| www.googletagmanager.com/gtag/js?id=UA-85346163-2 |  142.250.74.168 | 200 OK | 52 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-85346163-2 IP142.250.74.168:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File typeASCII text, with very long lines (2213) Hash9942e42cdbe97a8a9928dfd9a2d0ab54 c0c6ba3e53093d6e5e7c8b0d63a5c7291b32b67a c35352693f3b402b796b792717c6bde4752e5f0da376b94fea9e5c74566299aa
GET /gtag/js?id=UA-85346163-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 09:48:08 GMT
expires: Mon, 11 Dec 2023 09:48:08 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51623
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| atlaq.com/logo.png |  104.21.64.58 | 200 OK | 117 kB |
IP104.21.64.58:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerCloudflare, Inc. Subjectatlaq.com Fingerprint5E:AC:5A:49:0B:05:39:5A:D5:49:EF:4E:F8:76:94:B6:C0:A1:29:84 ValidityTue, 29 Aug 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typePNG image data, 500 x 446, 8-bit/color RGBA, non-interlaced
- data Size117 kB (117433 bytes) Hash792b74959e26cd37fd05dfcd0ef07770 c6e3ed2dd9771b077daf93eda5773cd10d621147 7ae2cb133588b7a2926b71630869d602c294840f6c1379666e82b25f3354623b
GET /logo.png HTTP/1.1
Host: atlaq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 09:48:08 GMT
content-type: image/png
content-length: 117433
cache-control: public, max-age=31536000
expires: Mon, 25 Nov 2024 02:30:11 GMT
last-modified: Wed, 29 Jan 2020 11:21:42 GMT
vary: User-Agent,Origin, Accept-Encoding
strict-transport-security: max-age=31536000;includeSubDomains
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1322277
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lZmiLz7R3sYEBwsKFHuXgoTEdet6As0m7YugJohdV7kOVBaVWqpgVGcVSPrRHtiUpCdQTtfDUTBuG8yh%2Ff9lPMWhZrxppEivzFHWDifIy8RSa6i%2BtK9yRlXhy7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833ccf6afed90b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| itweepinbelltor.com/zone?pub=0&zone_id=5490114&is_mobile=false&domain=jswojx.com.atlaq.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 |  139.45.197.250 | 200 OK | 888 B |
URL GET HTTP/2itweepinbelltor.com/zone?pub=0&zone_id=5490114&is_mobile=false&domain=jswojx.com.atlaq.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File typeJSON data
- , ASCII text, with very long lines (887) Hash5800ebd5fac46023ee5ce159af185039 69130d428356b977ec0a5bb70fe95ce3bc947b85 b299942a863006c6c8227371cc765b6eaef53616b56613001feda66f9667444f
GET /zone?pub=0&zone_id=5490114&is_mobile=false&domain=jswojx.com.atlaq.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:08 GMT
content-type: application/json; charset=utf-8
content-length: 888
x-trace-id: d6b72da0ddfafedc5df9c1806485df94
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-FPZ0VEL1WQ&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 90 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-FPZ0VEL1WQ&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File typeASCII text, with very long lines (5955) Hashbc600cc80b75f8c31109ff2159febf4e 4d65f1d3e85c3dec67c8331cc323249abd0d670c 58b31b54c4c3e1aba20b3714d14fa03dce729fa76e2989e39aa50c45801b13c9
GET /gtag/js?id=G-FPZ0VEL1WQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 09:48:08 GMT
expires: Mon, 11 Dec 2023 09:48:08 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 90234
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| itweepinbelltor.com/custom | 139.45.197.250 | 200 OK | 0 B |
URL OPTIONS HTTP/2itweepinbelltor.com/custom IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://jswojx.com.atlaq.com/
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| itweepinbelltor.com/custom | 139.45.197.250 | 200 OK | 39 B |
URL OPTIONS HTTP/2itweepinbelltor.com/custom IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Content-Type: application/json
Content-Length: 377
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: cbd431dc5bc6bf19e5daa087cf6bfa8d
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| whulsaux.com/tag.min.js | 139.45.197.244 | 200 OK | 26 kB |
IP139.45.197.244:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectwhulsaux.com FingerprintA8:C3:DA:A6:D8:7E:B2:1D:20:3B:9D:3B:86:9A:EF:7C:B3:AC:47:D7 ValidityMon, 20 Nov 2023 05:29:27 GMT - Sun, 18 Feb 2024 05:29:26 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashbb657d1047756d414ca6f954c6d8bb09 7f0be8ba49b51f627cf197b1a312684b9e37a3cc d832287476725c8d9631f8a146e42631811e0db07ec426eabf8b02292803521e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tag.min.js HTTP/1.1
Host: whulsaux.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 25676
content-encoding: br
x-trace-id: dba714ee7b60e46ac870e34b8c36f277
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Sun, 10 Dec 2023 21:45:17 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| itweepinbelltor.com/pfe/current/tag.min.js?z=5490114 | 139.45.197.250 | 200 OK | 5.8 kB |
URL GET HTTP/2itweepinbelltor.com/pfe/current/tag.min.js?z=5490114 IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File typeC source, ASCII text, with very long lines (13300), with no line terminators Hash258578af3c107ccb907f73c3a2f4c25f 7a192edea829968fb7f57f2a2fc4cb5b612598be 1f945c9c46c47a2b0e867b0d09c3e4559cd768a2d3747abf28d1d65667733b75
GET /pfe/current/tag.min.js?z=5490114 HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:08 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-33f4"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectamunfezanttor.com Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51 ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
Hashff88e6ff67f37714c2d923c3badeb670 9f970e3c4c33973922b10c27a45e8c5e90359238 dc8070a5165c615d83a5406277e782c91abab7479592142d3e49916bce3b52e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Content-Type: application/json
Content-Length: 505
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| 80limit.com/favicon.ico |  163.172.63.142 | 200 OK | 15 kB |
IP163.172.63.142:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subject80limit.com Fingerprint7A:D8:3D:D6:BC:F0:55:A6:3B:FF:1B:8C:D7:D1:14:4F:2D:5D:48:05 ValidityWed, 11 Oct 2023 12:03:27 GMT - Tue, 09 Jan 2024 12:03:26 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
- data Hash27f6c7cdbaae146742f8258660ec8480 e0620a61aeb27c5e867f88dd0e56d0b3ffa4e43b 8d8f08db58bf3a5e28f3eff70d930a65617e678f04f4a0f102d4c934fa1ea5f2
GET /favicon.ico HTTP/1.1
Host: 80limit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.10.1
Date: Mon, 11 Dec 2023 09:48:09 GMT
Content-Type: image/x-icon
Content-Length: 15086
Last-Modified: Mon, 09 Jan 2023 10:08:50 GMT
Connection: keep-alive
ETag: "63bbe7b2-3aee"
Accept-Ranges: bytes
|
|
| |  188.114.97.1 | 200 OK | 0 B |
URL User Request GET HTTP/2IP188.114.97.1:443
CertificateIssuerCloudflare, Inc. Subjectatlaq.com Fingerprint76:15:CE:DE:39:63:81:C5:4E:4A:13:3D:70:6B:AE:85:FA:98:9A:38 ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: jswojx.com.atlaq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: text/html; charset=UTF-8
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Authorization, Accept
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-expose-headers: Content-Disposition
cache-control: public, max-age=2592000
cf-railgun: direct (waiting for pending WAN connection)
expires: Wed, 10 Jan 2024 09:48:02 GMT
strict-transport-security: max-age=31536000;includeSubDomains
vary: User-Agent,Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-litespeed-cache: hit
x-turbo-charged-by: LiteSpeed
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2atX7urLWGi%2FQcftX7vf22GWD%2BRvVGO%2BiTJj8R0G2%2BZeJvYE0b7O76An3E1k%2BYinaFir2J2ILOmd%2BvTsOuKQEgc%2F8pzfQJIZWLlCOqbX%2BBFxsFymiQ2a6LG19NIbG5ifEc1wkbsngQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833ccf6b0fb1712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| whulsaux.com/5/6577958/?oo=1&aab=1 | 139.45.197.244 | 200 OK | 1.4 kB |
URL GET HTTP/2whulsaux.com/5/6577958/?oo=1&aab=1 IP139.45.197.244:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectwhulsaux.com FingerprintA8:C3:DA:A6:D8:7E:B2:1D:20:3B:9D:3B:86:9A:EF:7C:B3:AC:47:D7 ValidityMon, 20 Nov 2023 05:29:27 GMT - Sun, 18 Feb 2024 05:29:26 GMT
File typegzip compressed data, max speed, from Unix
- data Hash420f95e956ff19dbab54a65d93e8f71f 54821ff208500daba5fc1eab1871aabfaa4a7213 67ec00b0694b66f10c0ca147709cb5cdafa232922a559cbf7944689b0a8c57c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /5/6577958/?oo=1&aab=1 HTTP/1.1
Host: whulsaux.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: application/json
x-trace-id: dfe989078d5d91ba82c2df56190e75da
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=63527c6295f246528e7ba36ef5239ed4; expires=Tue, 10 Dec 2024 09:48:09 GMT; path=/; secure; SameSite=None
oaidts=1702288089; expires=Tue, 10 Dec 2024 09:48:09 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 33streamay.com/favicon.ico | 172.234.25.151 | 403 Forbidden | 93 B |
URL GET HTTP/1.133streamay.com/favicon.ico IP172.234.25.151:443 ASN#20940 Akamai International B.V.
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subject33streamay.com Fingerprint1A:0C:E0:00:90:4D:FA:92:B5:A6:CF:70:CB:0B:2A:B8:AC:5D:0F:8F ValidityMon, 13 Nov 2023 13:29:35 GMT - Sun, 11 Feb 2024 13:29:34 GMT
File typeHTML document, ASCII text Hashb0d506893d4802090edf1644f5f082cd 4bf0d7ecb70703857c7029754fa02a7496313b63 0d3e98ca727fc1201b436170af5a63f23348aaf146a3ac6234f6c4da283e8b34
GET /favicon.ico HTTP/1.1
Host: 33streamay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
content-length: 93
cache-control: no-cache
content-type: text/html
|
|
| atlaq.com/style.css | 104.21.64.58 | 200 OK | 18 kB |
IP104.21.64.58:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerCloudflare, Inc. Subjectatlaq.com Fingerprint5E:AC:5A:49:0B:05:39:5A:D5:49:EF:4E:F8:76:94:B6:C0:A1:29:84 ValidityTue, 29 Aug 2023 00:00:00 GMT - Wed, 28 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (49091), with no line terminators Hash1dc4998a41131ac5df41ae820c7f583c 227aa907d96a66d38f5073700d2d8c5e1262187c 1f807cd9d5d8475f4ec107c17a62318927277940eb8bfe1d386ec97ad4cb9f57
GET /style.css HTTP/1.1
Host: atlaq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 11 Dec 2023 09:48:08 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
cf-bgj: minify
expires: Fri, 22 Dec 2023 03:51:19 GMT
last-modified: Tue, 25 Oct 2022 04:42:27 GMT
strict-transport-security: max-age=31536000;includeSubDomains
vary: Accept-Encoding,User-Agent,Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-turbo-charged-by: LiteSpeed
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 1663009
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K7vTaAnik8GEa9m%2Fam2rmPTElFNmUATbuK%2FtPzLyTsHwEq52QgY9yafeexzTq5WfyvVoa5O5H8lfm3zPHHUuogZi2WJsWn02T6UzgDcldQ08In%2FxWPfvvWsfI%2FU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833ccf697eda5688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| itweepinbelltor.com/event | 139.45.197.250 | 200 OK | 0 B |
URL POST HTTP/2itweepinbelltor.com/event IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://jswojx.com.atlaq.com/
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-FPZ0VEL1WQ>m=45je3bt0v894672372&_p=1702288088946&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=2043604979.1702288089&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1702288089&sct=1&seg=0&dl=https%3A%2F%2Fjswojx.com.atlaq.com%2F&dt=%E9%A3%8E%E8%BD%A6%E5%8A%A8%E6%BC%AB%20-%20%E4%B8%93%E6%B3%A8%E5%8A%A8%E6%BC%AB%E7%9A%84%E9%97%A8%E6%88%B7%E7%BD%91%E7%AB%99-%E9%A3%8E%E8%BD%A6%E5%8A%A8%E6%BC%AB%E7%BD%91&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1571 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-FPZ0VEL1WQ>m=45je3bt0v894672372&_p=1702288088946&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=2043604979.1702288089&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1702288089&sct=1&seg=0&dl=https%3A%2F%2Fjswojx.com.atlaq.com%2F&dt=%E9%A3%8E%E8%BD%A6%E5%8A%A8%E6%BC%AB%20-%20%E4%B8%93%E6%B3%A8%E5%8A%A8%E6%BC%AB%E7%9A%84%E9%97%A8%E6%88%B7%E7%BD%91%E7%AB%99-%E9%A3%8E%E8%BD%A6%E5%8A%A8%E6%BC%AB%E7%BD%91&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1571 IP216.239.32.36:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FPZ0VEL1WQ>m=45je3bt0v894672372&_p=1702288088946&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=2043604979.1702288089&ul=en-us&sr=1280x1024&_eu=AAAI&_s=1&sid=1702288089&sct=1&seg=0&dl=https%3A%2F%2Fjswojx.com.atlaq.com%2F&dt=%E9%A3%8E%E8%BD%A6%E5%8A%A8%E6%BC%AB%20-%20%E4%B8%93%E6%B3%A8%E5%8A%A8%E6%BC%AB%E7%9A%84%E9%97%A8%E6%88%B7%E7%BD%91%E7%AB%99-%E9%A3%8E%E8%BD%A6%E5%8A%A8%E6%BC%AB%E7%BD%91&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=1571 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://jswojx.com.atlaq.com
date: Mon, 11 Dec 2023 09:48:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| itweepinbelltor.com/event | 139.45.197.250 | 200 OK | 94 B |
URL POST HTTP/2itweepinbelltor.com/event IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hash6d63cb739231157729534f95c78e0483 e93df3b7de3b4da5ee072c3a859b71e45fe84792 716d7827b53e3050097441f050a22c34d9ae125f378330d273ac2b2f29a70dcc
POST /event HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Content-Type: application/json
Content-Length: 1633
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js?pub=0&userId=f65458021093468c83cd3c3abac205aa&zoneId=5490114&checkDuplicate=true&ymid=&var= | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?pub=0&userId=f65458021093468c83cd3c3abac205aa&zoneId=5490114&checkDuplicate=true&ymid=&var= IP139.45.195.8:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42 ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
Hasheeff72f5cbb010d6d943ab8a7fa71a6c 30bb07f1c44414f06d937f7c1af862b2ce21f6f0 b78ce5690bab6967bb4f32df08918ab94eec06956804a3dfcdca77debce9511a
GET /gid.js?pub=0&userId=f65458021093468c83cd3c3abac205aa&zoneId=5490114&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Cookie: ID=63527c6295f246528e7ba36ef5239ed4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=63527c6295f246528e7ba36ef5239ed4; expires=Tue, 10 Dec 2024 09:48:09 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectamunfezanttor.com Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51 ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
Hasheb2f63fef9187e875bcb6336465f851a 3d45baa0fff6b531ec862215cf13235d8f4428e1 02a76b5e3736fbc0c76bf91e1ad40c4be2231bef9674232a3bc0938cf4bd80e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Content-Type: application/json
Content-Length: 505
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| itweepinbelltor.com/custom | 139.45.197.250 | 200 OK | 39 B |
URL OPTIONS HTTP/2itweepinbelltor.com/custom IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Content-Type: application/json
Content-Length: 374
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:10 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 598f850153f51fd13795e51e8abe39fa
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-FPZ0VEL1WQ&cid=2043604979.1702288089>m=45je3bt0v894672372&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=2027932829 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-FPZ0VEL1WQ&cid=2043604979.1702288089>m=45je3bt0v894672372&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=2027932829 IP142.250.74.163:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google.no FingerprintDB:33:6A:DD:DA:72:55:0D:55:09:60:6E:D1:5B:40:D8:2B:9B:4F:3C ValidityMon, 20 Nov 2023 08:12:16 GMT - Mon, 12 Feb 2024 08:12:15 GMT
File typeGIF image data, version 89a, 1 x 1
- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-FPZ0VEL1WQ&cid=2043604979.1702288089>m=45je3bt0v894672372&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=2027932829 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 11 Dec 2023 09:48:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://19youngporn.com | 142.250.74.132 | 404 Not Found | 726 B |
URL GET HTTP/2t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://19youngporn.com IP142.250.74.132:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1 ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
- data Hashb8a0bf372c762e966cc99ede8682bc71 2d7c9b60d1e2b4f4726141de2e4ab738110b9287 59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://19youngporn.com HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: image/png
x-content-type-options: nosniff
date: Mon, 11 Dec 2023 09:48:10 GMT
server: sffe
content-length: 726
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://8anime.art | 142.250.74.132 | 404 Not Found | 726 B |
URL GET HTTP/2t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://8anime.art IP142.250.74.132:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1 ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
- data Hashb8a0bf372c762e966cc99ede8682bc71 2d7c9b60d1e2b4f4726141de2e4ab738110b9287 59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://8anime.art HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: image/png
x-content-type-options: nosniff
date: Mon, 11 Dec 2023 09:48:10 GMT
server: sffe
content-length: 726
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://jswojx.com | 142.250.74.132 | 200 OK | 863 B |
URL GET HTTP/2t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://jswojx.com IP142.250.74.132:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1 ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
- data Hash1a23351427007cc93904d0679ccd6fd2 f32e1667e517c9ca13361c788cb385cd4534d717 7f0bf144307fd6909d843f1b7bb121347555a40e896c4756d625d13212849003
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://jswojx.com HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
content-location: https://www.jswojx.com/favicon.ico
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="media-favicon"
report-to: {"group":"media-favicon","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/media-favicon"}]}
content-length: 863
date: Mon, 11 Dec 2023 09:48:10 GMT
expires: Mon, 18 Dec 2023 09:48:10 GMT
cache-control: public, max-age=604800
last-modified: Tue, 18 Feb 2020 02:17:16 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://33streamay.com | 142.250.74.132 | 404 Not Found | 726 B |
URL GET HTTP/2t1.gstatic.com/faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://33streamay.com IP142.250.74.132:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1 ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
- data Hashb8a0bf372c762e966cc99ede8682bc71 2d7c9b60d1e2b4f4726141de2e4ab738110b9287 59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64
GET /faviconV2?client=SOCIAL&type=FAVICON&fallback_opts=TYPE,SIZE,URL&size=64&url=https://33streamay.com HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: image/png
x-content-type-options: nosniff
date: Mon, 11 Dec 2023 09:48:10 GMT
server: sffe
content-length: 726
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 3xc.be/favicon.ico |  5.134.4.122 | 302 Found | 0 B |
IP5.134.4.122:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subject3xc.be Fingerprint02:EC:D4:E7:82:7F:FB:E2:ED:CF:F7:CC:3B:F0:6C:29:6E:B5:1C:BB ValidityMon, 16 Oct 2023 14:32:40 GMT - Sun, 14 Jan 2024 14:32:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 3xc.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 11 Dec 2023 09:48:10 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-frame-options: SAMEORIGIN
link: <https://3xc.be/wp-json/>; rel="https://api.w.org/"
x-tec-api-version: v1
x-tec-api-root: https://3xc.be/wp-json/tribe/events/v1/
x-tec-api-origin: https://3xc.be
x-redirect-by: WordPress
set-cookie: pll_language=nl; expires=Tue, 10-Dec-2024 09:48:10 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
location: https://3xc.be/wp-content/uploads/2018/11/cropped-LOGO-CLOUD-COMPUTER-COMPANY-32x32.png
X-Firefox-Spdy: h2
|
|
| itweepinbelltor.com/custom | 139.45.197.250 | 200 OK | 39 B |
URL OPTIONS HTTP/2itweepinbelltor.com/custom IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Content-Type: application/json
Content-Length: 734
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:10 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: d917426685eda3b457a084cef6578aeb
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| 3xc.be/wp-content/uploads/2018/11/cropped-LOGO-CLOUD-COMPUTER-COMPANY-32x32.png | 5.134.4.122 | 200 OK | 1.3 kB |
URL GET HTTP/23xc.be/wp-content/uploads/2018/11/cropped-LOGO-CLOUD-COMPUTER-COMPANY-32x32.png IP5.134.4.122:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subject3xc.be Fingerprint02:EC:D4:E7:82:7F:FB:E2:ED:CF:F7:CC:3B:F0:6C:29:6E:B5:1C:BB ValidityMon, 16 Oct 2023 14:32:40 GMT - Sun, 14 Jan 2024 14:32:39 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
- data Hashe33aff546886ccb862b3bb8a4e196fc6 6543259761b2b7cfb512f5e7906c43cb5ac5915e 1ba9245589b8fd67f712e3c49fcef672b6fb00b2853d364e8738cf17416210ad
GET /wp-content/uploads/2018/11/cropped-LOGO-CLOUD-COMPUTER-COMPANY-32x32.png HTTP/1.1
Host: 3xc.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:10 GMT
content-type: image/png
content-length: 1263
last-modified: Wed, 14 Nov 2018 16:03:08 GMT
etag: "4ef-57aa211f34700"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 8anime.art/favicon.ico | 172.234.25.151 | 403 Forbidden | 0 B |
IP172.234.25.151:443 ASN#20940 Akamai International B.V.
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subject8anime.art Fingerprint6C:E3:8A:96:98:EC:E8:2F:F5:35:35:99:2A:CA:D7:6C:3E:A6:2F:3A ValidityMon, 20 Nov 2023 11:07:16 GMT - Sun, 18 Feb 2024 11:07:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 8anime.art
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
content-length: 93
cache-control: no-cache
content-type: text/html
|
|
| my.rtmark.net/gid.js?userId=63527c6295f246528e7ba36ef5239ed4 | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=63527c6295f246528e7ba36ef5239ed4 IP139.45.195.8:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42 ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash75b40c2aef2660ca192595fd667e1f6a e171b9f874c7f7e24a5d7a58949221486b8705df ff24c11be7ddc422a0227d24e9d6d40eb56dc9eadd7353156960971276cea2ac
GET /gid.js?userId=63527c6295f246528e7ba36ef5239ed4 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=63527c6295f246528e7ba36ef5239ed4; expires=Tue, 10 Dec 2024 09:48:09 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| jswojx.com.atlaq.com/sw-5490114.js | 188.114.97.1 | 404 Not Found | 4.8 kB |
URL GET HTTP/3jswojx.com.atlaq.com/sw-5490114.js IP188.114.97.1:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerCloudflare, Inc. Subjectatlaq.com Fingerprint76:15:CE:DE:39:63:81:C5:4E:4A:13:3D:70:6B:AE:85:FA:98:9A:38 ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
File typeHTML document text
- HTML document text
- HTML document text
- HTML document, ASCII text, with very long lines (5213), with no line terminators Hash544e939050d2421a4d8f8ff308ade809 2464e831970ca9846ab4a5e5bf9e6b3184e6557d 32d1737df6b9ece657e8092fcc2f786efbb472e7a84e2baae1fb17efabdded34
GET /sw-5490114.js HTTP/1.1
Host: jswojx.com.atlaq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
DNT: 1
Connection: keep-alive
Cookie: _ga_FPZ0VEL1WQ=GS1.1.1702288089.1.0.1702288089.60.0.0; _ga=GA1.1.2043604979.1702288089
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 10 Jan 2024 09:48:09 GMT
x-litespeed-cache: miss
vary: Accept-Encoding,User-Agent,Origin
strict-transport-security: max-age=31536000;includeSubDomains
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Authorization, Accept
access-control-expose-headers: Content-Disposition
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kmQhqovwVr8vq9HJraG33D8XoqYzSeS3mEN4tAkqee5ZqHYgx%2B%2FVUvuqVCPObt0iSa9J6ohRim49l3yd89ER%2BBs%2F8%2F0B7SCJzhBOJ%2B%2F9cX3eOkX2DCkvDljjYog1F30prNoP1J5UYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833ccf6cc970712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| itweepinbelltor.com/pfe/current/defaultSkin.min.js | 139.45.197.250 | 200 OK | 57 kB |
URL GET HTTP/2itweepinbelltor.com/pfe/current/defaultSkin.min.js IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pfe/current/defaultSkin.min.js HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-df63"
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itweepinbelltor.com/pfe/current/universal.min.js?v=3.1.471 | 139.45.197.250 | 200 OK | 88 kB |
URL GET HTTP/2itweepinbelltor.com/pfe/current/universal.min.js?v=3.1.471 IP139.45.197.250:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerLet's Encrypt Subjectitweepinbelltor.com Fingerprint02:3B:3D:FF:9B:86:67:A5:C6:4C:6C:1F:CB:D0:95:6B:BE:08:B2:DF ValidityFri, 20 Oct 2023 05:44:18 GMT - Thu, 18 Jan 2024 05:44:17 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashd46d2997ab218d1dba1ab614422ed53f 3f1f6b9847c8ad209835db366c62fcb209b83a67 09e8ce2dfeac0ad09cd24788931b38ea7e7592f2c28eecc324b2dd1cd69d1b42
GET /pfe/current/universal.min.js?v=3.1.471 HTTP/1.1
Host: itweepinbelltor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
Origin: https://jswojx.com.atlaq.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 09:48:08 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-1572c"
access-control-allow-origin: https://jswojx.com.atlaq.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| jswojx.com.atlaq.com/badk.txt | 188.114.97.1 | 200 OK | 44 kB |
URL GET HTTP/3jswojx.com.atlaq.com/badk.txt IP188.114.97.1:443
Requested byhttps://jswojx.com.atlaq.com/ CertificateIssuerCloudflare, Inc. Subjectatlaq.com Fingerprint76:15:CE:DE:39:63:81:C5:4E:4A:13:3D:70:6B:AE:85:FA:98:9A:38 ValidityFri, 25 Aug 2023 00:00:00 GMT - Sat, 24 Aug 2024 23:59:59 GMT
Hashf4245877e1f9b8764acbac7b475ebf2d 7471a9d7354637651fa5d0200febe7ab162fb69a bd300473a295a173716b1b182aed7c14e3551f7400360dd5f694115683ccd41c
GET /badk.txt HTTP/1.1
Host: jswojx.com.atlaq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jswojx.com.atlaq.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 11 Dec 2023 09:48:09 GMT
content-type: text/plain; charset=UTF-8
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Authorization, Accept
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-expose-headers: Content-Disposition
cache-control: public, max-age=2592000
cf-railgun: direct (starting new WAN connection)
expires: Wed, 10 Jan 2024 09:47:58 GMT
last-modified: Mon, 13 Apr 2020 08:00:16 GMT
strict-transport-security: max-age=31536000;includeSubDomains
vary: Accept-Encoding,User-Agent,Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-turbo-charged-by: LiteSpeed
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lg%2FU4XGrX5M6qy5fF%2FcHWTa29NGE7X6Gr0L1yr5HEqF%2FWKa3x1wAq6ixwDmkNKL%2FdvQWoRnOVnZNjZEC%2BTTmTJKeO3cpK18RxaE9P2pVDcRCqIgwAiv0d1dhVYq1hqnbGgHVKXpEVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833ccf6b0faf712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| traffic.alexa.com/graph?w=260&h=190&o=f&c=1&y=t&b=f5f5f5&n=666666&r=2y&u=jswojx.com | 0.0.0.0 | | 0 B |
URL GET traffic.alexa.com/graph?w=260&h=190&o=f&c=1&y=t&b=f5f5f5&n=666666&r=2y&u=jswojx.com IP0.0.0.0:0
Requested byhttps://jswojx.com.atlaq.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /graph?w=260&h=190&o=f&c=1&y=t&b=f5f5f5&n=666666&r=2y&u=jswojx.com HTTP/1.1
Host: traffic.alexa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| 19youngporn.com/favicon.ico | 0.0.0.0 | | 0 B |
URL GET 19youngporn.com/favicon.ico IP0.0.0.0:0
Requested byhttps://jswojx.com.atlaq.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 19youngporn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| traffic.alexa.com/graph?w=260&h=190&o=f&c=1&y=q&b=f5f5f5&n=666666&r=2y&u=jswojx.com | 0.0.0.0 | | 0 B |
URL GET traffic.alexa.com/graph?w=260&h=190&o=f&c=1&y=q&b=f5f5f5&n=666666&r=2y&u=jswojx.com IP0.0.0.0:0
Requested byhttps://jswojx.com.atlaq.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /graph?w=260&h=190&o=f&c=1&y=q&b=f5f5f5&n=666666&r=2y&u=jswojx.com HTTP/1.1
Host: traffic.alexa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jswojx.com.atlaq.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
0.0.0.0