GET www.oxid.it/_static/deliver.js?nonce=3498571
200 OK 26 kB URL GET www.oxid.it/_static/deliver.js?nonce=3498571
IP
ASN #63949 Akamai Connected Cloud
Requested by https://www.oxid.it/downloads/ca_setup.exe
Certificate IssuerLet's Encrypt
Subjectoxid.it
FingerprintFF:5E:1C:DC:BF:B8:27:B0:62:F0:21:04:65:53:01:AA:0D:CC:57:AB
ValidityMon, 07 Apr 2025 15:20:49 GMT - Sun, 06 Jul 2025 15:20:48 GMT
Hash e88db5a595908543019e5c60b5584c9a
1ede61696f18d09dbb4b1f8a68fb42dc07533f2d
565a4ffddb2d710120a63dd41397541bd8b3af72a01d71d70c7b5830bee58ceb
GET /_static/deliver.js?nonce=3498571 HTTP/1.1
Host: www.oxid.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oxid.it/downloads/ca_setup.exe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.27.1.2
date: Mon, 12 May 2025 12:41:11 GMT
content-type: application/javascript
last-modified: Mon, 28 Apr 2025 15:32:51 GMT
vary: Accept-Encoding
etag: W/"680f9fa3-6482"
strict-transport-security: max-age=0; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET click-v4.mainexpclkdir.com/click?i=bchSWtQUgQ4_0&rc=1
302 Found 13 kB URL User Request GET click-v4.mainexpclkdir.com/click?i=bchSWtQUgQ4_0&rc=1
IP
ASN #27257 WEBAIR-INTERNET
Certificate IssuerLet's Encrypt
Subjectmainexpclkdir.com
Fingerprint39:14:9C:F0:1F:7A:A4:27:37:81:A8:F3:FA:6F:0F:57:1B:4D:F0:62
ValidityFri, 11 Apr 2025 06:42:36 GMT - Thu, 10 Jul 2025 06:42:35 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=bchSWtQUgQ4_0&rc=1 HTTP/1.1
Host: click-v4.mainexpclkdir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oxid.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 12 May 2025 12:41:12 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Set-Cookie: x3332619=1019660882; Domain=.pushub.net
Location: https://live.onlidex.com/filter?q=oxid.it&i=XUK3m41SjTU_0&ci=3218282228836241380&t=1862979742&h=2
GET blushtales.com/assets/js/script.js
200 OK 201 B URL GET blushtales.com/assets/js/script.js
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectblushtales.com
FingerprintF4:6A:9E:52:AC:54:BE:0E:62:03:E0:30:11:E7:90:55:99:0E:67:54
ValidityTue, 08 Apr 2025 14:15:03 GMT - Mon, 07 Jul 2025 14:15:02 GMT
Hash dc3bc0032c09b33b044cf221a5320322
a0a4178870a02fbcb69a73ddb83138b035b622ae
1ab212f27c66c1fb25bf3842e115ece0fb2ce31f09d97c394bf7bef77ae9bc97
GET /assets/js/script.js HTTP/1.1
Host: blushtales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 12 May 2025 12:41:15 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-powered-by: Express
cache-control: public, max-age=0
last-modified: Tue, 08 Apr 2025 15:15:33 GMT
etag: W/"c9-19615f89095"
content-encoding: gzip
X-Firefox-Spdy: h2
GET static.pushub.net/webpush/scripts/v1.2/webpush.js
200 OK 26 kB URL GET static.pushub.net/webpush/scripts/v1.2/webpush.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerLet's Encrypt
Subjectstatic.pushub.net
FingerprintBD:83:2F:A4:B5:2F:6D:29:07:A7:90:61:DF:7D:4E:1F:E8:22:33:EE
ValidityTue, 22 Apr 2025 08:29:44 GMT - Mon, 21 Jul 2025 08:29:43 GMT
File type JavaScript source, ASCII text, with very long lines (25904)
Hash 0288b26dcf4528d8c74e33281a7cb7e7
926907e3d1c919adc513628d9aca882c4d993e5e
a197f0c64431a29086a11493456b4c3cf317d1934b32acb5b0565578e0e8bd4f
GET /webpush/scripts/v1.2/webpush.js HTTP/1.1
Host: static.pushub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript
Content-Length: 25971
Last-Modified: Tue, 28 May 2024 13:10:15 GMT
ETag: "6655d7b7-6573"
Accept-Ranges: bytes
Cache-Control: max-age=23677
Expires: Mon, 12 May 2025 19:15:52 GMT
Date: Mon, 12 May 2025 12:41:15 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
GET xml-v4.pushub.net/pixel?i=ZUJIQp*Gu5Q_0
200 OK 42 B URL GET xml-v4.pushub.net/pixel?i=ZUJIQp*Gu5Q_0
IP
ASN #27257 WEBAIR-INTERNET
Certificate IssuerLet's Encrypt
Subjectpushub.net
FingerprintDC:CE:16:E3:1B:09:87:2A:69:71:6C:96:DB:ED:AF:F9:8D:0B:E5:0F
ValidityTue, 29 Apr 2025 06:54:01 GMT - Mon, 28 Jul 2025 06:54:00 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pixel?i=ZUJIQp*Gu5Q_0 HTTP/1.1
Host: xml-v4.pushub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 May 2025 12:41:16 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Cache-Control: no-store
GET xml.pushub.net/search?feed=778566&auth=34VEZr&subid=blushtales&url=https%3A%2F%2Fblushtales.com&query=blushtales&image_size=0x0&icon_size=0x0&ua=caller&user_ip=caller&format=json&lang=caller&count=2
200 OK 360 B URL GET xml.pushub.net/search?feed=778566&auth=34VEZr&subid=blushtales&url=https%3A%2F%2Fblushtales.com&query=blushtales&image_size=0x0&icon_size=0x0&ua=caller&user_ip=caller&format=json&lang=caller&count=2
IP
ASN #27257 WEBAIR-INTERNET
Certificate IssuerLet's Encrypt
Subjectpushub.net
FingerprintDC:CE:16:E3:1B:09:87:2A:69:71:6C:96:DB:ED:AF:F9:8D:0B:E5:0F
ValidityTue, 29 Apr 2025 06:54:01 GMT - Mon, 28 Jul 2025 06:54:00 GMT
Hash ad56546d13b1fc2309993ce4016663e9
b8d407bbe95c0791e4767d1430c2e6630eef09a8
e2c9ae5ac2cdceecc75faad103e6720bee5edeb320c9c7a80968a2aeae54d9bf
GET /search?feed=778566&auth=34VEZr&subid=blushtales&url=https%3A%2F%2Fblushtales.com&query=blushtales&image_size=0x0&icon_size=0x0&ua=caller&user_ip=caller&format=json&lang=caller&count=2 HTTP/1.1
Host: xml.pushub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blushtales.com
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 May 2025 12:41:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 360
Connection: keep-alive
Access-Control-Allow-Origin: https://blushtales.com
Cache-Control: no-store
Access-Control-Allow-Credentials: true
GET ppb-eu.6zo3f1m226.com/?bid_id=287864b0-3294-4ce9-8921-c17cddeaeb58&bid_req_id=ebfbd9ba-f211-41af-a82f-ad62f0d61086&imp_id=a3170877-48f0-4e95-9bf9-827cd71f6f6b&iu=NB2HI4DTHIXS6ZLVFY3HU3ZTMYYW2MRSGYXGG33NF5UW2YLHMVZS6MTFF5QTGLZSMVQTGNRQMM2C2ZTGMY2S2NBXMY3C2YJUGJTC2ZJRMRRWIMJUMQZWENDFFZ3WKYTQ&price=0.0004224942531436682
302 Found 950 B URL GET ppb-eu.6zo3f1m226.com/?bid_id=287864b0-3294-4ce9-8921-c17cddeaeb58&bid_req_id=ebfbd9ba-f211-41af-a82f-ad62f0d61086&imp_id=a3170877-48f0-4e95-9bf9-827cd71f6f6b&iu=NB2HI4DTHIXS6ZLVFY3HU3ZTMYYW2MRSGYXGG33NF5UW2YLHMVZS6MTFF5QTGLZSMVQTGNRQMM2C2ZTGMY2S2NBXMY3C2YJUGJTC2ZJRMRRWIMJUMQZWENDFFZ3WKYTQ&price=0.0004224942531436682
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject6zo3f1m226.com
Fingerprint82:8C:20:A1:01:C1:36:A0:B3:78:75:B2:37:04:35:09:48:A2:70:8D
ValidityTue, 01 Apr 2025 08:34:01 GMT - Mon, 30 Jun 2025 08:34:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?bid_id=287864b0-3294-4ce9-8921-c17cddeaeb58&bid_req_id=ebfbd9ba-f211-41af-a82f-ad62f0d61086&imp_id=a3170877-48f0-4e95-9bf9-827cd71f6f6b&iu=NB2HI4DTHIXS6ZLVFY3HU3ZTMYYW2MRSGYXGG33NF5UW2YLHMVZS6MTFF5QTGLZSMVQTGNRQMM2C2ZTGMY2S2NBXMY3C2YJUGJTC2ZJRMRRWIMJUMQZWENDFFZ3WKYTQ&price=0.0004224942531436682 HTTP/1.1
Host: ppb-eu.6zo3f1m226.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blushtales.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.27.4
Date: Mon, 12 May 2025 12:41:16 GMT
Content-Length: 0
Connection: keep-alive
Location: https://eu.6zo3f1m226.com/images/2e/a3/2ea360c4-fff5-47f6-a42f-e1dcd14d3b4e.webp
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, HEAD, PATCH
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin,Content-Type,Accept,Authorization,X-Requested-With
GET www.oxid.it/downloads/ca_setup.exe
200 OK 3.3 kB URL User Request GET www.oxid.it/downloads/ca_setup.exe
IP
ASN #63949 Akamai Connected Cloud
Certificate IssuerLet's Encrypt
Subjectoxid.it
FingerprintFF:5E:1C:DC:BF:B8:27:B0:62:F0:21:04:65:53:01:AA:0D:CC:57:AB
ValidityMon, 07 Apr 2025 15:20:49 GMT - Sun, 06 Jul 2025 15:20:48 GMT
File type HTML document, ASCII text
Hash f5c65ea8a5aa0fae6570a9cc967c86cc
7bc02283e2e4ce707df4149a55dd6f5b2aaff0f7
4a19a8785c734b157b14fc81481f00802621300d56da966300a77724e48960bd
GET /downloads/ca_setup.exe HTTP/1.1
Host: www.oxid.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.27.1.2
date: Mon, 12 May 2025 12:41:11 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET live.onlidex.com/filter?q=oxid.it&i=XUK3m41SjTU_0&ci=3218282228836241380&t=1862979742&h=2
200 OK 13 kB URL User Request GET live.onlidex.com/filter?q=oxid.it&i=XUK3m41SjTU_0&ci=3218282228836241380&t=1862979742&h=2
IP
ASN #27257 WEBAIR-INTERNET
Certificate IssuerLet's Encrypt
Subjectonlidex.com
FingerprintA5:04:55:27:65:82:33:F8:07:34:79:EF:EB:24:8F:C6:BC:76:8E:E9
ValidityThu, 10 Apr 2025 06:44:58 GMT - Wed, 09 Jul 2025 06:44:57 GMT
File type HTML document, ASCII text, with very long lines (594)
Hash 5df1e89aa077bb1feb2b41a63f146daf
e91967ccb48b05b1bfa4b6f47bdf809c71e77d3b
c0b3c4ff95bdb00aa3bdc7f2f98fb9f38eb9c701e8f1eda198fc0124219b7ff9
GET /filter?q=oxid.it&i=XUK3m41SjTU_0&ci=3218282228836241380&t=1862979742&h=2 HTTP/1.1
Host: live.onlidex.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.oxid.it/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 May 2025 12:41:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 12982
Connection: keep-alive
Cache-Control: no-store
Set-Cookie: c-1471362548=-1019660882
x3332619=1019660882; Domain=.onlidex.com
Referrer-Policy: unsafe-url
GET cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
200 OK 164 kB URL GET cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
IP
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File type Unicode text, UTF-8 text, with very long lines (65306)
Size 164 kB (163873 bytes)
Hash 94994c66fec8c3468b269dc0cc242151
ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad
62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab
GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blushtales.com
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: br
accept-ranges: bytes
date: Mon, 12 May 2025 12:41:15 GMT
age: 3815944
x-served-by: cache-fra-etou8220101-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20842
X-Firefox-Spdy: h2
GET blushtales.com/assets/images/hero.jpg
200 OK 236 kB URL GET blushtales.com/assets/images/hero.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectblushtales.com
FingerprintF4:6A:9E:52:AC:54:BE:0E:62:03:E0:30:11:E7:90:55:99:0E:67:54
ValidityTue, 08 Apr 2025 14:15:03 GMT - Mon, 07 Jul 2025 14:15:02 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1440x500, components 3
Size 236 kB (236052 bytes)
Hash d79cfc1829cc315b659b81d55d5d2424
da0091e12b20eec02e84b2e1bcf47481b398f6d8
da675103d97d857d41d489c68aecb75e6d71d60f9abe19fb742b6b6060b22a2e
GET /assets/images/hero.jpg HTTP/1.1
Host: blushtales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 12 May 2025 12:41:15 GMT
content-type: image/jpeg
content-length: 236052
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 08 Apr 2025 15:15:33 GMT
etag: W/"39a14-19615f89095"
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js
200 OK 78 kB URL GET cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js
IP
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File type JavaScript source, ASCII text, with very long lines (65299)
Hash 7ccd9d390d31af98110f74f842ea9b32
a85e681624c91a106a514c31eacf80de817b2cc3
f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3
GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blushtales.com
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM"
content-encoding: br
accept-ranges: bytes
date: Mon, 12 May 2025 12:41:15 GMT
age: 3579389
x-served-by: cache-fra-etou8220091-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22075
X-Firefox-Spdy: h2
GET static.pushub.net/tabu/display.js
200 OK 9.4 kB URL GET static.pushub.net/tabu/display.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerLet's Encrypt
Subjectstatic.pushub.net
FingerprintBD:83:2F:A4:B5:2F:6D:29:07:A7:90:61:DF:7D:4E:1F:E8:22:33:EE
ValidityTue, 22 Apr 2025 08:29:44 GMT - Mon, 21 Jul 2025 08:29:43 GMT
File type JavaScript source, ASCII text, with very long lines (9325)
Hash c531a26fc9de6122a6baef2b579e2d6e
4e547a82f87bef26694a4c3a61a36d2dc23e103c
84227a11ec4ee5a8c2100d35ccf2a59e4a0c179e2001be708e6ea03461c99039
GET /tabu/display.js HTTP/1.1
Host: static.pushub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript
Content-Length: 9378
Last-Modified: Tue, 08 Nov 2022 10:04:25 GMT
ETag: "636a29a9-24a2"
Accept-Ranges: bytes
Cache-Control: max-age=17675
Expires: Mon, 12 May 2025 17:35:50 GMT
Date: Mon, 12 May 2025 12:41:15 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
GET www.oxid.it/apple-touch-icon.png
404 Not Found 159 B URL GET www.oxid.it/apple-touch-icon.png
IP
ASN #63949 Akamai Connected Cloud
Requested by https://www.oxid.it/downloads/ca_setup.exe
Certificate IssuerLet's Encrypt
Subjectoxid.it
FingerprintFF:5E:1C:DC:BF:B8:27:B0:62:F0:21:04:65:53:01:AA:0D:CC:57:AB
ValidityMon, 07 Apr 2025 15:20:49 GMT - Sun, 06 Jul 2025 15:20:48 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 1620e905665c273e91a8cb2a00df1509
e0ea169369ad349affad0f6d41987a73fea0280f
5a41c6b1c3d5061adbd15744312c919ee4a639abc0572a2927b06838bec1a6ed
GET /apple-touch-icon.png HTTP/1.1
Host: www.oxid.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.oxid.it/downloads/ca_setup.exe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: openresty/1.27.1.2
date: Mon, 12 May 2025 12:41:11 GMT
content-type: text/html
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET xml-v4.pushub.net/click2?i=XUK3m41SjTU_0&ci=3218282228836241380&j=rv%3Db%26ss%3D1280x1024%26ws%3D1280x1024%26wp%3D0x0%26ce%3D1%26ck%3Djc%26cv%3D5357%26cs%3D1%26fr%3D0%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D3%26rf%3Dwww.oxid.it%26lo%3Dlive.onlidex.com%26mb%3D0%26hb%3D1%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%29%2BGecko%252F20100101%2BFirefox%252F134.0%26nd%3D0%26to%3Dnull%26wbd%3D1%26wbde%3D0%26sqm%3D0%26phj%3D0%26nmj%3D0%26sln%3D0%26es%3D0%26ln%3Den-US%252Cen%26lnl%3D2%26hsc%3D0%26frc%3D0%26dbt%3D0%26prb%3D20100101%26tz%3D0%26hid%3D0%26mq%3D1%26bch%3D%26blv%3D%26my%3D%26geo%3D%26thx%3D0%26the%3D0%26ths%3D0%26cpc%3D%26ocp%3DLinux%2Bx86_64%26hwc%3D48%26hrl%3D%26acd%3Dpmpmm%26vcd%3Dppp%26pal%3D5%26pai%3D1%26pli%3D1%26win%3D1280x1024%26wout%3D1280x1024%26wpof%3D0x0%26bcld%3D1264x19%26scrp%3D0x0%26scrad%3D1280x1024%26spd%3D24%26pxr%3D1%26sck%3D1%26ckl%3D54%26sls%3D1%26sss%3D1%26six%3D1%26sdb%3D0%26vvr%3DMesa%26vrd%3Dllvmpipe%26pnt%3Dprompt%26cnvs%3D7f7f7f80%26mmd_ao%3D0%26mmd_ai%3D0%26mmd_vi%3D0
302 Found 142 kB URL User Request GET xml-v4.pushub.net/click2?i=XUK3m41SjTU_0&ci=3218282228836241380&j=rv%3Db%26ss%3D1280x1024%26ws%3D1280x1024%26wp%3D0x0%26ce%3D1%26ck%3Djc%26cv%3D5357%26cs%3D1%26fr%3D0%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D3%26rf%3Dwww.oxid.it%26lo%3Dlive.onlidex.com%26mb%3D0%26hb%3D1%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%29%2BGecko%252F20100101%2BFirefox%252F134.0%26nd%3D0%26to%3Dnull%26wbd%3D1%26wbde%3D0%26sqm%3D0%26phj%3D0%26nmj%3D0%26sln%3D0%26es%3D0%26ln%3Den-US%252Cen%26lnl%3D2%26hsc%3D0%26frc%3D0%26dbt%3D0%26prb%3D20100101%26tz%3D0%26hid%3D0%26mq%3D1%26bch%3D%26blv%3D%26my%3D%26geo%3D%26thx%3D0%26the%3D0%26ths%3D0%26cpc%3D%26ocp%3DLinux%2Bx86_64%26hwc%3D48%26hrl%3D%26acd%3Dpmpmm%26vcd%3Dppp%26pal%3D5%26pai%3D1%26pli%3D1%26win%3D1280x1024%26wout%3D1280x1024%26wpof%3D0x0%26bcld%3D1264x19%26scrp%3D0x0%26scrad%3D1280x1024%26spd%3D24%26pxr%3D1%26sck%3D1%26ckl%3D54%26sls%3D1%26sss%3D1%26six%3D1%26sdb%3D0%26vvr%3DMesa%26vrd%3Dllvmpipe%26pnt%3Dprompt%26cnvs%3D7f7f7f80%26mmd_ao%3D0%26mmd_ai%3D0%26mmd_vi%3D0
IP
ASN #27257 WEBAIR-INTERNET
Certificate IssuerLet's Encrypt
Subjectpushub.net
FingerprintDC:CE:16:E3:1B:09:87:2A:69:71:6C:96:DB:ED:AF:F9:8D:0B:E5:0F
ValidityTue, 29 Apr 2025 06:54:01 GMT - Mon, 28 Jul 2025 06:54:00 GMT
Size 142 kB (142079 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click2?i=XUK3m41SjTU_0&ci=3218282228836241380&j=rv%3Db%26ss%3D1280x1024%26ws%3D1280x1024%26wp%3D0x0%26ce%3D1%26ck%3Djc%26cv%3D5357%26cs%3D1%26fr%3D0%26hc%3D0%26fl%3Dnull%26jv%3Dnull%26sc%3D24%26hr%3D3%26rf%3Dwww.oxid.it%26lo%3Dlive.onlidex.com%26mb%3D0%26hb%3D1%26pl%3DLinux%2Bx86_64%26ua%3DMozilla%252F5.0%2B%28Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%29%2BGecko%252F20100101%2BFirefox%252F134.0%26nd%3D0%26to%3Dnull%26wbd%3D1%26wbde%3D0%26sqm%3D0%26phj%3D0%26nmj%3D0%26sln%3D0%26es%3D0%26ln%3Den-US%252Cen%26lnl%3D2%26hsc%3D0%26frc%3D0%26dbt%3D0%26prb%3D20100101%26tz%3D0%26hid%3D0%26mq%3D1%26bch%3D%26blv%3D%26my%3D%26geo%3D%26thx%3D0%26the%3D0%26ths%3D0%26cpc%3D%26ocp%3DLinux%2Bx86_64%26hwc%3D48%26hrl%3D%26acd%3Dpmpmm%26vcd%3Dppp%26pal%3D5%26pai%3D1%26pli%3D1%26win%3D1280x1024%26wout%3D1280x1024%26wpof%3D0x0%26bcld%3D1264x19%26scrp%3D0x0%26scrad%3D1280x1024%26spd%3D24%26pxr%3D1%26sck%3D1%26ckl%3D54%26sls%3D1%26sss%3D1%26six%3D1%26sdb%3D0%26vvr%3DMesa%26vrd%3Dllvmpipe%26pnt%3Dprompt%26cnvs%3D7f7f7f80%26mmd_ao%3D0%26mmd_ai%3D0%26mmd_vi%3D0 HTTP/1.1
Host: xml-v4.pushub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://live.onlidex.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 12 May 2025 12:41:14 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://blushtales.com/
200 OK 142 kB IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectblushtales.com
FingerprintF4:6A:9E:52:AC:54:BE:0E:62:03:E0:30:11:E7:90:55:99:0E:67:54
ValidityTue, 08 Apr 2025 14:15:03 GMT - Mon, 07 Jul 2025 14:15:02 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (2836)
Size 142 kB (142079 bytes)
Hash 16cd6d3021175c6d5bbe28d3afb67c22
7923240ae2d25ad4a91c5b56841fb67e35cf4cb8
765863973ce10d36f348d6f46879d4299e6f86c6c7ebb04cfeb9b67cb2b271e1
GET / HTTP/1.1
Host: blushtales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://live.onlidex.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 12 May 2025 12:41:14 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-powered-by: Express
etag: W/"22aff-eSMkCuLSWtSpHFtWhB+2fjXPTLg"
content-encoding: gzip
X-Firefox-Spdy: h2
POST push.pushub.net/telemetry2?v=1.2.10&dm=blushtales.com&chid=366&sbid=blushtales.com&ab=ui
204 No Content 0 B URL POST push.pushub.net/telemetry2?v=1.2.10&dm=blushtales.com&chid=366&sbid=blushtales.com&ab=ui
IP
ASN #27257 WEBAIR-INTERNET
Certificate IssuerLet's Encrypt
Subjectpushub.net
FingerprintDC:CE:16:E3:1B:09:87:2A:69:71:6C:96:DB:ED:AF:F9:8D:0B:E5:0F
ValidityTue, 29 Apr 2025 06:54:01 GMT - Mon, 28 Jul 2025 06:54:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /telemetry2?v=1.2.10&dm=blushtales.com&chid=366&sbid=blushtales.com&ab=ui HTTP/1.1
Host: push.pushub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blushtales.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 19
Origin: https://blushtales.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Mon, 12 May 2025 12:41:15 GMT
Content-Length: 0
Connection: close
Access-Control-Allow-Origin: https://blushtales.com
Access-Control-Allow-Credentials: true
GET xml-v4.pushub.net/thumbnail?i=ZUJIQp*Gu5Q_0&imgt=icon
302 Found 950 B URL GET xml-v4.pushub.net/thumbnail?i=ZUJIQp*Gu5Q_0&imgt=icon
IP
ASN #27257 WEBAIR-INTERNET
Certificate IssuerLet's Encrypt
Subjectpushub.net
FingerprintDC:CE:16:E3:1B:09:87:2A:69:71:6C:96:DB:ED:AF:F9:8D:0B:E5:0F
ValidityTue, 29 Apr 2025 06:54:01 GMT - Mon, 28 Jul 2025 06:54:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=ZUJIQp*Gu5Q_0&imgt=icon HTTP/1.1
Host: xml-v4.pushub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 12 May 2025 12:41:16 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://ppb-eu.6zo3f1m226.com/?bid_id=287864b0-3294-4ce9-8921-c17cddeaeb58&bid_req_id=ebfbd9ba-f211-41af-a82f-ad62f0d61086&imp_id=a3170877-48f0-4e95-9bf9-827cd71f6f6b&iu=NB2HI4DTHIXS6ZLVFY3HU3ZTMYYW2MRSGYXGG33NF5UW2YLHMVZS6MTFF5QTGLZSMVQTGNRQMM2C2ZTGMY2S2NBXMY3C2YJUGJTC2ZJRMRRWIMJUMQZWENDFFZ3WKYTQ&price=0.0004224942531436682
GET eu.6zo3f1m226.com/images/2e/a3/2ea360c4-fff5-47f6-a42f-e1dcd14d3b4e.webp
200 OK 950 B URL GET eu.6zo3f1m226.com/images/2e/a3/2ea360c4-fff5-47f6-a42f-e1dcd14d3b4e.webp
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subject6zo3f1m226.com
Fingerprint82:8C:20:A1:01:C1:36:A0:B3:78:75:B2:37:04:35:09:48:A2:70:8D
ValidityTue, 01 Apr 2025 08:34:01 GMT - Mon, 30 Jun 2025 08:34:00 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 5e97ea3da88cdded9a53c940fe2c0e84
3ba7aa506db1db1cacb21cd6983861bb29f13f63
6bf96ad70900ece4f29101c1b79a719ce0a547245967dea673772366fc632a5c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /images/2e/a3/2ea360c4-fff5-47f6-a42f-e1dcd14d3b4e.webp HTTP/1.1
Host: eu.6zo3f1m226.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://blushtales.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.27.4
Date: Mon, 12 May 2025 12:41:16 GMT
Content-Type: image/webp
Content-Length: 950
Last-Modified: Thu, 10 Apr 2025 09:42:40 GMT
Connection: keep-alive
ETag: "67f79290-3b6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: *
Accept-Ranges: bytes
POST www.oxid.it/_d
200 OK 716 B IP
ASN #63949 Akamai Connected Cloud
Requested by https://www.oxid.it/downloads/ca_setup.exe
Certificate IssuerLet's Encrypt
Subjectoxid.it
FingerprintFF:5E:1C:DC:BF:B8:27:B0:62:F0:21:04:65:53:01:AA:0D:CC:57:AB
ValidityMon, 07 Apr 2025 15:20:49 GMT - Sun, 06 Jul 2025 15:20:48 GMT
Hash 1b59d1bf54d9f17219f73910a2918559
7dee5edd8c6d63a99e1555cd4fea509672b14b6d
892620fd85990cfc1d46b59e0d427ef81fafcca969278843a971ea3d8a8c93c1
POST /_d HTTP/1.1
Host: www.oxid.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.oxid.it/downloads/ca_setup.exe
Content-Type: application/json
Content-Length: 324
Origin: https://www.oxid.it
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty/1.27.1.2
date: Mon, 12 May 2025 12:41:12 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
set-cookie: session_id=f38aded9cd76d522ef0d642313735325; Max-Age=86400; Path=/; HttpOnly; SameSite=Lax
strict-transport-security: max-age=0; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET blushtales.com/assets/css/style.css
200 OK 4.3 kB URL GET blushtales.com/assets/css/style.css
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectblushtales.com
FingerprintF4:6A:9E:52:AC:54:BE:0E:62:03:E0:30:11:E7:90:55:99:0E:67:54
ValidityTue, 08 Apr 2025 14:15:03 GMT - Mon, 07 Jul 2025 14:15:02 GMT
Hash 7c44590fcab81a82655ba2cae0acf0de
2b38e21b57e361f075aea6cf304aca7ea106e6ec
ce15a30a91510f9dada0023a868ba6c0ea19880f6d2af7a300dcb1c27357bbcf
GET /assets/css/style.css HTTP/1.1
Host: blushtales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 12 May 2025 12:41:15 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
x-powered-by: Express
cache-control: public, max-age=0
last-modified: Thu, 10 Apr 2025 10:46:37 GMT
etag: W/"10c3-1961f4f1071"
content-encoding: gzip
X-Firefox-Spdy: h2
GET blushtales.com/assets/images/logo-white.svg
200 OK 1.5 kB URL GET blushtales.com/assets/images/logo-white.svg
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectblushtales.com
FingerprintF4:6A:9E:52:AC:54:BE:0E:62:03:E0:30:11:E7:90:55:99:0E:67:54
ValidityTue, 08 Apr 2025 14:15:03 GMT - Mon, 07 Jul 2025 14:15:02 GMT
File type SVG Scalable Vector Graphics image
Hash ac4435f983f158d4d1207151c3f1ab9a
1e51798bb6f40288da21db33c957cb923cd28e34
f7ab347f30570b50c8b668723c6e51426c010208283662c011891a6bc6665f4a
GET /assets/images/logo-white.svg HTTP/1.1
Host: blushtales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 12 May 2025 12:41:15 GMT
content-type: image/svg+xml
content-length: 1508
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Tue, 08 Apr 2025 15:15:33 GMT
etag: W/"5e4-19615f89095"
X-Firefox-Spdy: h2
GET static.pushub.net/inpage/inpage.js
200 OK 13 kB URL GET static.pushub.net/inpage/inpage.js
IP
ASN #20940 Akamai International B.V.
Certificate IssuerLet's Encrypt
Subjectstatic.pushub.net
FingerprintBD:83:2F:A4:B5:2F:6D:29:07:A7:90:61:DF:7D:4E:1F:E8:22:33:EE
ValidityTue, 22 Apr 2025 08:29:44 GMT - Mon, 21 Jul 2025 08:29:43 GMT
File type JavaScript source, ASCII text, with very long lines (13123)
Hash 5910e494b34694553906c84adbf11b84
abcc4dad695e8dbbcb817d6c69048001b6e58f36
be9ce430b5c00ab65a0ab52c4a3e3b2e764a2da413b1b83986e59ce810678f2c
GET /inpage/inpage.js HTTP/1.1
Host: static.pushub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript
Content-Length: 13180
Last-Modified: Thu, 05 May 2022 12:41:49 GMT
ETag: "6273c60d-337c"
Accept-Ranges: bytes
Cache-Control: max-age=84493
Expires: Tue, 13 May 2025 12:09:28 GMT
Date: Mon, 12 May 2025 12:41:15 GMT
Connection: keep-alive
X-Forward-Proto: http
CDN-Origin-Protocol: HTTP
GET blushtales.com/favicon.ico
200 OK 15 kB URL GET blushtales.com/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectblushtales.com
FingerprintF4:6A:9E:52:AC:54:BE:0E:62:03:E0:30:11:E7:90:55:99:0E:67:54
ValidityTue, 08 Apr 2025 14:15:03 GMT - Mon, 07 Jul 2025 14:15:02 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Hash c8542491c42e456e25d1c10389103f3a
e9962177ffd4c38675a6d343858e4a46a5f53bca
8e00e3dec55a6ee010e8a26ab6900be0ae4e21995b77126ff107ac4cc5959b76
GET /favicon.ico HTTP/1.1
Host: blushtales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blushtales.com/
Cookie: test=test
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Mon, 12 May 2025 12:41:15 GMT
content-type: image/x-icon
content-length: 15406
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 09 Apr 2025 12:52:08 GMT
etag: W/"3c2e-1961a9b9ead"
X-Firefox-Spdy: h2
139.162.174.209
173.239.53.32
23.36.77.89