302 Found 2 B URL User Request GET HTTP/1.1 IP
ASN #133618 Trellian Pty. Limited
Certificate IssuerLet's Encrypt
Subjectquestdoagnostics.com
Fingerprint17:CB:37:74:8F:D6:AE:C2:82:99:D7:AE:D1:C5:D5:6D:58:60:4D:A3
ValidityTue, 10 Oct 2023 10:39:17 GMT - Mon, 08 Jan 2024 10:39:16 GMT
Hash e1c06d85ae7b8b032bef47e42e4c08f9
71853c6197a6a7f222db0f1978c7cb232b87c5ee
75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: shortalert.ga
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Thu, 30 Nov 2023 04:21:49 GMT
server: Apache
set-cookie: __tad=1701318109.1098677; expires=Sun, 27-Nov-2033 04:21:49 GMT; Max-Age=315360000
location: http://ww38.shortalert.ga/
content-length: 2
content-type: text/html; charset=UTF-8
connection: close
200 OK 2.6 kB URL User Request GET HTTP/1.1 IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash e44a5955e562d9037175141af13870c9
726c1c8eb4e705b89a8e5d3f317156c293b8bccd
0c35f32e9fe507e6d6dc28ffa77694d103ac9f950993a73bfcb08487a94221b3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.ga domain
GET / HTTP/1.1
Host: ww38.shortalert.ga
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Redirect: skenzo
X-Buckets: bucket011
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_n3LRvNOS19u0KDRaxDEis1uYrM3+wJXg+zFX1cEcVer1JHaO81Bk9TzzuhT7nn+i8SH2kasHgDjO3ABtPOcJFQ==
X-Template: tpl_CleanPeppermintBlack_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Domain: shortalert.ga
X-Subdomain: ww38
Content-Encoding: gzip
c.parkingcrew.net/scripts/sale_form.js
200 OK 761 B URL GET HTTP/1.1 c.parkingcrew.net/scripts/sale_form.js
IP
Requested by http://ww38.shortalert.ga/
Hash 64f809e06446647e192fce8d1ec34e09
5b7ced07da42e205067afa88615317a277a4a82c
f52cbd664986ad7ed6e71c448e2d31d1a16463e4d9b7bca0c6be278649ccc4f3
GET /scripts/sale_form.js HTTP/1.1
Host: c.parkingcrew.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww38.shortalert.ga/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 04:21:50 GMT
Content-Type: application/javascript
Content-Length: 761
Connection: keep-alive
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-2f9"
Accept-Ranges: bytes
ww38.shortalert.ga/favicon.ico
200 OK 0 B URL GET HTTP/1.1 ww38.shortalert.ga/favicon.ico
IP
Requested by http://ww38.shortalert.ga/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.ga domain
GET /favicon.ico HTTP/1.1
Host: ww38.shortalert.ga
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww38.shortalert.ga/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:50 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes
a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&o=1701318116785
200 OK 596 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&o=1701318116785
IP
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with CRLF line terminators
Hash c96313280d20bb359a4f2bd515b56fe0
2e9adbb3c28d83e86d8844ce464b35ad2260caa8
9408d43f9b3676adf2e6fb148c607025136bd3631ec6a55e47919e53e41a79d4
GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&o=1701318116785 HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:52 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 04:21:52 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
ifdnzact.com/px.js?ch=2
200 OK 346 B IP
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
GET /px.js?ch=2 HTTP/1.1
Host: ifdnzact.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:52 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=121
Connection: Keep-Alive
Content-Type: application/javascript
a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1701318112&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&odw=0&dlt=1&l=en
200 OK 597 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1701318112&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&odw=0&dlt=1&l=en
IP
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with CRLF line terminators
Hash a4d639d07471bf10bf47fa6438a0db4c
1b39c237dad1e406e640a6eeefa39f05e73ca412
1404d91dd14ae40618c62a0cfef0da9f70c6069730690e796704457ec8d030dc
GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1701318112&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:52 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 04:21:52 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
ifdnzact.com/px.js?ch=1
200 OK 346 B IP
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
GET /px.js?ch=1 HTTP/1.1
Host: ifdnzact.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:52 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=127
Connection: Keep-Alive
Content-Type: application/javascript
ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
200 OK 36 kB URL GET HTTP/1.1 ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
IP
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ww38.shortalert.ga/
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10738), with CRLF, LF line terminators
Hash 02866770d08266a8fd1d4f017cbe9a29
45600a87373e2639288423de0526fb22701197b9
4537f5292b158679372443e60cb169f9aaaea82f98264395277bd1c2ca187b0e
GET /?dn=shortalert.ga&pid=9PO755G95&_nozc_=1 HTTP/1.1
Host: ifdnzact.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww38.shortalert.ga/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:51 GMT
Server: Apache
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_jfwT8zr0Hx5ObN9HdndnJVxIdNrn/bRvlirWbkJqY+gfcVkZiGHafWrBTwerdwJtuFbbSaXtakm8DFHTBKDkGw==
Keep-Alive: timeout=5, max=122
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&id=68884&o=1701318112&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&odw=0&dlt=1&l=en
200 OK 597 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&id=68884&o=1701318112&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&odw=0&dlt=1&l=en
IP
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with CRLF line terminators
Hash 6dc60a0a6f94bf1f91c24fb5a784fcdb
8bcb3b6f32102dd8e7a08fcee6d2d275e4d4b30e
b1c7bc7c949aee6383eadf5c476475644d72449d0b04c38529aea7df897f0975
GET /delivery/cmp.php?__cmpcc=2&id=68884&o=1701318112&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:52 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 04:21:52 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=3&id=68884&o=1701318112&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&odw=0&dlt=1&l=en
200 OK 14 kB URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=3&id=68884&o=1701318112&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&odw=0&dlt=1&l=en
IP
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with very long lines (45607), with CRLF, LF line terminators
Hash 68e197cfe34a5c8c4a7c6f727804b91b
ae9a76d6794ba051fdacaa2f22c9705b120c7e15
2de26d5860de4104b1d7f6768f46ec57def0467572c8206869fa864ca42eaf10
GET /delivery/cmp.php?__cmpcc=3&id=68884&o=1701318112&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:53 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 04:21:53 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
i4.cdn-image.com/__media__/js/min.js?v2.3
200 OK 8.4 kB URL GET HTTP/1.1 i4.cdn-image.com/__media__/js/min.js?v2.3
IP
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
File type ASCII text, with very long lines (8349), with CRLF line terminators
Hash c16c3a4c0fad29106f34d00e89f6886e
6e11811ab8a98bb295b0916cdee68b302c33403d
097786d677a859b7bc87e285377b083b76d66a2fc2832a16bcd50b0e99df77ff
GET /__media__/js/min.js?v2.3 HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 04:21:53 GMT
Content-Type: application/javascript
Content-Length: 8435
Last-Modified: Fri, 17 Feb 2023 06:44:26 GMT
Connection: keep-alive
ETag: "63ef224a-20f3"
Expires: Thu, 14 Dec 2023 04:21:53 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.d_ncs.d_ancs.d_bncs.cp.d_ds.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&o=1701318117710&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28&
200 OK 43 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.d_ncs.d_ancs.d_bncs.cp.d_ds.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&o=1701318117710&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28&
IP
ASN #61157 PlusServer GmbH
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6f81c41597d3f5a336f458822cc0c32a
8cd77a54b38f1fb376b45af2eaab8f5982523b8d
5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc
GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.d_ncs.d_ancs.d_bncs.cp.d_ds.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dshortalert.ga%26pid%3D9PO755G95%26_nozc_%3D1&o=1701318117710&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28& HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 30 Nov 2023 04:21:53 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Thu, 30 Nov 2023 04:21:53 GMT
Content-Length: 43
Content-Type: image/gif
i4.cdn-image.com/__media__/pics/28905/arrrow.png
200 OK 283 B URL GET HTTP/1.1 i4.cdn-image.com/__media__/pics/28905/arrrow.png
IP
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
File type PNG image data, 17 x 27, 8-bit colormap, non-interlaced\012- data
Hash 80d42c82a6c37da90210fd60a2f36128
554ba7c84d2a27ecf3b1f29d03e62101936b54d8
a1626e2d9160a0890a0a8d6e3af9e7095d68a24f9fb5ac8a166000c9a2581e10
GET /__media__/pics/28905/arrrow.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 04:21:54 GMT
Content-Type: image/png
Content-Length: 283
Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT
Connection: keep-alive
ETag: "61d45d4b-11b"
Expires: Thu, 14 Dec 2023 04:21:54 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
i4.cdn-image.com/__media__/pics/29590/bg1.png
200 OK 18 kB URL GET HTTP/1.1 i4.cdn-image.com/__media__/pics/29590/bg1.png
IP
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
File type PNG image data, 1730 x 988, 4-bit colormap, non-interlaced\012- data
Hash 825ccd29ac102fcadaf92b2343d5917b
24472e766cfac5b82a73b219796556a0a3702bd6
0878fb2875c0ad852de8fb3e8f443afdf3064890f1443b3feccc274382f913cd
GET /__media__/pics/29590/bg1.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 04:21:54 GMT
Content-Type: image/png
Content-Length: 17986
Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT
Connection: keep-alive
ETag: "6380b223-4642"
Expires: Thu, 14 Dec 2023 04:21:54 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
200 OK 17 kB URL GET HTTP/1.1 i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
IP
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
File type Web Open Font Format, TrueType, length 17312, version 2.1\012- data
Hash bebe201d813feaad85a3e66607d0da3a
28b049502afa8e9db5340c1a92400591b39870e8
58bb75322beb862803b0d156e1a1d01fb1e7fde82ee93c929b08bf5aea9fc55b
GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ifdnzact.com
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 04:21:54 GMT
Content-Type: application/font-woff
Content-Length: 17312
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
Connection: keep-alive
ETag: "600809b7-43a0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
200 OK 17 kB URL GET HTTP/1.1 i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
IP
ASN #40034 CONFLUENCE-NETWORK-INC
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
File type Web Open Font Format, TrueType, length 17264, version 2.1\012- data
Hash a43b107861b42ce1335e41e43d4e4d00
99bdb1cec4a68ebe29249c46fefefb6880d009e5
a6542dc92d71eb412bac89d8fb06c70f15be74a64b1b4ef1633288b78f4f2ff2
GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ifdnzact.com
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 30 Nov 2023 04:21:54 GMT
Content-Type: application/font-woff
Content-Length: 17264
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
Connection: keep-alive
ETag: "600809b7-4370"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
cdn.consentmanager.net/delivery/recall/logos/68884
301 Moved Permanently 4.2 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/recall/logos/68884
IP
ASN #60068 Datacamp Limited
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /delivery/recall/logos/68884 HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 30 Nov 2023 04:21:53 GMT
content-type: text/javascript; charset=utf-8
expires: Thu, 30 Nov 2023 20:13:05 GMT
cache-control: public, max-age=86400
edge-control: public, max-age=86400
location: /delivery/whitelabel/cmplogo.svg
x-77-nzt: EwwBuUwJDQH3h3IAAAwBuUwKAQH3CQAAAAgB1GY4nAFB
x-77-nzt-ray: c0a4cc282cb3ab1be10d686592e6700c
x-77-cache: HIT
x-accel-expires: @1701375185
x-accel-date: 1701288794
x-77-age: 29328
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 9, 29319
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
cdn.consentmanager.net/delivery/whitelabel/cmplogo.svg
200 OK 4.2 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/whitelabel/cmplogo.svg
IP
ASN #60068 Datacamp Limited
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (4425), with no line terminators
Hash 46d40c431f8e14f71ab8f2f31eee942b
4f2140ab124f17c65f4a1d7998301b4747d1f87b
042c930c16842f0c1a14d5c16d23429d075c1ebdd16cad3ddd6f0d94ab0ae0ae
GET /delivery/whitelabel/cmplogo.svg HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ifdnzact.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 04:21:54 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Wed, 03 May 2023 16:01:17 GMT
etag: W/"104c-5facc2a822d40"
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 20:12:57 GMT
x-77-nzt: EwwBuUwJDQH3DsQBAAwBuUwKCQH3BgAAAAwBJRPCKAH3BQAAAA
x-77-nzt-ray: c0a4cc282cb3ab1be20d68653f51090c
x-accel-expires: @1732738377
x-accel-date: 1701202388
x-77-cache: HIT
x-77-age: 115737
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 6, 115726
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
cdn.consentmanager.net/delivery/js/cmp_en.min.js
200 OK 412 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/js/cmp_en.min.js
IP
ASN #60068 Datacamp Limited
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 412 kB (411586 bytes)
Hash b10a1c74230a790a3a179cc653cf86e5
54fdb0319920396a555521a5ca7d6b18738f7cd0
f82eef3d8140a1d9cc33d7d98bb72020c5997103d01efac9c8d8e03200552315
GET /delivery/js/cmp_en.min.js HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 04:21:52 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 28 Nov 2023 20:41:16 GMT
etag: W/"647c2-60b3c70a3f300"
cache-control: max-age=86400
expires: Wed, 29 Nov 2023 20:44:32 GMT
edge-control: max-age=86400
x-77-nzt: EwwBuUwJDQH34GgAAAgBuUwKCQFhCAHUZjgJAWE
x-77-nzt-ray: c0a4cc282cb3ab1be00d686589e8d21b
x-77-cache: HIT
content-encoding: gzip
server: CDN77-Turbo
x-accel-expires: @1701377664
x-accel-date: 1701291264
x-cache-lb: MISS, HIT
x-age-lb: 26848
x-77-pop: stockholmSE
x-77-age: 26848
X-Firefox-Spdy: h2
cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8yNjQxNS54XzI4LnYucC50XzI2NDE1Lnh0XzI4.js
200 OK 72 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8yNjQxNS54XzI4LnYucC50XzI2NDE1Lnh0XzI4.js
IP
ASN #60068 Datacamp Limited
Requested by http://ifdnzact.com/?dn=shortalert.ga&pid=9PO755G95&_nozc_=1
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
File type ASCII text, with very long lines (41766)
Hash b1443f606c44cd759486074830775d3c
11043f465a5fdcc1292f1127aa81d7302c62a651
41d942361f38b705c882957b1b4705363aac4889347a0f283de907786a79ee80
GET /delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8yNjQxNS54XzI4LnYucC50XzI2NDE1Lnh0XzI4.js HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ifdnzact.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 04:21:53 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
x-xss-protection: 0
expires: Thu, 30 Nov 2023 04:45:42 GMT
cache-control: public, max-age=1800
edge-control: public, max-age=1800
last-modified: Thu, 30 Nov 2023 04:15:42 GMT
x-77-nzt: EwwBuUwJDQH3QgEAAAwBuUwKCQH3KgAAAAwB1GY4nAH3BwAAAA
x-77-nzt-ray: c0a4cc282cb3ab1be10d68650173e204
x-accel-expires: @1701319542
x-accel-date: 1701317791
x-77-cache: HIT
x-77-age: 371
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 42, 322
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
103.224.182.210
87.230.98.74
208.91.196.46
185.76.9.16
76.223.26.96