GET www.thezebra.com/cdn-cgi/styles/cf.errors.css
104.16.184.242200 OK 24 kB URL GET www.thezebra.com/cdn-cgi/styles/cf.errors.css
IP 104.16.184.242:443
Requested by https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
Certificate IssuerGoogle Trust Services
Subjectthezebra.com
Fingerprint19:C9:87:73:C1:8B:DF:BA:56:74:0E:51:0F:88:7A:B3:99:95:2D:8A
ValidityTue, 27 May 2025 00:33:14 GMT - Mon, 25 Aug 2025 01:33:11 GMT
File type ASCII text, with very long lines (24050)
Hash 5e8c69a459a691b5d1b9be442332c87d
f24dd1ad7c9080575d92a9a9a2c42620725ef836
84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091
GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: www.thezebra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=_EGQ3QT9s2IZFB0JfBXUxxcWrWoOhEWN2eAbmB9EbC4-1752059822-1.0.1.1-VJSldBHhibQCBFs0Ii2iQnUSy8zljd1CzFpRfFrQWRcMcEEksREGWHyAyQ.zLy3snL5.g.SS_WR0.QMs7HxvaABbbOe4bM0LBzgXDk.EroA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 11:17:03 GMT
content-type: text/css
last-modified: Mon, 07 Jul 2025 12:22:45 GMT
etag: W/"686bbc15-5df3"
server: cloudflare
cf-ray: 95c769a80cc1ebce-CPH
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Wed, 09 Jul 2025 13:17:03 GMT
cache-control: max-age=7200, public
content-encoding: gzip
GET thezebra.pxf.io/c/2334778/1955328/23813?u=www.thezebra.com&subId1=lb_mb7muzb&sharedid=https://dealsrazor.com/1
35.201.76.231302 Found 5.5 kB URL User Request GET thezebra.pxf.io/c/2334778/1955328/23813?u=www.thezebra.com&subId1=lb_mb7muzb&sharedid=https://dealsrazor.com/1
IP 35.201.76.231:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerSectigo Limited
Subject*.pxf.io
FingerprintFC:AA:6E:E7:1D:8D:F2:6B:45:86:9C:2C:C7:E6:91:E5:A4:76:96:BF
ValidityFri, 27 Jun 2025 00:00:00 GMT - Fri, 24 Jul 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/2334778/1955328/23813?u=www.thezebra.com&subId1=lb_mb7muzb&sharedid=https://dealsrazor.com/1 HTTP/1.1
Host: thezebra.pxf.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Wed, 09 Jul 2025 11:17:02 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
timing-allow-origin: *
location: https://www.ojrq.net/p/?return=https%3A%2F%2Fthezebra.pxf.io%2Fc%2F2334778%2F1955328%2F23813%3Fu%3Dwww.thezebra.com%26subId1%3Dlb_mb7muzb%26sharedid%3Dhttps%3A%2F%2Fdealsrazor.com%2F1%26level%3D1&cid=23813&tpsync=yes&auth=591d4799872c15be
content-type: text/html; charset=utf-8
content-length: 276
date: Wed, 09 Jul 2025 11:17:02 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET thezebra.pxf.io/c/2334778/1955328/23813?u=www.thezebra.com&subId1=lb_mb7muzb&sharedid=https://dealsrazor.com/1&level=1&brwsr=3d0a8c48-5cb6-11f0-9423-7b386d54075a&brwsrsig=Ril0XeVqpWKpyDrVq6w9xzwdXA2UGa
35.201.76.231301 Moved Permanently 5.5 kB URL User Request GET thezebra.pxf.io/c/2334778/1955328/23813?u=www.thezebra.com&subId1=lb_mb7muzb&sharedid=https://dealsrazor.com/1&level=1&brwsr=3d0a8c48-5cb6-11f0-9423-7b386d54075a&brwsrsig=Ril0XeVqpWKpyDrVq6w9xzwdXA2UGa
IP 35.201.76.231:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerSectigo Limited
Subject*.pxf.io
FingerprintFC:AA:6E:E7:1D:8D:F2:6B:45:86:9C:2C:C7:E6:91:E5:A4:76:96:BF
ValidityFri, 27 Jun 2025 00:00:00 GMT - Fri, 24 Jul 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/2334778/1955328/23813?u=www.thezebra.com&subId1=lb_mb7muzb&sharedid=https://dealsrazor.com/1&level=1&brwsr=3d0a8c48-5cb6-11f0-9423-7b386d54075a&brwsrsig=Ril0XeVqpWKpyDrVq6w9xzwdXA2UGa HTTP/1.1
Host: thezebra.pxf.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Wed, 09 Jul 2025 11:17:02 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
timing-allow-origin: *
set-cookie: brwsr=3d0a8c48-5cb6-11f0-9423-7b386d54075a; Domain=.pxf.io; Path=/; Secure; Max-Age=62208000; Expires=Tue, 29 Jun 2027 11:17:02 GMT; HttpOnly; SameSite=None
irld=L3RByeD2ZXzbX1mdQf8SNA0Se2mI3GbR7Dzn2VXixaIQqPU8u; Path=/; Secure; Max-Age=15552000; Expires=Mon, 5 Jan 2026 11:17:02 GMT; HttpOnly; SameSite=None
location: https://www.thezebra.com?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
content-length: 0
date: Wed, 09 Jul 2025 11:17:02 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
104.16.184.242403 Forbidden 5.5 kB URL User Request GET www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
IP 104.16.184.242:443
Certificate IssuerGoogle Trust Services
Subjectthezebra.com
Fingerprint19:C9:87:73:C1:8B:DF:BA:56:74:0E:51:0F:88:7A:B3:99:95:2D:8A
ValidityTue, 27 May 2025 00:33:14 GMT - Mon, 25 Aug 2025 01:33:11 GMT
File type HTML document, ASCII text, with very long lines (945)
Hash f5b1ebcd5a6de713b785b0889e658f6d
a2a6ee618ee7fcf2fad92877caf5e72936792409
04950412a5f0c4ab8bcb88292060d9020a26716da9bfe16c643c18ded4176efe
GET /?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0 HTTP/1.1
Host: www.thezebra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: __cf_bm=_EGQ3QT9s2IZFB0JfBXUxxcWrWoOhEWN2eAbmB9EbC4-1752059822-1.0.1.1-VJSldBHhibQCBFs0Ii2iQnUSy8zljd1CzFpRfFrQWRcMcEEksREGWHyAyQ.zLy3snL5.g.SS_WR0.QMs7HxvaABbbOe4bM0LBzgXDk.EroA
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 11:17:03 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=1,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 95c769a708f6ebce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET www.thezebra.com/cdn-cgi/images/cf-no-screenshot-error.png
104.16.184.242200 OK 3.2 kB URL GET www.thezebra.com/cdn-cgi/images/cf-no-screenshot-error.png
IP 104.16.184.242:443
Requested by https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
Certificate IssuerGoogle Trust Services
Subjectthezebra.com
Fingerprint19:C9:87:73:C1:8B:DF:BA:56:74:0E:51:0F:88:7A:B3:99:95:2D:8A
ValidityTue, 27 May 2025 00:33:14 GMT - Mon, 25 Aug 2025 01:33:11 GMT
File type PNG image data, 178 x 175, 8-bit colormap, non-interlaced
Hash 0d768cbc261841d3affc933b9ac3130e
aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7
1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1
Host: www.thezebra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.thezebra.com/cdn-cgi/styles/cf.errors.css
Cookie: __cf_bm=_EGQ3QT9s2IZFB0JfBXUxxcWrWoOhEWN2eAbmB9EbC4-1752059822-1.0.1.1-VJSldBHhibQCBFs0Ii2iQnUSy8zljd1CzFpRfFrQWRcMcEEksREGWHyAyQ.zLy3snL5.g.SS_WR0.QMs7HxvaABbbOe4bM0LBzgXDk.EroA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 11:17:03 GMT
content-type: image/png
content-length: 3213
last-modified: Mon, 07 Jul 2025 12:22:45 GMT
etag: "686bbc15-c8d"
server: cloudflare
cf-ray: 95c769a8af48ebce-CPH
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Wed, 09 Jul 2025 13:17:03 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
GET www.thezebra.com/favicon.ico
104.16.184.242403 Forbidden 4.5 kB URL GET www.thezebra.com/favicon.ico
IP 104.16.184.242:443
Requested by https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
Certificate IssuerGoogle Trust Services
Subjectthezebra.com
Fingerprint19:C9:87:73:C1:8B:DF:BA:56:74:0E:51:0F:88:7A:B3:99:95:2D:8A
ValidityTue, 27 May 2025 00:33:14 GMT - Mon, 25 Aug 2025 01:33:11 GMT
File type HTML document, ASCII text, with very long lines (394)
Hash d4702a22bb0010ae865b938730ec9073
e65a7e932b6db6cea3924513cb3b2775d3b17673
4af40a5d58937b2e7a816228c89d00be36c61a7d76882e3d08aff836b22f60fe
GET /favicon.ico HTTP/1.1
Host: www.thezebra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=_EGQ3QT9s2IZFB0JfBXUxxcWrWoOhEWN2eAbmB9EbC4-1752059822-1.0.1.1-VJSldBHhibQCBFs0Ii2iQnUSy8zljd1CzFpRfFrQWRcMcEEksREGWHyAyQ.zLy3snL5.g.SS_WR0.QMs7HxvaABbbOe4bM0LBzgXDk.EroA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 11:17:03 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=6,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 95c769a918baebce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET www.thezebra.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
104.16.184.242302 Found 10 kB URL GET www.thezebra.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 104.16.184.242:443
Requested by https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
Certificate IssuerGoogle Trust Services
Subjectthezebra.com
Fingerprint19:C9:87:73:C1:8B:DF:BA:56:74:0E:51:0F:88:7A:B3:99:95:2D:8A
ValidityTue, 27 May 2025 00:33:14 GMT - Mon, 25 Aug 2025 01:33:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: www.thezebra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=_EGQ3QT9s2IZFB0JfBXUxxcWrWoOhEWN2eAbmB9EbC4-1752059822-1.0.1.1-VJSldBHhibQCBFs0Ii2iQnUSy8zljd1CzFpRfFrQWRcMcEEksREGWHyAyQ.zLy3snL5.g.SS_WR0.QMs7HxvaABbbOe4bM0LBzgXDk.EroA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Wed, 09 Jul 2025 11:17:03 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/e7e9d014f96e/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 95c769a918daebce-CPH
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET www.thezebra.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/e7e9d014f96e/main.js?
104.16.184.242200 OK 10 kB URL GET www.thezebra.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/e7e9d014f96e/main.js?
IP 104.16.184.242:443
Requested by https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
Certificate IssuerGoogle Trust Services
Subjectthezebra.com
Fingerprint19:C9:87:73:C1:8B:DF:BA:56:74:0E:51:0F:88:7A:B3:99:95:2D:8A
ValidityTue, 27 May 2025 00:33:14 GMT - Mon, 25 Aug 2025 01:33:11 GMT
File type JavaScript source, ASCII text, with very long lines (9954), with no line terminators
Hash b06b438c314d7ad562f6e357a5b4269c
b877346c9dd233fb2783cff50151e3bfe81f9d38
3f1d42ae947a80a80e814bbc6a00f9dcd5234f402582654cf04093561c9eefa9
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/e7e9d014f96e/main.js? HTTP/1.1
Host: www.thezebra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=_EGQ3QT9s2IZFB0JfBXUxxcWrWoOhEWN2eAbmB9EbC4-1752059822-1.0.1.1-VJSldBHhibQCBFs0Ii2iQnUSy8zljd1CzFpRfFrQWRcMcEEksREGWHyAyQ.zLy3snL5.g.SS_WR0.QMs7HxvaABbbOe4bM0LBzgXDk.EroA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 11:17:03 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 95c769a99ae3ebce-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST www.thezebra.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.6691414214464432:1752056023:hVcXnBl6Qf4SVRt3N7G0UQREsdYTXlT6vWu6VnHNQOA/95c769a708f6ebce
104.16.184.242200 OK 0 B URL POST www.thezebra.com/cdn-cgi/challenge-platform/h/b/jsd/r/0.6691414214464432:1752056023:hVcXnBl6Qf4SVRt3N7G0UQREsdYTXlT6vWu6VnHNQOA/95c769a708f6ebce
IP 104.16.184.242:443
Requested by https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
Certificate IssuerGoogle Trust Services
Subjectthezebra.com
Fingerprint19:C9:87:73:C1:8B:DF:BA:56:74:0E:51:0F:88:7A:B3:99:95:2D:8A
ValidityTue, 27 May 2025 00:33:14 GMT - Mon, 25 Aug 2025 01:33:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.6691414214464432:1752056023:hVcXnBl6Qf4SVRt3N7G0UQREsdYTXlT6vWu6VnHNQOA/95c769a708f6ebce HTTP/1.1
Host: www.thezebra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12400
Origin: https://www.thezebra.com
DNT: 1
Connection: keep-alive
Referer: https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
Cookie: __cf_bm=_EGQ3QT9s2IZFB0JfBXUxxcWrWoOhEWN2eAbmB9EbC4-1752059822-1.0.1.1-VJSldBHhibQCBFs0Ii2iQnUSy8zljd1CzFpRfFrQWRcMcEEksREGWHyAyQ.zLy3snL5.g.SS_WR0.QMs7HxvaABbbOe4bM0LBzgXDk.EroA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 11:17:03 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
set-cookie: cf_clearance=pcdhc9h_pY_CM_BrXL2dMg.ZPRRPGV6xJwBRSRw0Klo-1752059823-1.2.1.1-hJ71xiuyzveB3yMpklmvTBEFzssIrLBfIG53VLZ_07RQ6bqOmyUekglhFa_Vad.lLO7Sv3YZtt5u_GzeEiNib3h9zk5xN4TaMVu_Y4XwrI0t2CrxyIoCV69KP6zRCTefRcwxOlN.kKVM3PYsf.rJQ1zJIz6Z6KHwCmsndwysXpxAwhEtgHcTucqtGoHMOjthin1dF3RNUH0gnVv9caSjenBK3shhbTmxAzikaUYGAdA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=thezebra.com; Expires=Thu, 09 Jul 2026 11:17:03 GMT
priority: u=3,i=?0
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 95c769ab7a3debce-CPH
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET www.ojrq.net/p/?return=https%3A%2F%2Fthezebra.pxf.io%2Fc%2F2334778%2F1955328%2F23813%3Fu%3Dwww.thezebra.com%26subId1%3Dlb_mb7muzb%26sharedid%3Dhttps%3A%2F%2Fdealsrazor.com%2F1%26level%3D1&cid=23813&tpsync=yes&auth=591d4799872c15be
34.95.127.121302 Found 5.5 kB URL User Request GET www.ojrq.net/p/?return=https%3A%2F%2Fthezebra.pxf.io%2Fc%2F2334778%2F1955328%2F23813%3Fu%3Dwww.thezebra.com%26subId1%3Dlb_mb7muzb%26sharedid%3Dhttps%3A%2F%2Fdealsrazor.com%2F1%26level%3D1&cid=23813&tpsync=yes&auth=591d4799872c15be
IP 34.95.127.121:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerSectigo Limited
Subject*.ojrq.net
FingerprintCE:C9:13:F2:5C:74:89:99:91:B9:AF:E4:7F:5F:76:73:BA:BE:A5:E1
ValidityWed, 11 Dec 2024 00:00:00 GMT - Thu, 08 Jan 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/?return=https%3A%2F%2Fthezebra.pxf.io%2Fc%2F2334778%2F1955328%2F23813%3Fu%3Dwww.thezebra.com%26subId1%3Dlb_mb7muzb%26sharedid%3Dhttps%3A%2F%2Fdealsrazor.com%2F1%26level%3D1&cid=23813&tpsync=yes&auth=591d4799872c15be HTTP/1.1
Host: www.ojrq.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Wed, 09 Jul 2025 11:17:02 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
timing-allow-origin: *
set-cookie: brwsr=3d0a8c48-5cb6-11f0-9423-7b386d54075a; Domain=.ojrq.net; Path=/; Secure; Max-Age=62208000; Expires=Tue, 29 Jun 2027 11:17:02 GMT; HttpOnly; SameSite=None
location: https://thezebra.pxf.io/c/2334778/1955328/23813?u=www.thezebra.com&subId1=lb_mb7muzb&sharedid=https://dealsrazor.com/1&level=1&brwsr=3d0a8c48-5cb6-11f0-9423-7b386d54075a&brwsrsig=Ril0XeVqpWKpyDrVq6w9xzwdXA2UGa
content-length: 0
date: Wed, 09 Jul 2025 11:17:02 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
104.16.184.242403 Forbidden 5.5 kB URL User Request GET www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
IP 104.16.184.242:443
Certificate IssuerGoogle Trust Services
Subjectthezebra.com
Fingerprint19:C9:87:73:C1:8B:DF:BA:56:74:0E:51:0F:88:7A:B3:99:95:2D:8A
ValidityTue, 27 May 2025 00:33:14 GMT - Mon, 25 Aug 2025 01:33:11 GMT
File type HTML document, ASCII text, with very long lines (945)
Hash ffee962297af677d4f4e26dc436869dd
be1d10a8abab40abc93fe2453ae1f3e5b827f84d
6d40768dadef99abb9841d96fc25b93699398a8ad927499ec9b1f99e29e581f4
GET /?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0 HTTP/1.1
Host: www.thezebra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 09 Jul 2025 11:17:02 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
set-cookie: __cf_bm=_EGQ3QT9s2IZFB0JfBXUxxcWrWoOhEWN2eAbmB9EbC4-1752059822-1.0.1.1-VJSldBHhibQCBFs0Ii2iQnUSy8zljd1CzFpRfFrQWRcMcEEksREGWHyAyQ.zLy3snL5.g.SS_WR0.QMs7HxvaABbbOe4bM0LBzgXDk.EroA; path=/; expires=Wed, 09-Jul-25 11:47:02 GMT; domain=.thezebra.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 95c769a4cf83abd2-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.thezebra.com/cdn-cgi/images/browser-bar.png?1376755637
104.16.184.242200 OK 715 B URL GET www.thezebra.com/cdn-cgi/images/browser-bar.png?1376755637
IP 104.16.184.242:443
Requested by https://www.thezebra.com/?irclickid=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0&sharedid=https%3A%2F%2Fdealsrazor.com%2F1&irpid=2334778&irgwc=1&utm_source=impactradius&utm_medium=partnership-performance&channelid=N70HD1&subid=Linkbux&subid3=zYWUZU1efxycRkryI83dg0FGUksShAW5D1MORM0
Certificate IssuerGoogle Trust Services
Subjectthezebra.com
Fingerprint19:C9:87:73:C1:8B:DF:BA:56:74:0E:51:0F:88:7A:B3:99:95:2D:8A
ValidityTue, 27 May 2025 00:33:14 GMT - Mon, 25 Aug 2025 01:33:11 GMT
File type PNG image data, 960 x 53, 8-bit colormap, non-interlaced
Hash 226dcb8f6144bdaafdfbd8f2f354be64
3785cc5b3bf52f8e398177b0ff1020b24aa86b8c
8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db
Analyzer Verdict Alert urlquery suspicious Suspicious - Sinkholed / Blocked
GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1
Host: www.thezebra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.thezebra.com/cdn-cgi/styles/cf.errors.css
Cookie: __cf_bm=_EGQ3QT9s2IZFB0JfBXUxxcWrWoOhEWN2eAbmB9EbC4-1752059822-1.0.1.1-VJSldBHhibQCBFs0Ii2iQnUSy8zljd1CzFpRfFrQWRcMcEEksREGWHyAyQ.zLy3snL5.g.SS_WR0.QMs7HxvaABbbOe4bM0LBzgXDk.EroA
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 11:17:03 GMT
content-type: image/png
content-length: 715
last-modified: Mon, 07 Jul 2025 12:22:45 GMT
etag: "686bbc15-2cb"
server: cloudflare
cf-ray: 95c769a8af36ebce-CPH
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Wed, 09 Jul 2025 13:17:03 GMT
cache-control: max-age=7200, public
accept-ranges: bytes