302 Found 11 B URL User Request GET HTTP/2 IP
ASN #43350 NForce Entertainment B.V.
Certificate IssuerLet's Encrypt
Subjectveriblockpool.com
FingerprintC7:DE:78:06:8D:58:CA:67:BF:37:5D:CE:F8:1B:3A:1C:63:76:EA:4F
ValidityThu, 07 Sep 2023 16:26:12 GMT - Wed, 06 Dec 2023 16:26:11 GMT
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET / HTTP/1.1
Host: 0au.veriblockpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Sat, 23 Sep 2023 18:49:00 GMT
location: http://dnavexch.com/click?data=NGdxVjBYbWp1dThJeXhnaFZ1WjBqZkR0OGZMblZxZFI1cUlJcVdZdFNKVHhxck80VzFxeXBvY2JsZ3FBajhPOFloWXBNU0M4MTFPUUNqWVlRU0NUTElLVEZscVd3eVR4SERod3JrV1JLMWZVSmw0QTFqTG5NeThDN2JpQUttQ0Q3REhJV1pCVnNHbWc3cUlmcEdGXzR3Mg2&id=26340b7d-39e7-456c-8b93-4ae75dd6242c
server: Cowboy
set-cookie: sid=dbcbeea6-5a41-11ee-8696-2c1aa2805cb0; path=/; domain=.veriblockpool.com; expires=Thu, 11 Oct 2091 22:03:07 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
dnavexch.com/click?data=NGdxVjBYbWp1dThJeXhnaFZ1WjBqZkR0OGZMblZxZFI1cUlJcVdZdFNKVHhxck80VzFxeXBvY2JsZ3FBajhPOFloWXBNU0M4MTFPUUNqWVlRU0NUTElLVEZscVd3eVR4SERod3JrV1JLMWZVSmw0QTFqTG5NeThDN2JpQUttQ0Q3REhJV1pCVnNHbWc3cUlmcEdGXzR3Mg2&id=26340b7d-39e7-456c-8b93-4ae75dd6242c
200 OK 5.5 kB URL User Request GET HTTP/1.1 dnavexch.com/click?data=NGdxVjBYbWp1dThJeXhnaFZ1WjBqZkR0OGZMblZxZFI1cUlJcVdZdFNKVHhxck80VzFxeXBvY2JsZ3FBajhPOFloWXBNU0M4MTFPUUNqWVlRU0NUTElLVEZscVd3eVR4SERod3JrV1JLMWZVSmw0QTFqTG5NeThDN2JpQUttQ0Q3REhJV1pCVnNHbWc3cUlmcEdGXzR3Mg2&id=26340b7d-39e7-456c-8b93-4ae75dd6242c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (349), with CRLF line terminators
Hash 39d09530cff811c96cf424eecc9eeb41
52d6ccf0c6749761568a68f2a0825808bd19b9d6
1b89ea384769e5e1190ff5b8d14050b84f6bc574c806613b55be495a0baa7b00
GET /click?data=NGdxVjBYbWp1dThJeXhnaFZ1WjBqZkR0OGZMblZxZFI1cUlJcVdZdFNKVHhxck80VzFxeXBvY2JsZ3FBajhPOFloWXBNU0M4MTFPUUNqWVlRU0NUTElLVEZscVd3eVR4SERod3JrV1JLMWZVSmw0QTFqTG5NeThDN2JpQUttQ0Q3REhJV1pCVnNHbWc3cUlmcEdGXzR3Mg2&id=26340b7d-39e7-456c-8b93-4ae75dd6242c HTTP/1.1
Host: dnavexch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: MAQyoJhZvDoKqhQ=MAQyoJhZvDoKqhQ; path=/
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Sat, 23 Sep 2023 18:47:13 GMT
Content-Length: 5470
302 Found 1.7 kB URL User Request POST HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1616), with CRLF line terminators
Hash aee0220b2180dd2703c706842e8b42db
d57d3d49a5f578919d5437c4b562debf36adf42a
cfe4a3d6d3e223ce903d75cf1615fd7bf8bd787a504e78e84b1c9db24bcb0028
POST /Redirect/ HTTP/1.1
Host: dnavexch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 359
Origin: http://dnavexch.com
DNT: 1
Connection: keep-alive
Referer: http://dnavexch.com/click?data=NGdxVjBYbWp1dThJeXhnaFZ1WjBqZkR0OGZMblZxZFI1cUlJcVdZdFNKVHhxck80VzFxeXBvY2JsZ3FBajhPOFloWXBNU0M4MTFPUUNqWVlRU0NUTElLVEZscVd3eVR4SERod3JrV1JLMWZVSmw0QTFqTG5NeThDN2JpQUttQ0Q3REhJV1pCVnNHbWc3cUlmcEdGXzR3Mg2&id=26340b7d-39e7-456c-8b93-4ae75dd6242c
Cookie: MAQyoJhZvDoKqhQ=MAQyoJhZvDoKqhQ
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://myckdom.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzzZtwFBeL836fSMU3tyux_w4Du95FeFmWcy4VhBg5laHkUYvcc0zaJmktJmalqtYdZgW00lHZuA6z0VEcA1rjcCBLjVANhNuEATKyNeDwkA0mMQggtb_dXtdY6mfGvI2XDGmVS8SJP_0k2WEV2Z2gT2tQoYSV3nlvqCYzFavmghpby1Ut_qxXe_xrPfCVK7THkk0RJ6_4JcIcNEzzApXtoIk6l_i3nvsswl8WHutbb4K1KKT73HyLCLgeZ3IyHAlVltK-BKCD3_ZySPpPUs9wt9vcjzZq3cJKNHSDUZmgl0lEMr1EkY8BEWyOSrJunQiDvAWlu0exsqfMl2iYScz-MhpJY0uJZsIMRTPwlfnOFDKiOwbY69Wx_GLC4zCP51BRdI534558M5kv3vSwqWN9whpZjEijl2lD1pw4Hllfu5Cqgw_HmBVvlrkg7BiNY30rtafL62j-fqFcntskNASjssxXBKiQVw1c_nAi850m9Y5M_uqcNuJQno6395rqGHc3Sb7Lmkwq2X9gDjGYAvJskkC3DyulAqPt2wjKpSSPO1r77qI-K9LO86y98labC6LDbBDhEPqil-Q_xb12w_-LRAnhuXOKIRBOwyShadSSZPL6tU7_N4djazcHG23EFzkxYpVYuVU6rfRfgY7zxF0JKNDSAAE4xU7hu8sZzdasxenHOjJbGA7MVW1TmzM5-SqriJnoXgt_cO5fPVoS1ASdZYYxJ_hqhmFran7eldyhupPmwKO7kvfyR6IKE1fblwQOUjwvbcmDmPfY7rQ1HcCXhfTzDvqkYCQdOJhXIaeIUagvD8F3jheQfVkjPiDxeuz4HQeiyXOT7zqWylpUK9yBKg6sCbIw1lehCHkwpxHADEg5vmlI0F_NnpVn1GpPxNsEoaiHRUvHDe-6BHnwYIeS4Lffxu8rWGWFw8YR55K68JYQRKVwNLRf6JyghJqKHHyzW6meo2rIzjH4-hMWqvcI2ichxPX96b1dyQPtXcJTecQHYnF_uGKIhflVdO4tCVvabfaCU-MbVzLeOuDHI4OhPTM_L8ayOHc2YzDqRUtoRj9HOr9rg-OLgyhtt78QP05sZZYtAyl-hpVtto633hCLxruZh0qJZTfP53N9Jb7zIve4nbGmBqIFCzsO-Izdh5Pat6-gKIW275cqnQAZrjI1Ktjjq-D96pKbzXVyF1S08xmL9JvVDV9nj0LOOBui2RlZL8Oej3Le61CofNCbB49OGBRoKmDsGXwyb8Eize-rIcbwG5ieWYPTqK0_42fXqSd5snEnRe91iTV80eBUW9SK6PZqqwVyB2Fmg60oArSkidSXH8dLYd0OJHzitSIi7JXP88lyb0MLU6wVSWQHXIXP9EiwH-sFOs4909JxuSShztICBk-zXXZfyDra2egNYtGfRJq48f5BpVnQTu-W2tnIZmWAJegMSt8YnMXOK6yWWJKt3YGXAy3VZ5z7G7ZPe4bzvQ1q0TVydv1DlFQO5HpzDyP6We27X_cvMYjFXZ7VyMb
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type
Date: Sat, 23 Sep 2023 18:47:13 GMT
Content-Length: 1688
ocsp.sectigo.com/
471 B IP
Hash 65f595179d719399606bba0b34b0837e
4b316cdd19b180a41303698f9c8659adf038878d
220aec9b8a47da8d846912161f49b7d40e3fbf3e6cbb921a422b4a4dfa9b208b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 18:49:01 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 20 Sep 2023 18:29:39 GMT
Expires: Wed, 27 Sep 2023 18:29:38 GMT
Etag: "4b316cdd19b180a41303698f9c8659adf038878d"
Cache-Control: max-age=343883,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80b4f71acf1a0b55-OSL
myckdom.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzzZtwFBeL836fSMU3tyux_w4Du95FeFmWcy4VhBg5laHkUYvcc0zaJmktJmalqtYdZgW00lHZuA6z0VEcA1rjcCBLjVANhNuEATKyNeDwkA0mMQggtb_dXtdY6mfGvI2XDGmVS8SJP_0k2WEV2Z2gT2tQoYSV3nlvqCYzFavmghpby1Ut_qxXe_xrPfCVK7THkk0RJ6_4JcIcNEzzApXtoIk6l_i3nvsswl8WHutbb4K1KKT73HyLCLgeZ3IyHAlVltK-BKCD3_ZySPpPUs9wt9vcjzZq3cJKNHSDUZmgl0lEMr1EkY8BEWyOSrJunQiDvAWlu0exsqfMl2iYScz-MhpJY0uJZsIMRTPwlfnOFDKiOwbY69Wx_GLC4zCP51BRdI534558M5kv3vSwqWN9whpZjEijl2lD1pw4Hllfu5Cqgw_HmBVvlrkg7BiNY30rtafL62j-fqFcntskNASjssxXBKiQVw1c_nAi850m9Y5M_uqcNuJQno6395rqGHc3Sb7Lmkwq2X9gDjGYAvJskkC3DyulAqPt2wjKpSSPO1r77qI-K9LO86y98labC6LDbBDhEPqil-Q_xb12w_-LRAnhuXOKIRBOwyShadSSZPL6tU7_N4djazcHG23EFzkxYpVYuVU6rfRfgY7zxF0JKNDSAAE4xU7hu8sZzdasxenHOjJbGA7MVW1TmzM5-SqriJnoXgt_cO5fPVoS1ASdZYYxJ_hqhmFran7eldyhupPmwKO7kvfyR6IKE1fblwQOUjwvbcmDmPfY7rQ1HcCXhfTzDvqkYCQdOJhXIaeIUagvD8F3jheQfVkjPiDxeuz4HQeiyXOT7zqWylpUK9yBKg6sCbIw1lehCHkwpxHADEg5vmlI0F_NnpVn1GpPxNsEoaiHRUvHDe-6BHnwYIeS4Lffxu8rWGWFw8YR55K68JYQRKVwNLRf6JyghJqKHHyzW6meo2rIzjH4-hMWqvcI2ichxPX96b1dyQPtXcJTecQHYnF_uGKIhflVdO4tCVvabfaCU-MbVzLeOuDHI4OhPTM_L8ayOHc2YzDqRUtoRj9HOr9rg-OLgyhtt78QP05sZZYtAyl-hpVtto633hCLxruZh0qJZTfP53N9Jb7zIve4nbGmBqIFCzsO-Izdh5Pat6-gKIW275cqnQAZrjI1Ktjjq-D96pKbzXVyF1S08xmL9JvVDV9nj0LOOBui2RlZL8Oej3Le61CofNCbB49OGBRoKmDsGXwyb8Eize-rIcbwG5ieWYPTqK0_42fXqSd5snEnRe91iTV80eBUW9SK6PZqqwVyB2Fmg60oArSkidSXH8dLYd0OJHzitSIi7JXP88lyb0MLU6wVSWQHXIXP9EiwH-sFOs4909JxuSShztICBk-zXXZfyDra2egNYtGfRJq48f5BpVnQTu-W2tnIZmWAJegMSt8YnMXOK6yWWJKt3YGXAy3VZ5z7G7ZPe4bzvQ1q0TVydv1DlFQO5HpzDyP6We27X_cvMYjFXZ7VyMb
302 Found 0 B URL User Request GET HTTP/2 myckdom.com/aS/feedclick?s=HFz5zNIIs95ROWPasgEEzzZtwFBeL836fSMU3tyux_w4Du95FeFmWcy4VhBg5laHkUYvcc0zaJmktJmalqtYdZgW00lHZuA6z0VEcA1rjcCBLjVANhNuEATKyNeDwkA0mMQggtb_dXtdY6mfGvI2XDGmVS8SJP_0k2WEV2Z2gT2tQoYSV3nlvqCYzFavmghpby1Ut_qxXe_xrPfCVK7THkk0RJ6_4JcIcNEzzApXtoIk6l_i3nvsswl8WHutbb4K1KKT73HyLCLgeZ3IyHAlVltK-BKCD3_ZySPpPUs9wt9vcjzZq3cJKNHSDUZmgl0lEMr1EkY8BEWyOSrJunQiDvAWlu0exsqfMl2iYScz-MhpJY0uJZsIMRTPwlfnOFDKiOwbY69Wx_GLC4zCP51BRdI534558M5kv3vSwqWN9whpZjEijl2lD1pw4Hllfu5Cqgw_HmBVvlrkg7BiNY30rtafL62j-fqFcntskNASjssxXBKiQVw1c_nAi850m9Y5M_uqcNuJQno6395rqGHc3Sb7Lmkwq2X9gDjGYAvJskkC3DyulAqPt2wjKpSSPO1r77qI-K9LO86y98labC6LDbBDhEPqil-Q_xb12w_-LRAnhuXOKIRBOwyShadSSZPL6tU7_N4djazcHG23EFzkxYpVYuVU6rfRfgY7zxF0JKNDSAAE4xU7hu8sZzdasxenHOjJbGA7MVW1TmzM5-SqriJnoXgt_cO5fPVoS1ASdZYYxJ_hqhmFran7eldyhupPmwKO7kvfyR6IKE1fblwQOUjwvbcmDmPfY7rQ1HcCXhfTzDvqkYCQdOJhXIaeIUagvD8F3jheQfVkjPiDxeuz4HQeiyXOT7zqWylpUK9yBKg6sCbIw1lehCHkwpxHADEg5vmlI0F_NnpVn1GpPxNsEoaiHRUvHDe-6BHnwYIeS4Lffxu8rWGWFw8YR55K68JYQRKVwNLRf6JyghJqKHHyzW6meo2rIzjH4-hMWqvcI2ichxPX96b1dyQPtXcJTecQHYnF_uGKIhflVdO4tCVvabfaCU-MbVzLeOuDHI4OhPTM_L8ayOHc2YzDqRUtoRj9HOr9rg-OLgyhtt78QP05sZZYtAyl-hpVtto633hCLxruZh0qJZTfP53N9Jb7zIve4nbGmBqIFCzsO-Izdh5Pat6-gKIW275cqnQAZrjI1Ktjjq-D96pKbzXVyF1S08xmL9JvVDV9nj0LOOBui2RlZL8Oej3Le61CofNCbB49OGBRoKmDsGXwyb8Eize-rIcbwG5ieWYPTqK0_42fXqSd5snEnRe91iTV80eBUW9SK6PZqqwVyB2Fmg60oArSkidSXH8dLYd0OJHzitSIi7JXP88lyb0MLU6wVSWQHXIXP9EiwH-sFOs4909JxuSShztICBk-zXXZfyDra2egNYtGfRJq48f5BpVnQTu-W2tnIZmWAJegMSt8YnMXOK6yWWJKt3YGXAy3VZ5z7G7ZPe4bzvQ1q0TVydv1DlFQO5HpzDyP6We27X_cvMYjFXZ7VyMb
IP
Certificate IssuerSectigo Limited
Subject*.myckdom.com
FingerprintC3:7B:F3:48:A1:46:69:95:EE:19:75:CE:1A:EA:F9:AD:EF:C7:25:77
ValidityMon, 20 Mar 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /aS/feedclick?s=HFz5zNIIs95ROWPasgEEzzZtwFBeL836fSMU3tyux_w4Du95FeFmWcy4VhBg5laHkUYvcc0zaJmktJmalqtYdZgW00lHZuA6z0VEcA1rjcCBLjVANhNuEATKyNeDwkA0mMQggtb_dXtdY6mfGvI2XDGmVS8SJP_0k2WEV2Z2gT2tQoYSV3nlvqCYzFavmghpby1Ut_qxXe_xrPfCVK7THkk0RJ6_4JcIcNEzzApXtoIk6l_i3nvsswl8WHutbb4K1KKT73HyLCLgeZ3IyHAlVltK-BKCD3_ZySPpPUs9wt9vcjzZq3cJKNHSDUZmgl0lEMr1EkY8BEWyOSrJunQiDvAWlu0exsqfMl2iYScz-MhpJY0uJZsIMRTPwlfnOFDKiOwbY69Wx_GLC4zCP51BRdI534558M5kv3vSwqWN9whpZjEijl2lD1pw4Hllfu5Cqgw_HmBVvlrkg7BiNY30rtafL62j-fqFcntskNASjssxXBKiQVw1c_nAi850m9Y5M_uqcNuJQno6395rqGHc3Sb7Lmkwq2X9gDjGYAvJskkC3DyulAqPt2wjKpSSPO1r77qI-K9LO86y98labC6LDbBDhEPqil-Q_xb12w_-LRAnhuXOKIRBOwyShadSSZPL6tU7_N4djazcHG23EFzkxYpVYuVU6rfRfgY7zxF0JKNDSAAE4xU7hu8sZzdasxenHOjJbGA7MVW1TmzM5-SqriJnoXgt_cO5fPVoS1ASdZYYxJ_hqhmFran7eldyhupPmwKO7kvfyR6IKE1fblwQOUjwvbcmDmPfY7rQ1HcCXhfTzDvqkYCQdOJhXIaeIUagvD8F3jheQfVkjPiDxeuz4HQeiyXOT7zqWylpUK9yBKg6sCbIw1lehCHkwpxHADEg5vmlI0F_NnpVn1GpPxNsEoaiHRUvHDe-6BHnwYIeS4Lffxu8rWGWFw8YR55K68JYQRKVwNLRf6JyghJqKHHyzW6meo2rIzjH4-hMWqvcI2ichxPX96b1dyQPtXcJTecQHYnF_uGKIhflVdO4tCVvabfaCU-MbVzLeOuDHI4OhPTM_L8ayOHc2YzDqRUtoRj9HOr9rg-OLgyhtt78QP05sZZYtAyl-hpVtto633hCLxruZh0qJZTfP53N9Jb7zIve4nbGmBqIFCzsO-Izdh5Pat6-gKIW275cqnQAZrjI1Ktjjq-D96pKbzXVyF1S08xmL9JvVDV9nj0LOOBui2RlZL8Oej3Le61CofNCbB49OGBRoKmDsGXwyb8Eize-rIcbwG5ieWYPTqK0_42fXqSd5snEnRe91iTV80eBUW9SK6PZqqwVyB2Fmg60oArSkidSXH8dLYd0OJHzitSIi7JXP88lyb0MLU6wVSWQHXIXP9EiwH-sFOs4909JxuSShztICBk-zXXZfyDra2egNYtGfRJq48f5BpVnQTu-W2tnIZmWAJegMSt8YnMXOK6yWWJKt3YGXAy3VZ5z7G7ZPe4bzvQ1q0TVydv1DlFQO5HpzDyP6We27X_cvMYjFXZ7VyMb HTTP/1.1
Host: myckdom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dnavexch.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 23 Sep 2023 18:49:02 GMT
content-length: 0
set-cookie: rhid=83648944062; Max-Age=15552000; Expires=Thu, 21-Mar-2024 18:49:02 GMT; Domain=myckdom.com; Path=/; SameSite=None; secure;
location: https://p274639.myckdom.com/adServe/domainClick?ai=9lDNteiARfPh4W20C7UKSvrzpYs909ZDX3CaY_yKGuhicoOwyuqkHcjPOHSGnqiAfD35swl9IbkfI_Ew4P2KMpYIXJO1FDR-kwxrHFHi5bNTQQmg0D7po51LGVWYVlTzl0Sal4zd7Y5D-IoRiWjmF-WJdLgktdb-Bry3DbhZYzD0KLlsNhqmZBJq48f5BpVnnaUHHCbg3sTr2iPLc49PEW5TFkvNzCaCO1OznXhzldCkMoJ0iiuaLjv0OzHFpo4ivjMykj5cBebzitSIi7JXP88lyb0MLU6w3fjuZ-GA1vFm4Mr4OTbR5CVVEUSS1AFYFp_hfKZ9J0BA4ZJwa0lO9PCseOjB5bqQFNGElOvfVPqzPoTh8kp0S2soK2PQR3cPbzWhomH2lm3UDctBB5bK4AzpxF2ezqEJV1Ob-U5CHj4uDi9ZpyJrxP09V6ZFcdrqcc3-XZakKfOsl_hjCpJdkrtG6l-yzFP0nHOFig1NfW5LZmCgEkGJ5JQ8cw7P3FJb&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSLJhaCllu34-rpB7VO6CXtlTqUrTRbyIvw2M56WtlM1a3W1_iMTP8s8qO0GD1S0DzxKThXtKtcTA0Bc_Aw48qQg&si=1&oref=430d0e01a0a7bf587b9ba9ffac6b7190&optunit=ofNCbB49OGBRoKmDsGXwyXnSiUDV5iGD&rb=zm43S8C6KoM&rr=0&abtg=0
X-Firefox-Spdy: h2
p274639.myckdom.com/adServe/domainClick?ai=9lDNteiARfPh4W20C7UKSvrzpYs909ZDX3CaY_yKGuhicoOwyuqkHcjPOHSGnqiAfD35swl9IbkfI_Ew4P2KMpYIXJO1FDR-kwxrHFHi5bNTQQmg0D7po51LGVWYVlTzl0Sal4zd7Y5D-IoRiWjmF-WJdLgktdb-Bry3DbhZYzD0KLlsNhqmZBJq48f5BpVnnaUHHCbg3sTr2iPLc49PEW5TFkvNzCaCO1OznXhzldCkMoJ0iiuaLjv0OzHFpo4ivjMykj5cBebzitSIi7JXP88lyb0MLU6w3fjuZ-GA1vFm4Mr4OTbR5CVVEUSS1AFYFp_hfKZ9J0BA4ZJwa0lO9PCseOjB5bqQFNGElOvfVPqzPoTh8kp0S2soK2PQR3cPbzWhomH2lm3UDctBB5bK4AzpxF2ezqEJV1Ob-U5CHj4uDi9ZpyJrxP09V6ZFcdrqcc3-XZakKfOsl_hjCpJdkrtG6l-yzFP0nHOFig1NfW5LZmCgEkGJ5JQ8cw7P3FJb&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSLJhaCllu34-rpB7VO6CXtlTqUrTRbyIvw2M56WtlM1a3W1_iMTP8s8qO0GD1S0DzxKThXtKtcTA0Bc_Aw48qQg&si=1&oref=430d0e01a0a7bf587b9ba9ffac6b7190&optunit=ofNCbB49OGBRoKmDsGXwyXnSiUDV5iGD&rb=zm43S8C6KoM&rr=0&abtg=0
302 Found 0 B URL User Request GET HTTP/2 p274639.myckdom.com/adServe/domainClick?ai=9lDNteiARfPh4W20C7UKSvrzpYs909ZDX3CaY_yKGuhicoOwyuqkHcjPOHSGnqiAfD35swl9IbkfI_Ew4P2KMpYIXJO1FDR-kwxrHFHi5bNTQQmg0D7po51LGVWYVlTzl0Sal4zd7Y5D-IoRiWjmF-WJdLgktdb-Bry3DbhZYzD0KLlsNhqmZBJq48f5BpVnnaUHHCbg3sTr2iPLc49PEW5TFkvNzCaCO1OznXhzldCkMoJ0iiuaLjv0OzHFpo4ivjMykj5cBebzitSIi7JXP88lyb0MLU6w3fjuZ-GA1vFm4Mr4OTbR5CVVEUSS1AFYFp_hfKZ9J0BA4ZJwa0lO9PCseOjB5bqQFNGElOvfVPqzPoTh8kp0S2soK2PQR3cPbzWhomH2lm3UDctBB5bK4AzpxF2ezqEJV1Ob-U5CHj4uDi9ZpyJrxP09V6ZFcdrqcc3-XZakKfOsl_hjCpJdkrtG6l-yzFP0nHOFig1NfW5LZmCgEkGJ5JQ8cw7P3FJb&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSLJhaCllu34-rpB7VO6CXtlTqUrTRbyIvw2M56WtlM1a3W1_iMTP8s8qO0GD1S0DzxKThXtKtcTA0Bc_Aw48qQg&si=1&oref=430d0e01a0a7bf587b9ba9ffac6b7190&optunit=ofNCbB49OGBRoKmDsGXwyXnSiUDV5iGD&rb=zm43S8C6KoM&rr=0&abtg=0
IP
Certificate IssuerSectigo Limited
Subject*.myckdom.com
FingerprintC3:7B:F3:48:A1:46:69:95:EE:19:75:CE:1A:EA:F9:AD:EF:C7:25:77
ValidityMon, 20 Mar 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /adServe/domainClick?ai=9lDNteiARfPh4W20C7UKSvrzpYs909ZDX3CaY_yKGuhicoOwyuqkHcjPOHSGnqiAfD35swl9IbkfI_Ew4P2KMpYIXJO1FDR-kwxrHFHi5bNTQQmg0D7po51LGVWYVlTzl0Sal4zd7Y5D-IoRiWjmF-WJdLgktdb-Bry3DbhZYzD0KLlsNhqmZBJq48f5BpVnnaUHHCbg3sTr2iPLc49PEW5TFkvNzCaCO1OznXhzldCkMoJ0iiuaLjv0OzHFpo4ivjMykj5cBebzitSIi7JXP88lyb0MLU6w3fjuZ-GA1vFm4Mr4OTbR5CVVEUSS1AFYFp_hfKZ9J0BA4ZJwa0lO9PCseOjB5bqQFNGElOvfVPqzPoTh8kp0S2soK2PQR3cPbzWhomH2lm3UDctBB5bK4AzpxF2ezqEJV1Ob-U5CHj4uDi9ZpyJrxP09V6ZFcdrqcc3-XZakKfOsl_hjCpJdkrtG6l-yzFP0nHOFig1NfW5LZmCgEkGJ5JQ8cw7P3FJb&ui=HFz5zNIIs96w8gbO8AoGVPmI0xR1wwxSLJhaCllu34-rpB7VO6CXtlTqUrTRbyIvw2M56WtlM1a3W1_iMTP8s8qO0GD1S0DzxKThXtKtcTA0Bc_Aw48qQg&si=1&oref=430d0e01a0a7bf587b9ba9ffac6b7190&optunit=ofNCbB49OGBRoKmDsGXwyXnSiUDV5iGD&rb=zm43S8C6KoM&rr=0&abtg=0 HTTP/1.1
Host: p274639.myckdom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dnavexch.com/
DNT: 1
Connection: keep-alive
Cookie: rhid=83648944062
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sat, 23 Sep 2023 18:49:02 GMT
content-length: 0
set-cookie: rhid=83648944062; Max-Age=15552000; Expires=Thu, 21-Mar-2024 18:49:02 GMT; Domain=myckdom.com; Path=/; SameSite=None; secure;
loi=ad_490233_off_142374_aff_3322_cid_274639-576267884-VERIBLOCKPOOL.COM_ts_1695494942; Max-Age=3600; Expires=Sat, 23-Sep-2023 19:49:02 GMT; Domain=myckdom.com; Path=/; SameSite=None; secure;
location: https://myfood.ltd/?v=20171031&s1=0
X-Firefox-Spdy: h2
myfood.ltd/?v=20171031&s1=0
200 OK 2.9 kB URL User Request GET HTTP/2 myfood.ltd/?v=20171031&s1=0
IP
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintAF:F2:15:9E:AD:A5:01:BF:04:2B:13:A2:62:CB:9A:0A:A7:E4:A3:DA
ValidityTue, 25 Jul 2023 22:09:03 GMT - Mon, 23 Oct 2023 22:09:02 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6859), with no line terminators
Hash bfd17df278415108c5aa6f1e67a783a2
89f9563d509eb6908c6c79eb1b51b7a3a97f6565
a5fc1d3a30bcb923fea3cdcae7c570af2bf9654d297538cb17e32fee9e49c77c
GET /?v=20171031&s1=0 HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dnavexch.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:49:03 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 2896
content-type: text/html
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: "603cb731-1ad4"
x-hw: 1695494942.cds002.sk1.hn,1695494942.cds242.sk1.sc,1695494943.cds242.sk1.pr
X-Firefox-Spdy: h2
myfood.ltd/main/css/style.css
200 OK 19 kB URL GET HTTP/2 myfood.ltd/main/css/style.css
IP
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintAF:F2:15:9E:AD:A5:01:BF:04:2B:13:A2:62:CB:9A:0A:A7:E4:A3:DA
ValidityTue, 25 Jul 2023 22:09:03 GMT - Mon, 23 Oct 2023 22:09:02 GMT
File type Unicode text, UTF-8 text, with very long lines (65134), with no line terminators
Hash b37a8eeae408a1494bdd1398572ca662
5d32ff49a17304038e0ffb9f3513848c7fac876d
6e49b8dc2796251befba1628e9940bdf24747eb7da531f4bfcfcea9a61284b63
GET /main/css/style.css HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:49:03 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 18933
content-type: text/css
last-modified: Mon, 01 Mar 2021 09:43:15 GMT
accept-ranges: bytes
server: nginx
etag: W/"603cb733-1b1ac"
x-hw: 1695494943.cds002.sk1.hn,1695494943.cds261.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_1.jpg
200 OK 74 kB URL GET HTTP/2 myfood.ltd/images/Superfood_1.jpg
IP
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintAF:F2:15:9E:AD:A5:01:BF:04:2B:13:A2:62:CB:9A:0A:A7:E4:A3:DA
ValidityTue, 25 Jul 2023 22:09:03 GMT - Mon, 23 Oct 2023 22:09:02 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x420, components 3\012- data
Hash c2c3ec0e55e648c2a85d4499714a9c11
073f2990a52da59a7d3b73583b30be3c2cf45523
b66cf7365382753dc6340bfa2fba89c368ca3b930a0833d8f64c4c34525fc2ec
GET /images/Superfood_1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:49:03 GMT
cache-control: max-age=30
content-length: 74204
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-121dc"
x-hw: 1695494943.cds002.sk1.hn,1695494943.cds247.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/Superfood_2.jpg
200 OK 52 kB URL GET HTTP/2 myfood.ltd/images/Superfood_2.jpg
IP
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintAF:F2:15:9E:AD:A5:01:BF:04:2B:13:A2:62:CB:9A:0A:A7:E4:A3:DA
ValidityTue, 25 Jul 2023 22:09:03 GMT - Mon, 23 Oct 2023 22:09:02 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, copyright=Bigstock], progressive, precision 8, 800x341, components 3\012- data
Hash b87af7248a82f58fe2ea5d0c7b030886
1d5a5b9752d7978c68b0d4a1689b3d8e6d322f0a
14da8c39c357dad0441b26d575c0000a9529c76d785680306a3cf51abe4cae81
GET /images/Superfood_2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:49:03 GMT
cache-control: max-age=30
content-length: 51830
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:13 GMT
accept-ranges: bytes
server: nginx
etag: "603cb731-ca76"
x-hw: 1695494943.cds002.sk1.hn,1695494943.cds220.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-1.jpg
200 OK 11 kB URL GET HTTP/2 myfood.ltd/images/avatar-1.jpg
IP
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintAF:F2:15:9E:AD:A5:01:BF:04:2B:13:A2:62:CB:9A:0A:A7:E4:A3:DA
ValidityTue, 25 Jul 2023 22:09:03 GMT - Mon, 23 Oct 2023 22:09:02 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash 62d0b6a649ac10e72bcb6ea3bbf57564
3e333889b0b66bfc6a32499f4c55878e2102b463
58dddc0a77632d920d096da6c6e2587c5859a4b4dd7af6dcd6eb8009ebc23ba6
GET /images/avatar-1.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:49:03 GMT
cache-control: max-age=30
content-length: 11304
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-2c28"
x-hw: 1695494943.cds002.sk1.hn,1695494943.cds218.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/images/avatar-2.jpg
200 OK 11 kB URL GET HTTP/2 myfood.ltd/images/avatar-2.jpg
IP
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintAF:F2:15:9E:AD:A5:01:BF:04:2B:13:A2:62:CB:9A:0A:A7:E4:A3:DA
ValidityTue, 25 Jul 2023 22:09:03 GMT - Mon, 23 Oct 2023 22:09:02 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=128, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=128], progressive, precision 8, 128x128, components 3\012- data
Hash dd3881ed1b5b03b1d571edf89e12c466
61ca68c1c2d2ae7d286dfc0540f4ca8b357fdf3d
97b65e41dd547b310e1e860d2ae4717dba1d97bd36c0cd06c35749caa515e207
GET /images/avatar-2.jpg HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:49:03 GMT
cache-control: max-age=30
content-length: 10665
content-type: image/jpeg
last-modified: Mon, 01 Mar 2021 09:43:12 GMT
accept-ranges: bytes
server: nginx
etag: "603cb730-29a9"
x-hw: 1695494943.cds002.sk1.hn,1695494943.cds217.sk1.c
X-Firefox-Spdy: h2
myfood.ltd/main/js/main.js
200 OK 39 kB URL GET HTTP/2 myfood.ltd/main/js/main.js
IP
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintAF:F2:15:9E:AD:A5:01:BF:04:2B:13:A2:62:CB:9A:0A:A7:E4:A3:DA
ValidityTue, 25 Jul 2023 22:09:03 GMT - Mon, 23 Oct 2023 22:09:02 GMT
File type Unicode text, UTF-8 text, with very long lines (60220)
Hash 5afab82d547069af6da5f4bf5cea1a0c
136cb970d8792273a240929d0ec6ad23fa26414e
536ff8de8323ecefd3a868b68fc36e950bfb164ba6efa9cf5f90b9f3f522048e
GET /main/js/main.js HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:49:03 GMT
cache-control: max-age=30
content-encoding: gzip
content-length: 38656
content-type: application/javascript
last-modified: Mon, 01 Mar 2021 09:43:14 GMT
accept-ranges: bytes
server: nginx
etag: "603cb732-1d57b"
x-hw: 1695494943.cds002.sk1.hn,1695494943.cds244.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 2a9cb3694beef11368f7284821163a4d
32d723fad91ccd0c154e5d7e489266cfe596aa61
08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 18:49:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2
IP
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 14564, version 1.0\012- data
Hash 60c866748ff15f5b347fdba64596b1b1
34f486906decb7c8cf7a02d4758add9a2408c7a5
5278c0f6063ca9ad85653b18a2ddf1aa57e3ab40b7973a69b09acf859db8264d
GET /s/opensans/v15/DXI1ORHCpsQm3Vp6mXoaTegdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myfood.ltd
DNT: 1
Connection: keep-alive
Referer: https://myfood.ltd/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:22:06 GMT
expires: Sat, 21 Sep 2024 10:22:06 GMT
cache-control: public, max-age=31536000
age: 116817
last-modified: Wed, 11 Oct 2017 21:49:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
200 OK 14 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2
IP
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 14544, version 1.0\012- data
Hash 223a277bd88d8a90c8cdf24cda0ad5f5
24234c1c81b3948758c1a0be8e5a65386ca94c52
d61b45b8b3cded238a65ee0aac4043b989f11cee56acfe5c889777f961f241a2
GET /s/opensans/v15/MTP_ySUJH_bn48VBG8sNSugdm0LZdjqr5-oayXSOefg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myfood.ltd
DNT: 1
Connection: keep-alive
Referer: https://myfood.ltd/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14544
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:24:17 GMT
expires: Fri, 20 Sep 2024 15:24:17 GMT
cache-control: public, max-age=31536000
age: 185086
last-modified: Wed, 11 Oct 2017 21:49:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
myfood.ltd/favicon.ico
200 OK 1.2 kB IP
Requested by https://myfood.ltd/?v=20171031&s1=0
Certificate IssuerLet's Encrypt
Subjectmyfood.ltd
FingerprintAF:F2:15:9E:AD:A5:01:BF:04:2B:13:A2:62:CB:9A:0A:A7:E4:A3:DA
ValidityTue, 25 Jul 2023 22:09:03 GMT - Mon, 23 Oct 2023 22:09:02 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash b671b0407b8abf4ffb9946ee1596d992
79a116ffd13f1888451abd3cb8751cb2140f2fa4
1515616a51664df153b03397585ee45469cb936100992f870419514b17820649
GET /favicon.ico HTTP/1.1
Host: myfood.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://myfood.ltd/?v=20171031&s1=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 18:49:03 GMT
cache-control: max-age=30
content-length: 1150
content-type: image/x-icon
last-modified: Wed, 28 Mar 2018 14:00:16 GMT
accept-ranges: bytes
server: nginx
etag: "5abb9ff0-47e"
x-hw: 1695494943.cds002.sk1.hn,1695494943.cds240.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 2a9cb3694beef11368f7284821163a4d
32d723fad91ccd0c154e5d7e489266cfe596aa61
08cd4f8a916cab4a520c51bd519209ebe87f4898f10d1f1c968bce537c4d3916
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 18:49:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dnavexch.com/favicon.ico
0 B IP
Requested by http://dnavexch.com/click?data=NGdxVjBYbWp1dThJeXhnaFZ1WjBqZkR0OGZMblZxZFI1cUlJcVdZdFNKVHhxck80VzFxeXBvY2JsZ3FBajhPOFloWXBNU0M4MTFPUUNqWVlRU0NUTElLVEZscVd3eVR4SERod3JrV1JLMWZVSmw0QTFqTG5NeThDN2JpQUttQ0Q3REhJV1pCVnNHbWc3cUlmcEdGXzR3Mg2&id=26340b7d-39e7-456c-8b93-4ae75dd6242c
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: dnavexch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dnavexch.com/click?data=NGdxVjBYbWp1dThJeXhnaFZ1WjBqZkR0OGZMblZxZFI1cUlJcVdZdFNKVHhxck80VzFxeXBvY2JsZ3FBajhPOFloWXBNU0M4MTFPUUNqWVlRU0NUTElLVEZscVd3eVR4SERod3JrV1JLMWZVSmw0QTFqTG5NeThDN2JpQUttQ0Q3REhJV1pCVnNHbWc3cUlmcEdGXzR3Mg2&id=26340b7d-39e7-456c-8b93-4ae75dd6242c
Cookie: MAQyoJhZvDoKqhQ=MAQyoJhZvDoKqhQ
Pragma: no-cache
Cache-Control: no-cache
77.247.182.242
192.99.158.241
104.18.14.101
52.117.247.211