIkTZWWZfRPRThHzzPJqUaKEMxAY5P9J0fzKnvuvXAMBPWsga%2F4IZZnTR6"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ad6d958b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/fontawesome-all.css
200 OK 8.0 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/fontawesome-all.css
IP
File type ASCII text, with very long lines (36418)
Hash 978d75e233a00b4120ca7baa4386d8da
abfb675c0c0a29b7693afb6fca159574d508a99c
d484bab8328188f777557840f8223809c346f98e27add8079f339803b03f0756
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/fontawesome-all.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-8ef7"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2WE6S1Lb28Dh1mewRsTeJjfZ%2FqdPbZtyhuwS34m2d%2FKA4dECCpwLZSgccxzFdgGQWim1mKIt%2B1nYdx7UiJnWqODI4jU7c2x8lb3qUuCkysHJfpSA0v7m2hqBWazo7JG6v1YEqDy%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad6d860b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
200 OK 794 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (45903), with CRLF line terminators
Size 794 kB (793865 bytes)
Hash 60b4aea8daa29e76a3c67f4e0c4358ea
c9bf50987b94ea558ed5879c0df4d421f982b8e6
da1c824484095d31263cd34cf076a04909ee53dfab896a442792a55b3df2aa72
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hxxXU0JfVxbWpeo7%2FlsV0fB11UML8Iji0iqlnaKzpcENjgqZsJ6OF3iiM5GETrikSkYE0eyqa2%2B%2B5owEAjO%2F51WOlc%2B0OZlN4tk%2Fa96U2OFEG63DqwCPn0VZbCAhKqmmXSHCNRHR"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ad62de3b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1.css
200 OK 632 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1.css
IP
File type ASCII text, with very long lines (1645), with no line terminators
Hash 1fde4dca98fead1ab06fd95362591593
5aafb2f402f97402e6d4a18899d72df69ef74558
a3fff5a919a8e2ea00171bac33aa644bbacf91ec63f78667a382da978d7e3627
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/style1.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-66d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6lSzc7HshLXgDl7aTGHrTv%2BGc22zSdTCmvZoYmhdV171ajyFHsHBaxw838EiMoSjw%2BFtNHtV6W7uRXBgA3j7zQZrsNs0JWa8Hop%2BJkJooN3iW%2BZeWfm3AScoJApPPl9QkDoeVten"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad7dda7b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bootstrap.css
200 OK 20 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bootstrap.css
IP
File type ASCII text, with very long lines (65371)
Hash 821b5b99fd4aa2f0d3c0402208ce49c7
6ec0325f301f9b920fb2eca016506925558e69d9
9a494b3e8cf9307f56d63c2811d1ded2fbb4ec2a6ac5fce1cf621e6681140a68
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/bootstrap.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-1d943"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YCTreUyQCM9EKzUhITOPTTfIFAe1entSYHJ7EPWUix2ByqyVArtHqcUUafrHVnPGpsIUsMzcAu3GXurqIuTB4MaqbL2wBtKNLPnLZCl1traeNjT8C3RjxMu6N9kZQAM4ICfBDF%2F%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad6dc1eb518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style.css
200 OK 4.3 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style.css
IP
File type ASCII text, with very long lines (19581), with no line terminators
Hash 73f1e45ae235e3d9f8ef2a8a2db03102
43bd3326c5aa7fc6c068c681d116830cadfad725
8457fcb0c199f3ce20a30baf4026423e26c6ebd75def22d33d213a31b8135a7d
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/style.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-4c7d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6a%2BuudOzr9mwI7zodoMHC4m38cVI1uS4IbIp4ToeTSlPGvIrqEnEJNcFCoZWL%2BDX7y%2Fwisoaz59TIFYAtAiRHwvU4IVb41K22AgqcPitsHBI6fawJSyKAvVgAXYIG4ddUKhO9NsS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad7bfdeb50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/obtp.js
200 OK 1.9 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/obtp.js
IP
File type ASCII text, with very long lines (4446), with no line terminators
Hash db8aab343db8f5f29b8720589d1dcdb0
731e334a3251ddf5bc3c4cbde6494a83788e1e0c
c3edf8e48d33c959b577c8ba7cef44d75dc47f1b54fc553690724a9a4805e697
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/obtp.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-115e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o0sPtPebOrXkaQO54OYVRWECo0PXUhU8DoEfeuXQN1yxAuRR1AWYIIvhu88mS1IrRyxdzXXJIoYZ0BBSm4qMthvMOTGcmzIo8owf%2B2NPeNo4WVRC%2FVS2b2sdEU%2F1jJBP2%2BA5uOY5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad81a68b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/tfa.js
200 OK 6.9 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/tfa.js
IP
File type ASCII text, with very long lines (21248)
Hash 4cf418e83d040bf769e46528d084fa83
8fe3c89e231a49e831fa365c5c331ec5fef37667
e16a401a50c5a17ea971851652a408ea38d121cd60f40c195d9f9ceaeeaed97e
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/tfa.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-5323"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XD1zSeEadZwMlJQ7zT7SJqvDuXKE5WIka4UfEuHykqfqSRLXIA3j1RAQ5KCoKjO7BHfjKqEn0YH2Rfhr%2FbwNUDC5ocefywxCYksvo%2Bs8RBVtERnCexWhGEwBCtQ1dauG7gcpa0Be"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad7eb3eb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/pptm.%25E4%25B8%258B%25E8%25BD%25BD
404 Not Found 122 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/pptm.%25E4%25B8%258B%25E8%25BD%25BD
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash ba5146ac943c84a42ae7dd8ec650000d
cd224acead78854add64c91f811c97c4ebe23e46
d4e24dacc040ac19271080523c3e47ea0754bdf3a2697c0e58b4d41949327734
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/pptm.%25E4%25B8%258B%25E8%25BD%25BD HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 404 Not Found
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cLNHm1wodQS0L0dJQhQ52o91SgU3NLZ1Q6YbJ2Uz%2FKvHX5FN1W%2Bk%2FeShGQ4H4PmAFpHq5eHW%2BCHmH90aob9htIkFwobbRA8W9A1dJJdLSu%2FT9xpvF0WhIZbUBlonRKPNQ7ScVW%2FZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ad8d97cb50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bat.js
200 OK 6.9 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bat.js
IP
File type ASCII text, with very long lines (22437), with no line terminators
Hash bf312e6b642bb3f77eb3d4af8fcbd309
4abc389c58e11afa3de708d48d8cd45d187b1993
d0ac9fb04475a4a61b11a2620174fd0f4ee7f9538785a5b8309ea75093899b76
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/bat.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-57a5"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oDI3e4I7a8PFxRW4cm%2FAS279VCSkor8mAGzkCnyRy%2Fwl%2Fz8oD0CRdPjy15nItCmYYe%2Fn2UMCN%2F8%2FcoT8M%2BQ9NdOlwK5cFaIRQEZxynoWdIzmoYW9Og9KhFRjRf5g5VfeuTZu0aRP"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad8aea4b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/fbevents.js
200 OK 15 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/fbevents.js
IP
File type ASCII text, with very long lines (42174)
Hash 7f527e895deb7354a755cf2252e3a3a6
3f05c5d005417c060b947e0272cdd583eedaebfc
e387a857a38b1d79973706db6920aa34eaff4e3ec364243c6d6f693c480f2908
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/fbevents.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-cb4f"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xVewXkre2QrJsScgfAG1YWOySPO%2FrbRcT3OeTTneS7tbGGQuh2qy5FnjY47qnqJUB7eulb2RwMSyjf%2F86fNn5sycj6511t2A4PIFcR13xhOOIxtqywM0VCikgzCE8BmhItRMLNWP"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad8aea2b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/css.css
200 OK 837 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/css.css
IP
Hash d82a19fa8caf016f919e124aedb9bd44
a1eac128b8bef9d85954beab927de28ec793b80c
7465dab545e985b7fd16e6124e8f658e45ac1025c150aff884951d9e5e8f368b
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/css.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-3ccd"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hyMUrSkqncuxd9%2FRJ1F%2B0sSEkAtQjNtkfCI9xDB8jNivbZqJZ9FV1bLew29R8wTOkaSy9QcJP2fJL%2BAq%2F1OkstmAtiHvAXctN1PFcwAM%2FWyNup%2F8%2Fjme6EFe6jtoEHofYfA2a3Zp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad8ecfeb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
trc.taboola.com/1171368/log/3/unip?en=page_view&tim=1664208862366
204 No Content 0 B URL HTTP/1.1 trc.taboola.com/1171368/log/3/unip?en=page_view&tim=1664208862366
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1171368/log/3/unip?en=page_view&tim=1664208862366 HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.armyleaf.sa.com
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
HTTP/1.1 204 No Content
Server: nginx
Content-Type: image/gif
P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
Access-Control-Allow-Origin: http://www.armyleaf.sa.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 16:14:24 GMT
Via: 1.1 varnish
Connection: keep-alive
X-Served-By: cache-bma1675-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1664208864.235876,VS0,VE85
X-vcl-time-ms: 85
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/font-awesome.css
200 OK 7.2 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/font-awesome.css
IP
File type troff or preprocessor input, ASCII text, with very long lines (372)
Hash 67aa70020e480e3f73b299b0cbef81f0
666d31f54baa208fbc5f095fc01829c95ed6b783
a1a8dedba732d2de1c8327243313c24cf30e003f54fadb2d3b01fbaadd0b903a
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/font-awesome.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-9226"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pzVkkZts6M0JfGGQnzEff%2BEFhTFUsIs2dnDmZKJDSLVey0N4%2BxazjUXaZ17uEiGzdLdmXXqlhzL4Xfi2RdROhtn2jiEljuRIqVfiPi5xMk53aPUuJFoN7IgBm3ZJlfDf3PDGgVXU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad8db96b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/css_002.txt
200 OK 748 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/css_002.txt
IP
Hash d893d876b83aa5469750ba816eec52bf
4b107d3dfe51c1d81a8ee7a36b9f25a5858b30e2
f76d74b8f9d26573d1b416028027cc6f73a92bf9af83607bcfcec6337b360d13
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/css_002.txt HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-2b5c"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v78Ugd7tRoSnYRFwS0bbc%2Fi3TZBKDHQe8wrS9nHKfDE3CL0b4uAUEHBTep1Q17aGwjnJCYyPyinhY0I5SSVsAPECadt4YlcYlUDV59aNPMkh3gksUAeeh%2B3IUks3c9uzAxuCUVLo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ad9bff6b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/last.css
200 OK 395 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/last.css
IP
File type ASCII text, with very long lines (1036), with no line terminators
Hash 86b3263ee8d138fc96ee88c6ac8e0e6e
52f552e075bb614b05ec2e1ff0163fd59d6d6e63
275066f0edac6ed08dd249905b8d684807f094935875d61d056e806139f3594e
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/last.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-40c"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hsVdE4LWHwOKE%2BEEUAcDpu090dXHP4Lt8MeuK128g8zYWXmlTjzY4WXuHGxSHzsrsVri3Bt3SlzSqTuLWRvrr4u18nS7mul4QG9v4mQ4nV6o8uDXA0DiwWl7GRGqBfDDjtstcfgv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad99ae0b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/2128872657442699.js
200 OK 44 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/2128872657442699.js
IP
File type ASCII text, with very long lines (64470)
Hash 79e999c6df6962385cc1d166060a3368
31870115bf8515d40d7bbd6464a2959ede49b09d
4bdfb7903173e3c20ece760e7a96e47390888549d3e8a8f70d7bc8ff4bcfa19e
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/2128872657442699.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-2d3bc"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FZUXZAKjPeZsZ3auc1Y55IKNu2FHWsVcctHmVwBdk2CB5d6%2F5PfvRV0ZQEJ3xGBKJuFiRx3yJU05TNh2k9cF0qzuFpBB0U3TULUB8wYRMxrCfR7zcxEHeriAVmojVHm%2FfHP9M%2BJ1"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad8a9b2b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/js.txt
200 OK 30 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/js.txt
IP
File type ASCII text, with very long lines (1769)
Hash 3ebfe6eb627a44ad06fda0feb1b39732
59ea7c78856e36ad3825f4412d2b7c0c0b4cfaf6
c346643dbaf3b16e333c75a23ec2362bb28321922e5e47e52e3f9ef73d5eff34
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/js.txt HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-1452d"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sw%2FvIbgav1r3KwZypwln3tyCb8VkhEM%2BaFl9Nr%2Fr7xHccIEQq8GPvZTROQRvcQE%2Fbj%2BREjBE8777lXiKEb5ec4P%2F2jZ0kvyUWKfeXfmvxjjC0RnVYhN%2FLrO0CqQduSlSMnamlfGe"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ada1d58b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/f1.txt
200 OK 43 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/f1.txt
IP
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/f1.txt HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/plain
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-2b"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5vQlXd%2BgyJNwaiqnXC3DZpH9wMgdbIFs%2Fm3o7zu4Q2vgfwnwF0LrWHMwAqIzZtcuKsv7%2FdPUFnwaoBffG8ScLdP6V15AUTWpDARkEbCYiLkytP%2BhvRUWi5DeXJ9sL9ln4d1491Ks"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ada58ddb518-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/f2.txt
200 OK 43 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/f2.txt
IP
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/f2.txt HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/plain
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-2b"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e%2Bge9%2BgGCiLUwtqziaCFp9%2BzpxTegThOTYGHwZqj5jk1Lqki%2BUtu9YgD1sJyUX48ds5qT9Zwubk0XKP%2BJeToco9QJAF6VrzYKQj0O06CnFJos1dbBUU8EHxCc6wRjf9Dpt%2Fsli3U"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ada8c1db50c-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1_002.css
200 OK 85 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1_002.css
IP
File type ASCII text, with very long lines (65402)
Hash b97e2ac00967243783260390ca7087fd
80b8a392e06822b9591f1aeb1032d3e090f628e4
58feb3b6c9504c949c8e23a132d68759643eefaaf046dcacd1fb36e1693c7c16
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/style1_002.css HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-253b0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nxwDjvK6%2FHX5cIIF0hQL511xzuHog56HBp09SgiPmhTLdLiJgZcgHalHV3xSzRJ2Wq8Qn237U6Ug263Ww9Mug26%2BQ08r9378DgvclOwJKHV8uFCeiLyeBjx8swU03wHRILgxerlD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4ad9e829b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/manifest.%25E4%25B8%258B%25E8%25BD%25BD
200 OK 1.7 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/manifest.%25E4%25B8%258B%25E8%25BD%25BD
IP
File type ASCII text, with very long lines (1706), with no line terminators
Hash a7814d07f1a9d759bd840ea27419cf12
ed29ba6aaebf692517921db616b88ef97ff5b0ba
23aa25f5bb6405b5e6f817973ecfcc003cb3830a4e70c0125fd2c5b0a6537929
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/manifest.%25E4%25B8%258B%25E8%25BD%25BD HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/octet-stream
Content-Length: 1706
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-6aa"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WCo0SpMt3AN16p99S%2FnmTtF6DaRgacpRJLx4rdtq%2FZaHZndgNSrdpoAwYZPxqjoFJDmMYn%2FAjjctve%2FRUoXjRg8oiTurXk74jI22TWQB2DfnlkTj2Lnr99ag2byI7Bzu9%2BOHmGXG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4adace77b506-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/jquery.js
200 OK 915 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/jquery.js
IP
Hash a6937dacea053ad118b5b07538547ef0
cb1b0ac43ff37f7a21bfdd895d9bcaf0d7988f74
2d05329dbaa98416aa87d6897ce3cc5a35e0dea0ed233b0a8ec2efc426dbdd49
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/jquery.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-792"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f1CDABYahtadrNzaAYLjnPxepac%2BifOf2NoO56wCMNz9KAXnCZGJphj5ngPK%2FKaFR4eL7RpvW70W5XLs96AgNqujp2jnJF6qdGmqakJPOuVwpmAX%2FHnvBJZPy2jPZnOOQiOVidPx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4adbafb0b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/vendor.%25E4%25B8%258B%25E8%25BD%25BD
200 OK 274 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/vendor.%25E4%25B8%258B%25E8%25BD%25BD
IP
File type ASCII text, with very long lines (42169)
Size 274 kB (273807 bytes)
Hash ab751037619370adf98336194a5dfbb0
ff2997b7569521ff39ac69a3224983d20686fcc4
d6e7ee0252ff99d2d27e85df4a1395fb757c07a6e34445143b8a0a0b2e21c928
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/vendor.%25E4%25B8%258B%25E8%25BD%25BD HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/octet-stream
Content-Length: 273807
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-42d8f"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XfsQkZ2N%2B2uBbOJ4HVYtw1oYPxoUGRzHxdshIl3tNa9zlNW4Ui39N%2FmyL6oTX5%2Fc%2BJTuHmMdlscvmxUbDhQkqya6NXYc8LDAQA%2B%2BWmtQAZfyNveGCirDYCXE9m3jrDZJm3KCPBIY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4adaefdbb527-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/jquery-3.%25E4%25B8%258B%25E8%25BD%25BD
200 OK 87 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/jquery-3.%25E4%25B8%258B%25E8%25BD%25BD
IP
File type ASCII text, with very long lines (32058)
Hash c9f5aeeca3ad37bf2aa006139b935f0a
1055018c28ab41087ef9ccefe411606893dabea2
87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/jquery-3.%25E4%25B8%258B%25E8%25BD%25BD HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/octet-stream
Content-Length: 86659
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-15283"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9HBa%2FOKRL9FYzZwBYIOwlzUvgbrSoPt7GHplkvObgNQ96QVkhusmZnGp0%2FmHo9nEGkUQFyWVlVftXN%2BYv%2FkAi%2Fj81GIQmbl6fuM1c7VflVVHMqIQwZSYyhK1JzTn3ELGwQCVoZ6n"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4adaccabb512-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bootstrap.js
200 OK 9.8 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bootstrap.js
IP
File type ASCII text, with very long lines (32033)
Hash 5001f34e4d6720378751012dedda52d6
d582a3fa4a2772626a934ade1489dc5e5f97a845
3cbb8f3723828476519f646eed5cd50a490f1cb1a03b9c2e92ad2a749c1dbf5a
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/bootstrap.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:29 GMT
ETag: W/"62e823f9-90b5"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DXE8i%2BGrTLlbFmr3IsTz75%2Bye%2F%2F3Mx111sM0n3FUVDv1VIUTiFeXYEBWZZ2xzQEHmOmMwWUexgB5UQ0s2JamcyCtMCXLCFztWRs4h%2BXbmnbKiZN3Xh8QxNLBJYouWlSTF1V4XnmE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4adb8a26b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/show.%25E4%25B8%258B%25E8%25BD%25BD
200 OK 256 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/show.%25E4%25B8%258B%25E8%25BD%25BD
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 256 kB (256150 bytes)
Hash 04ac8427433d48324755ef21e13ea222
649d0f821b50480745a695a666c69e42a14e9f43
1f8be107f7500a15282933e2f7efe1a7ef998db59f4ce04216429833320a7c9b
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/show.%25E4%25B8%258B%25E8%25BD%25BD HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/octet-stream
Content-Length: 256150
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-3e896"
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ps1NehJo%2B%2BWvMmRo8%2BM5LHdoSunteIK90ACF5oYg5tPsOcRUVu%2FhG5hURmE0rwxRQOcnVVXiRAK1QV1SVz29D4UqlqVRBS4aYNgLha1fNt%2Fwpk7EaW7DSI9p0vobFyI6EElGYT2g"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4adaf980b518-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/jquery-3.js
200 OK 30 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/jquery-3.js
IP
File type ASCII text, with very long lines (32058)
Hash 165a43244de5b28bfdb9422e0ad82b68
dd12888e259036e6c6986a0c65a3b3e38b697f54
200e3fccd025dffd3f7c6ad186f87ea51737db6c85e279b0d8b9626ad7ce1954
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/jquery-3.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-15283"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I60Nu1MHQlVFz4xG2k4nCKdQaf4%2Fshu9sx4gNQh41pOD2olJm%2FOg8ydZlEt5MARoftLACdOnSfNsVpsWkhXuPLDxrq%2FCu1SVSbM4GQGs3tQPRua1pB0RYp%2B6R265rPQ9Q9tb2t6Q"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4adb5d8ab50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/main.js
200 OK 320 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/main.js
IP
File type C source, ASCII text, with very long lines (359)
Hash ae86cd97e3f3d0aeb33404162325a6cd
1838b24880669a6476df5b6f6441a8ebc1fe20cf
b3785a78e8f3715fdaaeb17f2c6483a26a1b3313eba223e4820629e3c92dc7ca
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/main.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-245"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c4q6EmDyN1gfOdLaEoPz8N8nR5hY57Bg0RQ2NFhN6L9fK94vBv95piFY0hqEDVb4Qg5bFA0dCP4FkSWKbtK6PzHF0mhO05pJOkSN7vb4XLkoOTud9LdcZtPqi0X1Q%2BHJhkE0TunP"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4adc5887b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/barlow/v2/7cHpv4kjgoGqM7E_DMs5.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v2/7cHpv4kjgoGqM7E_DMs5.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20444, version 1.0\012- data
Hash 0f9d3b560bae7d6283f13b731bc4f674
cd082fc17fecdeb0b4de56499ce420f7c73fd7d9
023694a0472dde38c6600bf88e6330765839e53f64f94edb63714aeab3de7e51
GET /s/barlow/v2/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.armyleaf.sa.com
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 06:48:48 GMT
expires: Fri, 22 Sep 2023 06:48:48 GMT
cache-control: public, max-age=31536000
age: 379536
last-modified: Wed, 12 Dec 2018 22:09:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bg-body.png
404 Not Found 116 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bg-body.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/bg-body.png HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1.css
HTTP/1.1 404 Not Found
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2gmSPiC2Xgxvx6aYz9wDJlEQv1JCoNv0a2%2BetaCfjJQnvycS7S4%2FIL2OBGF%2Bli34YEJsplOcl0vNnZ6tUwRZ7Y%2FfquFu600UWhf8kfchk9J472AujhaQ%2FMzQ1U8r1L4V6KQridW1"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4adcbf4fb512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/jquery_002.js
200 OK 450 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/jquery_002.js
IP
File type ASCII text, with very long lines (501)
Hash 41a2fdff43ee058af2d4c8c291b2d9d4
f2fdf3165732412088dc899f0f20272f56559044
35716b5a75076c9d0847735a25f06045a2f033646b81de0d901414a8170ab5a5
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/jquery_002.js HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-31c"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M%2BwHNnKWNKpoqgWPelz5RrPiv0padcfmELCa6W7nriyvpNtjRKbUgknAI9vtylKtmldkYn7wfqhdW748ED87hrL7XNtAA1T70FUydUed4ud%2F6DH8wbTeuzbQog5%2BM%2FiLeFQkwwWX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4adc7a27b527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/barlow/v2/7cHqv4kjgoGqM7E3t-4s51os.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v2/7cHqv4kjgoGqM7E3t-4s51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21080, version 1.0\012- data
Hash fa61eccc5d911d604a8739a7c9dc8bcb
73488928ed4cd9f726f0129fc6c969908161091a
4c52e4274ebdbe29cd5b4983d888c247496b6d3bb55e05d4c0769d1b946d14f8
GET /s/barlow/v2/7cHqv4kjgoGqM7E3t-4s51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.armyleaf.sa.com
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 06:48:49 GMT
expires: Fri, 22 Sep 2023 06:48:49 GMT
cache-control: public, max-age=31536000
age: 379535
last-modified: Wed, 12 Dec 2018 22:06:27 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/barlow/v2/7cHqv4kjgoGqM7E3p-ks51os.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v2/7cHqv4kjgoGqM7E3p-ks51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20300, version 1.0\012- data
Hash f780d6f93676a9792d73405ad95cfbcc
3ffb0b44be63925e77d3cbaa9ab89b30dc63a70f
3916e5c19c2e260ec6c95d4af3cc8c026c5825717221a6b931614f804be378ac
GET /s/barlow/v2/7cHqv4kjgoGqM7E3p-ks51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.armyleaf.sa.com
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20300
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 06:48:49 GMT
expires: Fri, 22 Sep 2023 06:48:49 GMT
cache-control: public, max-age=31536000
age: 379535
last-modified: Wed, 12 Dec 2018 22:05:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.armyleaf.sa.com/clicks/chapter2/images/line.png
404 Not Found 116 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/images/line.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d6e62b966693d7822072903ae8310d00
2de307cf4db56a090d7633f2da9ce6d224f6ffb7
36bd7d3c61ddaa2cfd74438dfcc2552f527a5299abc17957073a05d4b1d5cecf
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/images/line.png HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1_002.css
HTTP/1.1 404 Not Found
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DegaHANOj%2F%2F0ukR%2FpkKMjfiRjzwDSlLhumpV59HxFJxk1nE4DoGZHNAvprqfxc%2F58O%2FiavECEBOCvPWZQuRuCA37hBo%2Fv5o2%2Fe6yuEHYEkzM%2FS4iNLNBRe2vbhOdLn9QWTwzCEug"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4add1990b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/barlow/v2/7cHqv4kjgoGqM7E3_-gs51os.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/barlow/v2/7cHqv4kjgoGqM7E3_-gs51os.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20348, version 1.0\012- data
Hash 9c43f43c6a98e7a4c8f27827ff455c9f
60b73cbb826b0710af3988a30873b3c47e43b511
bf6c1e2f8c250b7efeb5d250181599880b1c17efc3c94466aa5d847454bf14ef
GET /s/barlow/v2/7cHqv4kjgoGqM7E3_-gs51os.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.armyleaf.sa.com
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: font/woff2
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20348
date: Mon, 26 Sep 2022 16:14:24 GMT
expires: Tue, 26 Sep 2023 16:14:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 12 Dec 2018 22:05:17 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/f.txt
200 OK 21 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/f.txt
IP
Hash 9126e37748c1ee76d20fb783efef135b
4ebc85b3cb847b7cf4dc2341094d4fc883fe08ca
46710f0509008ad4a31212927e35441764b757d672b2ed4f892ee4e2f0804abb
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/f.txt HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: W/"62e823fa-5720"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=etZouHh4ppqNEzg4XyB%2BuZJOAOfZ%2FUetH%2FZUMeVobfFI%2FpB6zUJ%2FWJf%2Ff4dBs3OXiWLgGARZwgiEWN92zPMZ9Jv5IKr2M8rSsSKS5GZgEn%2FVZNspXx7lDXevocZYzWV4tHyq%2B3UZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ad9ee8cb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronxprodiscount_files/marvel-bg.png
200 OK 41 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronxprodiscount_files/marvel-bg.png
IP
File type PNG image data, 1920 x 355, 8-bit colormap, non-interlaced\012- data
Hash a2cf30cf9f9c94ca233de42e68686e58
f405fecfc083aaf78abfd66e5ecac05501114617
b8fe22fddc6cc86351d432d6ce92667ddaac8f4ce72156fc4c44e8d98338390c
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronxprodiscount_files/marvel-bg.png HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1_002.css
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: image/png
Content-Length: 40644
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:14 GMT
ETag: "62e823ea-9ec4"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ipOEyMVSXKZ0r2WkYJIhZ3uPVJhSaiBPXYIGoolPzIxsh3mJTEkXwRD5hFVKNDFmecbM7ekdwOLRkEBE4upXsYOkOUwJSDT2aneBjj3CAcEEUqS4ZTGs8EVyHPZEujOlXT77UtY0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4adce874b50c-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bg-body-right.png
200 OK 97 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bg-body-right.png
IP
File type PNG image data, 476 x 812, 8-bit colormap, non-interlaced\012- data
Hash 017ff46ff9a1d8170ee09edaa444b280
e6244df569c2abc083725b869a69fc30e505581f
952916fc6a983c646ae35c1335a92d0226c9c8b72f8e8b59a3c4c6dc37dc590f
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/bg-body-right.png HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1.css
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: image/png
Content-Length: 96740
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-179e4"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xBHJuHDz21cFT3KwbNy3aLLdqA%2BRCU60N42Qyk1Pul0pc%2FgJjuK3hYqJqX%2BHJk5eB8GNWbBHg6VfUvuTkS74922fThv0%2FUibGoIywJ6EdPOmGGfBnPVGwZeL%2F4IoL4jNlerxXLzY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4adceba9b518-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bg-body-left.png
200 OK 128 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/bg-body-left.png
IP
File type PNG image data, 552 x 812, 8-bit colormap, non-interlaced\012- data
Size 128 kB (128092 bytes)
Hash 4dbc129cc0bbe77f887cf813c4408e9b
fc3f7169f6ccd2b1cadeaf349893225882c11a13
1f044c072e134bdb8815ef45070ce943f01bfd52dd457483552f86d92a77aeaa
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/bg-body-left.png HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1.css
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:24 GMT
Content-Type: image/png
Content-Length: 128092
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-1f45c"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=88mw3pqQyiMqEd%2F%2B47NM3SsHPFiqAYSjjcU1e6BGIuVif0am05NljIYE9DU1EoSc40WXkn1WhNrFkNNFpqqSUJO4eXlNRwg8QEg6KgFt%2Bx4dk9nQg1VSurlHhJsxdoTJphDZKGi%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4adccb7fb518-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/0_002.txt
404 Not Found 122 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/0_002.txt
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash ba5146ac943c84a42ae7dd8ec650000d
cd224acead78854add64c91f811c97c4ebe23e46
d4e24dacc040ac19271080523c3e47ea0754bdf3a2697c0e58b4d41949327734
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/0_002.txt HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 404 Not Found
Date: Mon, 26 Sep 2022 16:14:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PZK6I7gE76IIKMi%2FtwpE%2BNukn9zfif96sMDxU8PC0GePusWMD4XGMJ%2F%2B0LzRdA2lSskeraNN%2FS2bW6hXgUtSTE1pDtFyWo%2BdZTBEGvWkDQxp0jLzEDZgYe1KnfhbE5m7byCEsVD4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4adddcdbb518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/0.txt
404 Not Found 122 B URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/0.txt
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash ba5146ac943c84a42ae7dd8ec650000d
cd224acead78854add64c91f811c97c4ebe23e46
d4e24dacc040ac19271080523c3e47ea0754bdf3a2697c0e58b4d41949327734
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/0.txt HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 404 Not Found
Date: Mon, 26 Sep 2022 16:14:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZF6%2BJHPReshOeVFjFUpKkRSQ%2FTiH2yXyfv9sqGamAzTMd7UbYVr%2F3YWmg2dXMjXuEIlUDJMlp1zW%2FMFM2zGdxZ2QUt0QsaOg%2FFiAqL9PaylCcpECO96%2BoklSfVyKoaIJKAT2wL8u"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4ade1d28b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronxprodiscount_files/rated-bg.png
200 OK 33 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronxprodiscount_files/rated-bg.png
IP
File type PNG image data, 1920 x 309, 8-bit grayscale, non-interlaced\012- data
Hash b50d31f2cc5907f761be48d49b6d1395
2860d207f026ffc5c89d1fbb1861cd80fbf1e983
7f46f96de1079ab0e23b5fe3a550020dfaef35a15667e572036c32e84fda2340
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronxprodiscount_files/rated-bg.png HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1_002.css
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:25 GMT
Content-Type: image/png
Content-Length: 33360
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:14 GMT
ETag: "62e823ea-8250"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RoCTTAQ6pPmhzV1vcV3DM%2FGihNsHqSxebRH%2BWKuFsYytgB%2FixTD6jSUWH2e86T5JAfuErL7yreD8yiobciDkUqUXmocejyZCCj9vd9KEpATZyTs%2FyMUHjZVnebvBYJgB0MInANRJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4addd9ccb50c-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronxprodiscount_files/features-bg.png
200 OK 119 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronxprodiscount_files/features-bg.png
IP
File type PNG image data, 1919 x 822, 8-bit colormap, non-interlaced\012- data
Size 119 kB (118905 bytes)
Hash 3cce5293a4ee949dec8e986cecaedf33
49368789299133426f8967d4e4df94a2456b1232
8889b616bbaca86c12d25f26150562a0354ff36602696231b08551d029d1739e
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronxprodiscount_files/features-bg.png HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/style1_002.css
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:25 GMT
Content-Type: image/png
Content-Length: 118905
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:14 GMT
ETag: "62e823ea-1d079"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0YxXH1wHxkRSpZU4wVSENc5%2BCXaOuq%2FYKb5RBK2tZ%2B7kSslqNbCAKTPzvFwXfC4hUpbAXlaTifjf0PTodAfUqNjDGWL%2BSinZ2fBoBbxvDoLCssvqm8prbqwth%2BaD01UrKKF59O8Y"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4add483ab512-OSL
alt-svc: h2=":443"; ma=60
amplify.outbrain.com/cp/obtp.js
200 OK 3.2 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (8072), with no line terminators
Hash 9b19340ef7db3cbb26aa923adb8dbe6e
082e699bca6e80ca6c72a43f2894f4a32e785e26
c042b8b199b2c08fa66f90753998544860e3f64c3a1f47754a66970b3b8c5b2a
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "51de2e10510f823326f9b30ea6068a2a:1655820557.452892"
Last-Modified: Tue, 21 Jun 2022 14:06:31 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Mon, 26 Sep 2022 16:34:25 GMT
Date: Mon, 26 Sep 2022 16:14:25 GMT
Content-Length: 3249
Connection: keep-alive
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
HTTP/1.1 200 OK
Cache-Control: private,max-age=1800
Content-Length: 11367
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 28 Jul 2022 17:32:37 GMT
Accept-Ranges: bytes
ETag: "80a8697a8a2d81:0"
Vary: Accept-Encoding
Set-Cookie: MUID=220DE19AA8E2625E09BBF3B1A9176357; domain=.bing.com; expires=Sat, 21-Oct-2023 16:14:25 GMT; path=/; SameSite=None; Secure; Priority=High;
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Access-Control-Allow-Origin: *
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 882F9AE9E39C42CB80A85A5E1E69A924 Ref B: OSL30EDGE0508 Ref C: 2022-09-26T16:14:25Z
Date: Mon, 26 Sep 2022 16:14:24 GMT
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3867
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:25 GMT
Last-Modified: Mon, 26 Sep 2022 15:09:58 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash cae538dcce82598fbe43c0bf443e62dd
cc68ac6be9c5e0087a0000e5735b83270ace30f5
954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Mon, 26 Sep 2022 14:41:09 GMT
expires: Mon, 26 Sep 2022 16:41:09 GMT
cache-control: public, max-age=7200
age: 5596
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3867
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:25 GMT
Last-Modified: Mon, 26 Sep 2022 15:09:58 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/page-logo.png
200 OK 591 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/page-logo.png
IP
File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 591 kB (591177 bytes)
Hash 17afdc9ba149de09554478af843413c5
f0ff59f4fcf2168f9acf436ee4111c76abaf97bf
d8501f90164e095fb2434d9bcaee6c12261a74d3bee87705f7c4703bb4c5ec18
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/page-logo.png HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:25 GMT
Content-Type: image/png
Content-Length: 591177
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-90549"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SP3QTfis%2BuT5n4jlYeoFGBp2SQNJx7w1cjCiU4rZjhalknV%2BnJkTsI5nVJgtGB3f5MkdPt2qQsQypVEHBoX857kl12u3wtDPfGJyqwVE9H3Y9z%2Bw92cKyU2hHQcMMGpDmLwflAvQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 750d4addba50b506-OSL
alt-svc: h2=":443"; ma=60
www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/dronexpro.mp4
206 Partial Content 66 kB URL HTTP/1.1 www.armyleaf.sa.com/clicks/chapter2/dronexpro0109_files/dronexpro.mp4
IP
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash 2f0586549cae3b160e0c096b65763c3d
caf3baf21182d8252b4a74c0f29a618d7204f760
8267543a65b85639580b26af88351b968cf9467a05293bb1f399b7514f2ae485
Analyzer Verdict Alert quad9 Sinkholed
GET /clicks/chapter2/dronexpro0109_files/dronexpro.mp4 HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/clicks/chapter2/6242022_dronexpro.php?sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
HTTP/1.1 206 Partial Content
Date: Mon, 26 Sep 2022 16:14:25 GMT
Content-Type: video/mp4
Content-Length: 2773316
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:30 GMT
ETag: "62e823fa-2a5144"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Content-Range: bytes 0-2773315/2773316
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hqN1elZU8HxztQsS%2BNuZj0J4eeG3cy166%2BP3nANgHrVxiPkWr1fpVdHx50ehnZBpdXzp%2FYx5SO5U6tzz0mT7kcCHMhxVLj4K9d%2BqQhHn81Bb5LjWbcAwp9uCEphwVWSYUVxgiY9S"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750d4add4bc9b527-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3867
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:25 GMT
Last-Modified: Mon, 26 Sep 2022 15:09:58 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6931
Expires: Mon, 26 Sep 2022 18:09:56 GMT
Date: Mon, 26 Sep 2022 16:14:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6931
Expires: Mon, 26 Sep 2022 18:09:56 GMT
Date: Mon, 26 Sep 2022 16:14:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6931
Expires: Mon, 26 Sep 2022 18:09:56 GMT
Date: Mon, 26 Sep 2022 16:14:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6931
Expires: Mon, 26 Sep 2022 18:09:56 GMT
Date: Mon, 26 Sep 2022 16:14:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ea5f06ad31f0cedd2cb5c6df82f35f4
60a83a1618ffae06e49ca3002bac1db9980dcfe8
5f6a4cb92c016ef0f229b11d727e9680a15b10782b5bfe9e66ad9d100b458d8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10279
x-amzn-requestid: 0f361c26-1f12-421a-9752-7d4fcdf839ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4V65GTXIAMF9-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd045-25677a637307879044de8242;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:14:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qvSIyV7uvUzXFn6Sw3izoZxQoFbmyRzQ9WKl33D7fNTcuV6WXTzD9Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 05:01:28 GMT
age: 40377
etag: "60a83a1618ffae06e49ca3002bac1db9980dcfe8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d02ede0c964f3346fd53ae2950bf2a62
e49306a3713cb724be024a4ddb5e90645718a718
c0e653d89656016c55aca9b198b9191620f1ae9a3c45742a90744bd74c4f9505
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8637
x-amzn-requestid: 07dc23e0-000f-4f6c-8d2b-0e65d88be270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvvEenoAMFr0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-520803124760abc216152d7b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HCJ483GPdpPhC7oYm1GrA02BqqST9sfqfCBSA93rZqaQYl-jezgP5Q==
via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:20:40 GMT
age: 64425
etag: "e49306a3713cb724be024a4ddb5e90645718a718"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 968b9c138702fb5994d1d9eab1a697fa
9660bb2d38079182efbd11d7a687bfc7f9d30751
5ba74820ad451747c8ed25529f06b037bebf4c0616a1f2165c9197c1171db7a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11728
x-amzn-requestid: bf60e58f-c4f4-45c7-923b-0d1539f720f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUCGGw7oAMF3wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd40-32043c1b1411544f5d00edc0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:50:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: H4KXhBaRw3SvzBrbl30mV6R_vJ8bXBkyicb8fQiTp6YSBHjE8iFkNQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:49:56 GMT
etag: "9660bb2d38079182efbd11d7a687bfc7f9d30751"
content-type: image/jpeg
age: 62669
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c11e6fef1be62b971bd9daf378bfc95
ef9d756cbcda72cf7ef5029b7d384cd1fbaed633
b8369f83d6dddcd2355b81d8eb200791788165e56881ce21e1a1e9c8bb1bb2ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13584
x-amzn-requestid: 198bd2b4-d4ae-4f19-a500-463aee52b890
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHgFdNoAMFwEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc9-19a1f7d2102820da4b21f18b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yl8BCwdlIePsc4gIX4IYH0L6NHipn_5fBsa9nyYy14w0m49jPUYXBw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:57:51 GMT
age: 65794
etag: "ef9d756cbcda72cf7ef5029b7d384cd1fbaed633"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ef17205adb2b478d3bff54b048208d22
12aac1bd22e675f09a220de08b4656e801c2e647
620fe39cf421ed3a21e968570f7e863d69224113be867ec2457ed3850ea113f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5980
x-amzn-requestid: fbf0c390-da24-49e2-8492-43e29e5d4bb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHCGJVoAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc6-1f9b1b7d63467c58702e6d7e;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:38 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Iy0oyFx_T6CEuOQckEzvUQOUo307Jm_OgJzomWlMz9BhgD3eOaysdA==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:48:52 GMT
age: 66333
etag: "12aac1bd22e675f09a220de08b4656e801c2e647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fe8c4f0c70fb6c1f4259eabedc7015e
85e378d0fff856832a8dd01743516b9476fed8c6
508a1c7d350fcf82d1ece0b99f8557b2f300c7c1148f28c3ae9fece20530e4b6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5157
x-amzn-requestid: b5748f49-693f-4bc3-a850-cb68e770de24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUG9GUHIAMF7pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd5f-5d2aaa212cf1be2506593746;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4h9lb_7egxb2hBbxjcS_cpZ5lDq6Lx-c_WUZyRHdUA0YTwr6kgDuiQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:10:16 GMT
age: 65049
etag: "85e378d0fff856832a8dd01743516b9476fed8c6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=20105041&Ver=2&mid=0ebdbaab-a6cf-4d91-805e-635ef310ddf3&sid=48deae403db611ed97665ba86e5d9221&vid=48ded0403db611ed84677d82eae27f50&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=DroneX%20Pro&p=http%3A%2F%2Fwww.armyleaf.sa.com%2Fclicks%2Fchapter2%2F6242022_dronexpro.php%3Fsid%3D994118%26h%3Dvhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g%2Fvdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk&r=<=1294&evt=pageLoad&sv=1&rn=669316
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=20105041&Ver=2&mid=0ebdbaab-a6cf-4d91-805e-635ef310ddf3&sid=48deae403db611ed97665ba86e5d9221&vid=48ded0403db611ed84677d82eae27f50&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=DroneX%20Pro&p=http%3A%2F%2Fwww.armyleaf.sa.com%2Fclicks%2Fchapter2%2F6242022_dronexpro.php%3Fsid%3D994118%26h%3Dvhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g%2Fvdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk&r=<=1294&evt=pageLoad&sv=1&rn=669316
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=20105041&Ver=2&mid=0ebdbaab-a6cf-4d91-805e-635ef310ddf3&sid=48deae403db611ed97665ba86e5d9221&vid=48ded0403db611ed84677d82eae27f50&vids=0&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=DroneX%20Pro&p=http%3A%2F%2Fwww.armyleaf.sa.com%2Fclicks%2Fchapter2%2F6242022_dronexpro.php%3Fsid%3D994118%26h%3Dvhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g%2Fvdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk&r=<=1294&evt=pageLoad&sv=1&rn=669316 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=339B4FDA299865392DAA5DF128CF6402; domain=.bing.com; expires=Sat, 21-Oct-2023 16:14:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 69C09053FF0C41DC8E0FBF5C5578B3F2 Ref B: OSL30EDGE0321 Ref C: 2022-09-26T16:14:25Z
date: Mon, 26 Sep 2022 16:14:24 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=20103275&Ver=2&mid=b86f954e-2d02-40e3-addb-b1611a348070&sid=48deae403db611ed97665ba86e5d9221&vid=48ded0403db611ed84677d82eae27f50&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=DroneX%20Pro&p=http%3A%2F%2Fwww.armyleaf.sa.com%2Fclicks%2Fchapter2%2F6242022_dronexpro.php%3Fsid%3D994118%26h%3Dvhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g%2Fvdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk&r=<=1294&evt=pageLoad&sv=1&rn=183206
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=20103275&Ver=2&mid=b86f954e-2d02-40e3-addb-b1611a348070&sid=48deae403db611ed97665ba86e5d9221&vid=48ded0403db611ed84677d82eae27f50&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=DroneX%20Pro&p=http%3A%2F%2Fwww.armyleaf.sa.com%2Fclicks%2Fchapter2%2F6242022_dronexpro.php%3Fsid%3D994118%26h%3Dvhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g%2Fvdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk&r=<=1294&evt=pageLoad&sv=1&rn=183206
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=20103275&Ver=2&mid=b86f954e-2d02-40e3-addb-b1611a348070&sid=48deae403db611ed97665ba86e5d9221&vid=48ded0403db611ed84677d82eae27f50&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=DroneX%20Pro&p=http%3A%2F%2Fwww.armyleaf.sa.com%2Fclicks%2Fchapter2%2F6242022_dronexpro.php%3Fsid%3D994118%26h%3Dvhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g%2Fvdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk&r=<=1294&evt=pageLoad&sv=1&rn=183206 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=09F60DA210EC6B040B691F8911BB6A54; domain=.bing.com; expires=Sat, 21-Oct-2023 16:14:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0CBD77DF5971461C9BACCD2D3DDBE952 Ref B: OSL30EDGE0321 Ref C: 2022-09-26T16:14:25Z
date: Mon, 26 Sep 2022 16:14:24 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d095ec6a56142cb2084481b06881ef4
82ff236023008fbfb871aaa7c1e976e0cf15e91a
791ac45152415413d4af27f3dde61a021c9c57dcf7ca5b0e65300ebc3cd8815d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-22484186-3&cid=1005522054.1664208863&jid=1610125967&gjid=1313303537&_gid=1537398893.1664208863&_u=YEBAAUAAAAAAAC~&z=928220059
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-22484186-3&cid=1005522054.1664208863&jid=1610125967&gjid=1313303537&_gid=1537398893.1664208863&_u=YEBAAUAAAAAAAC~&z=928220059
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-22484186-3&cid=1005522054.1664208863&jid=1610125967&gjid=1313303537&_gid=1537398893.1664208863&_u=YEBAAUAAAAAAAC~&z=928220059 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.armyleaf.sa.com
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.armyleaf.sa.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 26 Sep 2022 16:14:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bat.bing.com/p/action/20103275.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/20103275.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/20103275.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=112E576E59086A301D9A4545585F6B65; domain=.bing.com; expires=Sat, 21-Oct-2023 16:14:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A37CD9109C4C43BC8C0519DA940659A0 Ref B: OSL30EDGE0321 Ref C: 2022-09-26T16:14:25Z
date: Mon, 26 Sep 2022 16:14:24 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/20105041.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/20105041.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/20105041.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: private,max-age=1800
set-cookie: MUID=306A60EC23A26012237E72C722F561C8; domain=.bing.com; expires=Sat, 21-Oct-2023 16:14:25 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 893DD977117244048EE99FF3B024CE48 Ref B: OSL30EDGE0321 Ref C: 2022-09-26T16:14:25Z
date: Mon, 26 Sep 2022 16:14:24 GMT
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?marketerId=003fefef2c09e91029ed7eed52ee57c0fd&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.armyleaf.sa.com%2Fclicks%2Fchapter2%2F6242022_dronexpro.php%3Fsid%3D994118%26h%3Dvhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g%2Fvdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk&optOut=false&bust=014490622857154067&referrer=
200 OK 60 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=003fefef2c09e91029ed7eed52ee57c0fd&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.armyleaf.sa.com%2Fclicks%2Fchapter2%2F6242022_dronexpro.php%3Fsid%3D994118%26h%3Dvhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g%2Fvdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk&optOut=false&bust=014490622857154067&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb0fc5c090282e372b8bf8ff13ae3ee2
2de3834253ece606ce4d2a6f10a59654b6fa378b
90a8ffa59ad6227daafa10083d4cff2e9b295c9c82135b5f5cedd65b2e7c8ceb
GET /unifiedPixel?marketerId=003fefef2c09e91029ed7eed52ee57c0fd&obApiVersion=1.1&obtpVersion=1.8.2&name=PAGE_VIEW&dl=http%3A%2F%2Fwww.armyleaf.sa.com%2Fclicks%2Fchapter2%2F6242022_dronexpro.php%3Fsid%3D994118%26h%3Dvhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g%2Fvdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk&optOut=false&bust=014490622857154067&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:25 GMT
Content-Type: image/gif;
Content-Length: 60
Cache-Control: no-cache
X-TraceId: cba5b8ac543afa892f4860f2c640ab5c
content-encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 413af82848c65380002223831116136f
ac297d3820ceb04cff185253349566bd20f15ed1
c25795fc9f18d64282f1bdfd111248c49e917c1e768fbe6b97d7cae1101c2c67
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 16:14:25 GMT
Server: ECS (dcb/7FA6)
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zZtPrEYgk0JuGn89HJQQ_wZTwUzN1xLcHyWwuyMpBqfvktiPw4Od6g==
tr.outbrain.com/cachedClickId?marketerId=003fefef2c09e91029ed7eed52ee57c0fd
200 OK 56 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=003fefef2c09e91029ed7eed52ee57c0fd
IP
File type ASCII text, with no line terminators
Hash 77fbe8ab311fa20557d95906363035ed
5806df80f09a37e070d5f37c49f19797c2763fd0
4fa9f4ca5bfa56b9f8467324e3654f4a717dcd40b70c05b538092d8a101b0599
GET /cachedClickId?marketerId=003fefef2c09e91029ed7eed52ee57c0fd HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 16:14:25 GMT
Content-Type: application/javascript
Content-Length: 56
X-TraceId: 0d098eb8c32822053692ec0f742ed28f
content-encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d095ec6a56142cb2084481b06881ef4
82ff236023008fbfb871aaa7c1e976e0cf15e91a
791ac45152415413d4af27f3dde61a021c9c57dcf7ca5b0e65300ebc3cd8815d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc7883d0a03d9c3559288a600fecc70a
b0e538996510ec8c861264cba4bf79fa73f6f7d6
c3bdc9bb12c7c951ca2d861c95156de2c724acc82386e882864c464132e07ac3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-22484186-3&cid=1005522054.1664208863&jid=1610125967&_u=YEBAAUAAAAAAAC~&z=1369255363
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-22484186-3&cid=1005522054.1664208863&jid=1610125967&_u=YEBAAUAAAAAAAC~&z=1369255363
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-22484186-3&cid=1005522054.1664208863&jid=1610125967&_u=YEBAAUAAAAAAAC~&z=1369255363 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 26 Sep 2022 16:14:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-22484186-3&cid=1005522054.1664208863&jid=1610125967&_u=YEBAAUAAAAAAAC~&z=1369255363
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-22484186-3&cid=1005522054.1664208863&jid=1610125967&_u=YEBAAUAAAAAAAC~&z=1369255363
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-22484186-3&cid=1005522054.1664208863&jid=1610125967&_u=YEBAAUAAAAAAAC~&z=1369255363 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 26 Sep 2022 16:14:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f61c5ada09e4fa747144a96e95a943f
e7f3119b4d75a72dd0409673b9789ac1f3233d23
95afa75f054462b0db7b7b59ebadecc07ce8e4eac12b07e76645848983c52bcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 16:14:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.armyleaf.sa.com/offer.php?id=16&sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
200 OK 0 B URL HTTP/2 www.armyleaf.sa.com/offer.php?id=16&sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /offer.php?id=16&sid=994118&h=vhfes8dh99b4owffvinxkazivk4ds7bbzot4yb4qa3g/vdb6va2763lg6m0oms7yvbip9aknddw3b8wdohyhqoyoacn3iaybhf8gfo3lg-i8coghkg5j09dbjp_yu1nwxoeffoztyddhxkp_kbkxsejb2rwlsqecisoq1rtjrlhk HTTP/1.1
Host: www.armyleaf.sa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 16:14:23 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.3.25
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6V%2F0LkMaNR2WWTTyGi%2FGlHBJ%2B3X0voRQVXaIaZ3AFv4J5WmdV0%2BPCgbVDLMy2facbrkkhZsRSIsEkDl6f3Jq28XZmGqKIahNT6QLzazpJOk6Jm%2FagfvqTanAW8zlIcWixE7G58LE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750d4ad549fdb4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
connect.facebook.net/signals/config/371373974792356?v=2.8.37&r=stable
200 OK 0 B URL HTTP/2 connect.facebook.net/signals/config/371373974792356?v=2.8.37&r=stable
IP
GET /signals/config/371373974792356?v=2.8.37&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: I+aXUB2WvgJGVAnqHbTfaxQHsep4lA+K2LR2p3oBtBsnn1ADLv7stS6kSYBMAdGLL7SG24OEqfntksuiRrWEmQ==
x-fb-trip-id: 1679558926
date: Mon, 26 Sep 2022 16:14:25 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
techxsv.com/intl_3/images/products/dronexpro/favicon.png
404 Not Found 0 B URL HTTP/2 techxsv.com/intl_3/images/products/dronexpro/favicon.png
IP
GET /intl_3/images/products/dronexpro/favicon.png HTTP/1.1
Host: techxsv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.armyleaf.sa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Mon, 26 Sep 2022 16:14:25 GMT
content-type: text/html; charset=UTF-8
server: nginx
vary: Accept-Encoding
x-powered-by: PHP/8.0.13
set-cookie: PAGE_LANG=no; expires=Wed, 26-Oct-2022 16:14:25 GMT; Max-Age=2592000; path=/
cache-control: no-cache, private
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.212.234
151.101.85.44
23.36.76.226
93.184.220.29
157.240.200.14
52.29.214.177
104.21.23.190