GET modsfire.com/assets/images/logo-n.png
200 OK 56 kB URL GET HTTP/2 modsfire.com/assets/images/logo-n.png
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type PNG image data, 1918 x 385, 8-bit/color RGBA, non-interlaced
Hash b45dad22fbbcccb99cb851b86f9b44a2
cdc4efb3ba426e6b78281b4e90ae5befa1006285
9c8021208ee210b1cbf24e973dc5b74f618710470e7a8f9388b175391c6e7377
GET /assets/images/logo-n.png HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/dI90LxHm0U9LN5B
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: image/png
content-length: 56503
last-modified: Thu, 15 Sep 2022 14:55:11 GMT
etag: "63233ccf-dcb7"
expires: Sat, 13 Jan 2024 04:00:01 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2548833
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ntQKfYp%2Blb71PMeCmw07IkeG0w6zQbgnN42fk6B%2FtSNzGZMSlVJ68pglDrFP6WKrFr%2BExsN6uq9%2BFh6P8XPAzSSGsl%2BkYIrliIAX8doSOoi8cFiZ0HwvDeCvguJf%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e4aaac568f-OSL
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/in-view@0.6.1/dist/in-view.min.js
200 OK 2.2 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/in-view@0.6.1/dist/in-view.min.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text, with very long lines (5111)
Hash 32c0e2abf22f626a11de44c6cee735d9
5a695020efc49481bd49f03f5fc520195f2efa5b
ba92f31903d0ed43a15811c0506b1c357fa04ff643140a3c0e162dfc66cd37eb
GET /npm/in-view@0.6.1/dist/in-view.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 0.6.1
x-jsd-version-type: version
etag: W/"14be-WmlQIO/ElIG9SfA/X8UgGV8u+ls"
content-encoding: br
accept-ranges: bytes
date: Sun, 21 Jan 2024 16:13:14 GMT
age: 14903357
x-served-by: cache-fra-etou8220112-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2213
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
200 OK 25 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash abe91756d18b7cd60871a2f47c1e8192
7c1c9e0573e5cea8bad3733be2fc63aa8c68ea8d
7633b7c0c97d19e682feee8afa2738523fcb2a14544a550572caeecd2eefe66b
GET /npm/bootstrap@5.0.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"260c5-fByeBXPlzqi603M74vxjqoxo6o0"
content-encoding: br
accept-ranges: bytes
date: Sun, 21 Jan 2024 16:13:14 GMT
age: 19376834
x-served-by: cache-fra-eddf8230097-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25360
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 27 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 27433
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1538f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 228454
expires: Fri, 10 Jan 2025 16:13:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zir02k5OKQi9J8APQyCtH6g6oL5d%2BDeIRkqiS2AKZRpo6n3ROW3yQ%2FXiadARlz0QvXsHHnTTIvReoYgAtkrxeOTlxtNXFLONrNUJ4HhwEqH2gKRZvOGEaWL%2BD2yOKFNzx6hBFGUT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8490d7e51c77b523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/bootstrap-select@1.14.0-beta3/dist/js/bootstrap-select.js
200 OK 32 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap-select@1.14.0-beta3/dist/js/bootstrap-select.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text
Hash 146babba2be08de39a79ebda467e321f
4dbf559398f5ed8a77dc95304ee8f4c997972e3c
ffa29774380203ac560e5a63d12c96b171040ea0b2e0354317023c440de009e1
GET /npm/bootstrap-select@1.14.0-beta3/dist/js/bootstrap-select.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.14.0-beta3
x-jsd-version-type: version
etag: W/"1f63b-Tb9Vk5j17Yp33JUwTuj0yZeXLjw"
content-encoding: br
accept-ranges: bytes
date: Sun, 21 Jan 2024 16:13:14 GMT
age: 1509345
x-served-by: cache-fra-etou8220078-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 31845
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
200 OK 24 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text, with very long lines (65299)
Hash 0aa8d64e726c4a57adb5c88f9115996b
901169527507ff9e662cf64d8e361f359308970d
7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe
GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0"
content-encoding: br
accept-ranges: bytes
date: Sun, 21 Jan 2024 16:13:14 GMT
age: 21002790
x-served-by: cache-fra-eddf8230080-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23943
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-JXQKZFEW04
200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-JXQKZFEW04
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint8F:9C:3B:A4:59:1A:06:DC:19:DB:A1:30:5D:19:81:20:9E:19:31:AE
ValidityMon, 11 Dec 2023 08:03:30 GMT - Mon, 04 Mar 2024 08:03:29 GMT
File type JavaScript source, ASCII text, with very long lines (3035)
Hash fee61772f48a4047a169fb52581269c9
4765f07ff969b8eba09ff6fa60eb2ee2c519fb0f
cd46760d37ee48868f1dfbf8cf39ff03e203852551f3fa865aa99553845375a6
GET /gtag/js?id=G-JXQKZFEW04 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 21 Jan 2024 16:13:14 GMT
expires: Sun, 21 Jan 2024 16:13:14 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86441
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET btloader.com/tag?o=5646025299591168&upapi=true
200 OK 19 kB URL GET HTTP/2 btloader.com/tag?o=5646025299591168&upapi=true
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectbtloader.com
Fingerprint65:1B:80:E1:2C:B4:48:04:D3:1A:6D:88:C1:F9:34:F1:49:D5:A0:4C
ValiditySun, 17 Dec 2023 19:59:10 GMT - Sat, 16 Mar 2024 19:59:09 GMT
File type JavaScript source, ASCII text, with very long lines (57078)
Hash 550f063e228b0ad4b4dfdf68d26c96d7
7179d259c2ad7df9cf4d06953ccff787ec2486f6
f4fc394c8bd8b1b275243e4f2a83ed011200e02e0c35ec1942f540f82d7dc4c7
GET /tag?o=5646025299591168&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: application/javascript
content-length: 19006
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
content-encoding: gzip
etag: "106fefd9b282ec79f6c8960b891b7f3d"
last-modified: Sun, 21 Jan 2024 16:07:23 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 121
accept-ranges: bytes
server: cloudflare
cf-ray: 8490d7e528a66dea-CPH
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/bootstrap-select@1.14.0-beta3/dist/css/bootstrap-select.min.css
200 OK 2.5 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap-select@1.14.0-beta3/dist/css/bootstrap-select.min.css
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (11584)
Hash 841b4e6f21e9ed0aef6829d258a822b6
9faae07f6bfa1612ae4eb56fa0ae169c9b42b494
7300c976e6ccb2f209700618e445d4640b902f14a510bc45610971becc5d62cf
GET /npm/bootstrap-select@1.14.0-beta3/dist/css/bootstrap-select.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.14.0-beta3
x-jsd-version-type: version
etag: W/"2e31-n6rgf2v6FhKuTrVvoK4WnJtCtJQ"
content-encoding: br
accept-ranges: bytes
date: Sun, 21 Jan 2024 16:13:14 GMT
age: 5929864
x-served-by: cache-fra-eddf8230106-FRA, cache-hel1410025-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2455
X-Firefox-Spdy: h2
GET modsfire.com/assets/images/arrow.png
200 OK 15 kB URL GET HTTP/2 modsfire.com/assets/images/arrow.png
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type PNG image data, 8 x 10, 8-bit/color RGBA, non-interlaced
Hash df59fde7341d3853dcbadea2e215e267
1c88016750329c83c9a036cd061ab054e277beda
fd1e71a9f6e8471e9c2f47b3fd3384c29869541a8d1d7e634c5143f8b5a8dbbb
GET /assets/images/arrow.png HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/alt/assets/css/dw.css?751
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D; _ga_JXQKZFEW04=GS1.1.1705853595.1.0.1705853595.0.0.0; _ga=GA1.1.1726846736.1705853596
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: image/png
content-length: 15417
last-modified: Tue, 23 Jul 2019 16:58:03 GMT
etag: "5d373c9b-3c39"
expires: Thu, 08 Feb 2024 04:25:05 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 40371
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KHVmAqEdS1BFZteoqzLL9Lt%2Bu6cyOwk2LsHEJrqktS7obNcsfrYNxYgDe37wqS0zCR6QzoKKNfNk%2BSVg2WjOKjQGL6Wr5H7TVJXRC%2BuCe9oHcjd8AqVRlfEU%2B32BRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e858b7568f-OSL
X-Firefox-Spdy: h2
GET modsfire.com/alt/assets/images/f-bg.png
200 OK 115 kB URL GET HTTP/2 modsfire.com/alt/assets/images/f-bg.png
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type PNG image data, 1050 x 164, 8-bit/color RGBA, non-interlaced
Size 115 kB (114731 bytes)
Hash e741d4b54a96d1f5c62c62878d9066d8
d64c649046911b3108cafa8a5209cd35a8a5653f
e97879cc5fb557269c477dc7926cbfab6a9ab4682596d10c99319847be874050
GET /alt/assets/images/f-bg.png HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/alt/assets/css/style.css
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D; _ga_JXQKZFEW04=GS1.1.1705853595.1.0.1705853595.0.0.0; _ga=GA1.1.1726846736.1705853596
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: image/png
content-length: 114731
last-modified: Mon, 12 Sep 2022 04:02:02 GMT
etag: "631eaf3a-1c02b"
expires: Sun, 31 Dec 2023 05:12:13 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2543373
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TP%2FdnfLhaT2nGnYlOo8nabAQZx2bClN%2FAacZaOQbdnZOwvkraOTkNfz1%2FQ7tBeRSRLIivHw3458l%2F08KYN7NWx6jtm8utj9MtxyVCsvj5Ay435T0ruO%2FrToAzKtbuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e858b8568f-OSL
X-Firefox-Spdy: h2
GET stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/3 stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://stackpath.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: font/woff2
content-length: 77160
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "af7ae505a9eed503f8b8e6982036873e"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 19:08:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 149eb52e08c0cccbacbdd70d21e6faf6
cdn-cache: HIT
cf-cache-status: HIT
age: 2681635
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8490d7e88a20b521-OSL
alt-svc: h3=":443"; ma=86400
GET fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint6F:8C:8C:6F:06:BF:0D:24:7E:8D:3D:09:0D:07:26:DF:C3:6E:47:C0
ValidityMon, 11 Dec 2023 08:09:11 GMT - Mon, 04 Mar 2024 08:09:10 GMT
File type Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Hash 057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Jan 2024 16:14:57 GMT
expires: Fri, 17 Jan 2025 16:14:57 GMT
cache-control: public, max-age=31536000
age: 259098
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cmp.setupcmp.com/cmp/config/6959.json
200 OK 125 B URL GET HTTP/2 cmp.setupcmp.com/cmp/config/6959.json
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectsetupcmp.com
Fingerprint4C:36:AA:0E:4E:BE:1E:86:1C:5C:E2:35:5F:23:25:B4:51:42:6A:73
ValidityTue, 26 Dec 2023 15:31:33 GMT - Mon, 25 Mar 2024 15:31:32 GMT
Hash 99700b9f19b57c2f32b210afd8a39434
583f255e7335f06d8ebdeeebc319ad5f3390c2e1
7b7c902e95074714595588222f16e19c406ce23c52567474e151b0c8c1fe899a
GET /cmp/config/6959.json HTTP/1.1
Host: cmp.setupcmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modsfire.com/
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:15 GMT
content-type: application/octet-stream
content-length: 125
content-md5: mXALnxm1fC8yshCv2KOUNA==
last-modified: Thu, 28 Dec 2023 09:32:28 GMT
etag: 0x8DC0787E8A847B1
x-ms-request-id: 284d5dff-d01e-001a-4c84-4c12d9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: country
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cSGNC7CoGuE68bLpaLBIgXSoSpVsR4yEw4IWEA222f2%2BChlox61mPuVvfk1YlSdDgVdcQmti0clpoteKEuhJpXNk3%2FCPieDsNLHSywdeh2TmSTDGRdfNTYrUIBV%2Ful2xuG4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
country: NO
server: cloudflare
cf-ray: 8490d7e8ce870afa-OSL
X-Firefox-Spdy: h2
GET modsfire.com/assets/js/jquery-3.3.1.js
404 Not Found 37 kB URL GET HTTP/2 modsfire.com/assets/js/jquery-3.3.1.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1447)
Hash 3abe71805ac97da6433d7957ff340aa9
3c5df70d28e6691fe67c0c8c9dc362bce73cc704
6d745faec0264ee5ed30a6357a0a311b40669df1957098a0aed361598ba08ebc
GET /assets/js/jquery-3.3.1.js HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/dI90LxHm0U9LN5B
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pLqA0GSBpQVWftcdYcFULjBg8JBxmMIGXh0u173TiW4oWwYMz1l%2BwyJCfvc6lDOpJPqmnKaXekJ3tIFpsYgzN0t0GUhdREXsuQE9YRXs8petirgW2ftThMGRVX9%2FUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e4aab7568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET cmp.setupcmp.com/cmp/cmp/cmp-v1.js
200 OK 32 kB URL GET HTTP/2 cmp.setupcmp.com/cmp/cmp/cmp-v1.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectsetupcmp.com
Fingerprint4C:36:AA:0E:4E:BE:1E:86:1C:5C:E2:35:5F:23:25:B4:51:42:6A:73
ValidityTue, 26 Dec 2023 15:31:33 GMT - Mon, 25 Mar 2024 15:31:32 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 9f958229f2ee6a29e6a8616eae57e185
afcaacf2cda12f08dddd98d619e07b71e41b0d20
ec33b27f521aa469b8648d182fff1ca281b398927ea04f64fba6937044d9ed21
GET /cmp/cmp/cmp-v1.js HTTP/1.1
Host: cmp.setupcmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: text/javascript
content-md5: n5WCKfLuainmqGFurlfhhQ==
last-modified: Thu, 14 Dec 2023 07:12:59 GMT
x-ms-request-id: ee978a2d-901e-000b-765d-2e886d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: country
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4718
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PjR97JZhNr4b78Zu03hSz8CDSg154Tp7M3i8%2Bic3ZwcyhmM%2F2kYU7lH4dcAu%2BMhBnaYGUR2CBKLMIyv2xwRob5B6Nr0RpLtKyBD6B%2B2FXoCgB5gCH9QxxjSjGDg0yB%2BeIkQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e65b850afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET modsfire.com/dI90LxHm0U9LN5B
200 OK 15 kB URL User Request GET HTTP/2 modsfire.com/dI90LxHm0U9LN5B
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1098)
Hash 832cf050a9ab9f9a4dabee52253bc196
6db1bedf8849a22e72a03606319524769d917dac
045615d7df45f2f84df5cdb699cd8a4669e7243a2877e470988fc926547b4d9f
GET /dI90LxHm0U9LN5B HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; expires=Sun, 21-Jan-2024 18:13:14 GMT; Max-Age=7200; path=/
modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; expires=Sun, 21-Jan-2024 18:13:14 GMT; Max-Age=7200; path=/; httponly
90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; expires=Sun, 21-Jan-2024 16:14:14 GMT; Max-Age=60; path=/; httponly
referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D; expires=Sun, 21-Jan-2024 16:23:14 GMT; Max-Age=600; path=/; httponly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tkKn9w9n581U1Z05GEiGceViY1LoiA8jWpixLM6i4GBZtpvUK2VUARETUXII67tEjwPwse7x0%2F9xE1rExlq8LvSwZ9XGi8v7CnIq9jSLOorHm66g4NDeCV9BMNaKIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8490d7e21e99568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET stpd.cloud/saas/6577
200 OK 159 kB IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectstpd.cloud
FingerprintD5:54:9C:08:B5:9D:C8:CB:9B:94:26:C1:06:68:16:76:BC:16:E9:38
ValidityWed, 10 Jan 2024 11:33:53 GMT - Tue, 09 Apr 2024 11:33:52 GMT
File type JavaScript source, ASCII text, with very long lines (65329)
Size 159 kB (159217 bytes)
Hash 413d9708f01335ab933bbdbf6fce3fa7
1733220d14d7261218ba674301d47f546202e358
f7ca3a1278951ab980aa855b2d2a5714d3ce96f5ce2ac9d2e664c5e5dd79ec11
GET /saas/6577 HTTP/1.1
Host: stpd.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: text/javascript
cf-ray: 8490d7e52c03b4ee-OSL
cf-cache-status: HIT
age: 278
cache-control: public, max-age=1200
expires: Sun, 21 Jan 2024 16:33:14 GMT
last-modified: Sun, 21 Jan 2024 16:08:36 GMT
vary: Accept-Encoding
stpdhash: cache
access-control-allow-origin: *
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
GET modsfire.com/alt/assets/images/f-logo.svg
200 OK 17 kB URL GET HTTP/2 modsfire.com/alt/assets/images/f-logo.svg
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 4340a6b8600efb334d5b758ce68dc0bd
b9fac16150e416ab312096b4757b91a7730ba00f
4ed4c94bbf69dc6d159b27d586dd668004cf1394b3b2f343a2b826a917dfd8b3
GET /alt/assets/images/f-logo.svg HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/dI90LxHm0U9LN5B
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: image/svg+xml
last-modified: Mon, 12 Sep 2022 03:50:30 GMT
etag: W/"631eac86-5de6"
expires: Sun, 31 Dec 2023 05:03:35 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2285651
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e%2BcX82%2FzXzadc3LUgOG4%2F95fc%2F2klUo4Jz%2BCuKBD%2Fne5o5kC1Tjcox6qLX7eu0ji5%2BfjsU2AH%2BCEETb82G9VXKlXKfW54%2FknHufyW9rb4lq8YK2dYwoU8BOC2VcNQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e4aab1568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240121
200 OK 860 B URL GET HTTP/2 cdn.jsdelivr.net/gh/prebid/currency-file@1/latest.json?date=20240121
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Hash 0d31709a68dc89609d2ecd4112907d07
0a104f3d86faff84db43387ca3b2b45330205f24
e8bf7cd060c6d87dbb436c2e42e4f90c19179b2b4f88090f85765d6dc0835cb6
GET /gh/prebid/currency-file@1/latest.json?date=20240121 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/json; charset=utf-8
x-jsd-version: 1.0.1942
x-jsd-version-type: version
etag: W/"63c-ChBPPYb6/4TbQzh8o7K0UzAgXyQ"
content-encoding: br
accept-ranges: bytes
date: Sun, 21 Jan 2024 16:13:15 GMT
age: 747
x-served-by: cache-fra-eddf8230103-FRA, cache-hel1410022-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 860
X-Firefox-Spdy: h2
GET api.btloader.com/country
200 OK 16 B IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectapi.btloader.com
Fingerprint1C:C5:7B:C6:D2:A6:1B:8A:77:75:C5:FF:E7:32:76:55:8A:51:55:63
ValidityFri, 08 Dec 2023 16:48:47 GMT - Thu, 07 Mar 2024 17:42:21 GMT
Hash 452880c1a375b8fba8c9499f0930d05f
ffe5484a23512c2a574d837fe2d3267b134e48c8
8b3383aa4c71f1d816bfaf33e3ef2e8ded067698a7798b9f306204d5777b140d
GET /country HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modsfire.com/
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600
content-type: application/json
vary: Origin
date: Sun, 21 Jan 2024 16:13:15 GMT
content-length: 16
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET api.btloader.com/pv?tid=Muegv0ws&w=5150531013574656&o=5646025299591168&cv=2.1.27-2-g1727909&widget=false&r=false&vr=1280x1024&pageURL=https%3A%2F%2Fmodsfire.com%2FdI90LxHm0U9LN5B&sid=KVfGZgoHn&pm=true&upapi=true
204 No Content 0 B URL GET HTTP/2 api.btloader.com/pv?tid=Muegv0ws&w=5150531013574656&o=5646025299591168&cv=2.1.27-2-g1727909&widget=false&r=false&vr=1280x1024&pageURL=https%3A%2F%2Fmodsfire.com%2FdI90LxHm0U9LN5B&sid=KVfGZgoHn&pm=true&upapi=true
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectapi.btloader.com
Fingerprint1C:C5:7B:C6:D2:A6:1B:8A:77:75:C5:FF:E7:32:76:55:8A:51:55:63
ValidityFri, 08 Dec 2023 16:48:47 GMT - Thu, 07 Mar 2024 17:42:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pv?tid=Muegv0ws&w=5150531013574656&o=5646025299591168&cv=2.1.27-2-g1727909&widget=false&r=false&vr=1280x1024&pageURL=https%3A%2F%2Fmodsfire.com%2FdI90LxHm0U9LN5B&sid=KVfGZgoHn&pm=true&upapi=true HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
vary: Origin
date: Sun, 21 Jan 2024 16:13:15 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET script.4dex.io/localstore.js
200 OK 268 B URL GET HTTP/1.1 script.4dex.io/localstore.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectscript.4dex.io
FingerprintAB:9B:A2:70:ED:27:23:EF:84:14:22:FF:67:9F:5D:50:06:2D:04:28
ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 22 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (482)
Hash 922cffdd75f7192f75231d92684885aa
48ae21017844de388e0a32206a2691fa4c109669
e8fe64429e5900c16c7f8dd7861704e2f4d38e00cbb16bc18820b46d92461389
GET /localstore.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 21 Jan 2024 16:13:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"922cffdd75f7192f75231d92684885aa"
Last-Modified: Mon, 27 Nov 2023 07:14:08 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 2102212
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C28mqkkJfQC%2FidPKPm%2BX4SnDd5TUZVZpcYyY2vxqZf3hJasJWpw17%2FZz0Y8dwnOBxCQnFuV9VrhnxeXNE7O7QQf%2FJe%2FlQycgipJAJMBOjJPYF8vHdupxkklt%2Ff2%2FIp%2F9"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8490d7ec6b58b527-OSL
Content-Encoding: br
GET script.4dex.io/adagio.js
200 OK 24 kB IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectscript.4dex.io
FingerprintAB:9B:A2:70:ED:27:23:EF:84:14:22:FF:67:9F:5D:50:06:2D:04:28
ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 22 Oct 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65354)
Hash 6faf3acfde3bb82adada71be4fc1deb0
20f08498f821936592273d8f755d94f31c9b9c7a
26305a08644b4f51b55812cf0ecf879c22da303a365b3d2769baa1b54c028c4d
GET /adagio.js HTTP/1.1
Host: script.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modsfire.com/
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 21 Jan 2024 16:13:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
ETag: W/"6faf3acfde3bb82adada71be4fc1deb0"
Last-Modified: Mon, 27 Nov 2023 07:14:07 GMT
Vary: Origin, Accept-Encoding
Access-Control-Expose-Headers:
CF-Cache-Status: HIT
Age: 2105784
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EdDOtmuZ8gF0UA%2B3M13tKyiGWA5%2FHuyNPAzHHGEdTPshZLkYb997h4bmMK52ZH207GTBGeceUWeGbJxXgfYXHtTL1bzZBWQg3oFwYwl3D5p3c0I%2FDqN5YzV1niNodGsE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8490d7ed3c02b4f3-OSL
Content-Encoding: br
POST prebid.a-mo.net/a/c
204 No Content 0 B IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint7D:D8:F5:1F:F9:CA:FD:EA:BC:CA:C5:50:47:C2:2D:B6:AC:B4:6A:80
ValiditySat, 06 Jan 2024 12:50:19 GMT - Fri, 05 Apr 2024 12:50:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 3515
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://modsfire.com
cache-control: max-age=0, private, must-revalidate
date: Sun, 21 Jan 2024 16:13:15 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 1
X-Firefox-Spdy: h2
POST prebid.a-mo.net/a/c
204 No Content 0 B IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint7D:D8:F5:1F:F9:CA:FD:EA:BC:CA:C5:50:47:C2:2D:B6:AC:B4:6A:80
ValiditySat, 06 Jan 2024 12:50:19 GMT - Fri, 05 Apr 2024 12:50:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /a/c HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 1537
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: https://modsfire.com
cache-control: max-age=0, private, must-revalidate
date: Sun, 21 Jan 2024 16:13:15 GMT
server: envoy
vary: origin, Accept-Encoding
x-nbr: 1
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
GET pl21832361.toprevenuegate.com/d64e14187ad204ab33c0ae928b36025f/invoke.js
200 OK 9.8 kB URL GET HTTP/1.1 pl21832361.toprevenuegate.com/d64e14187ad204ab33c0ae928b36025f/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjecttoprevenuegate.com
Fingerprint12:98:4D:23:5C:FB:03:A9:39:F4:63:A4:99:4D:79:B2:4A:E2:D3:D1
ValidityTue, 19 Dec 2023 13:19:08 GMT - Mon, 18 Mar 2024 13:19:07 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (26618), with no line terminators
Hash a4f1acd02b196a26a01e64795ba17d94
43f28ba68979eaf2854042a1b9e9c88b8594c5a0
a8b8b7b64d568b74aa81b4d74a21bba35e05c2d3f8fc5d3c26139616de3c64d9
GET /d64e14187ad204ab33c0ae928b36025f/invoke.js HTTP/1.1
Host: pl21832361.toprevenuegate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 21 Jan 2024 16:13:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f2928f5559f81fe426632c7b28875af3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
POST rtb.adxpremium.services/openrtb2/auction
200 OK 2.0 kB URL POST HTTP/1.1 rtb.adxpremium.services/openrtb2/auction
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerSectigo Limited
Subject*.adxpremium.services
Fingerprint6A:EC:8D:6D:B8:F1:05:0D:4F:DE:C3:4E:4B:BA:17:D7:AA:67:4F:CC
ValidityTue, 11 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
Hash 3fe9428c3ba99cc0974d9aba1e0d25d8
a8089a41eb9b9cf8f1bd407dbc400424188c4941
5d483747d5746a67ad8c61a86e1c137921162598f837e6f88849867c0c860071
POST /openrtb2/auction HTTP/1.1
Host: rtb.adxpremium.services
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 913
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 21 Jan 2024 16:13:15 GMT
Content-Type: application/json
Content-Length: 1983
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://modsfire.com
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Pragma: no-cache
Vary: Origin
X-Prebid: pbs-go/unknown
GET prebid.a-mo.net/cchain/0?gdpr=0&us_privacy=&cb=https%3A%2F%2Fprebid-stag.setupad.net%2Fsetuid%3Fbidder%3Damx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D
302 Found 0 B URL GET HTTP/2 prebid.a-mo.net/cchain/0?gdpr=0&us_privacy=&cb=https%3A%2F%2Fprebid-stag.setupad.net%2Fsetuid%3Fbidder%3Damx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint7D:D8:F5:1F:F9:CA:FD:EA:BC:CA:C5:50:47:C2:2D:B6:AC:B4:6A:80
ValiditySat, 06 Jan 2024 12:50:19 GMT - Fri, 05 Apr 2024 12:50:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cchain/0?gdpr=0&us_privacy=&cb=https%3A%2F%2Fprebid-stag.setupad.net%2Fsetuid%3Fbidder%3Damx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3D%26gpp_sid%3D%26f%3Di%26uid%3D HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 0
date: Sun, 21 Jan 2024 16:13:15 GMT
location: https://prebid-stag.setupad.net/setuid?bidder=amx&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&f=i&uid=
server: envoy
set-cookie: _Amc_b=0; path=/; expires=Sun, 21 Jan 2024 16:18:15 GMT; max-age=300; secure; HttpOnly; SameSite=None
x-envoy-upstream-service-time: 0
X-Firefox-Spdy: h2
GET proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d48f9bd4b96ad55619871f972e0a72a9
417c34a463aa9bc0ec92c88f625ba6cbe037963b
e00f9cc13187074cb1ed5ef889802d494201c3d678a051f94c8ac5c8f80bc767
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:15 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://modsfire.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=0d85b983-4aca-43f2-b503-3920b0037641:3:1; expires=Wed, 18 Jan 2034 16:13:15 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET prebid-stag.setupad.net/setuid?bidder=amx&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&f=i&uid=
200 OK 86 B URL GET HTTP/2 prebid-stag.setupad.net/setuid?bidder=amx&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&f=i&uid=
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1C:7E:B1:65:38:AD:C4:5D:82:7C:55:E2:FE:28:9C:08:2D:2A:6F:DC
ValidityTue, 11 Apr 2023 00:00:00 GMT - Wed, 10 Apr 2024 23:59:59 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Hash 6c6641b08f4be6f479f1588af08054b3
8da28b3146834c48fd843b108749191516d2a65d
c2ecff291918a3caf0b7e470323e89f2a1f05b92e12a10649e598cacebe62acf
GET /setuid?bidder=amx&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&f=i&uid= HTTP/1.1
Host: prebid-stag.setupad.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modsfire.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:16 GMT
content-type: image/png
content-length: 86
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
set-cookie: uids=e30=; Path=/; Expires=Sat, 20 Apr 2024 16:13:16 GMT
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jDlUN01g%2BJkW4eeub5BXfrE3aqpoRXaki9Gr4ZURbVkkmeIbv72KOtQCaLIAOHYKx7W3wLL4sAp5dYbf9CPw%2FqZdXlR3s5j5ExamaeIiIXHmh9VmEoSBvjVSbeqpd5a91F6Uf%2BfARDHC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8490d7ee6b9a0b02-OSL
X-Firefox-Spdy: h2
POST modsfire.com/cdn-cgi/challenge-platform/h/b/jsd/r/8490d7e21e99568f
200 OK 2.0 kB URL POST HTTP/2 modsfire.com/cdn-cgi/challenge-platform/h/b/jsd/r/8490d7e21e99568f
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (1984)
Hash 6445f0d9e7cbe7b01baa0d8a255435e8
027970a3bbe1636e80dadba5725bb03797568bf1
adeb1e2b22af80df45f41a4d35fbef588f5e6f8dbaf86ea4ba58689720dfed77
POST /cdn-cgi/challenge-platform/h/b/jsd/r/8490d7e21e99568f HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12183
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/dI90LxHm0U9LN5B
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D; _ga_JXQKZFEW04=GS1.1.1705853595.1.0.1705853595.0.0.0; _ga=GA1.1.1726846736.1705853596; stpdOrigin={"origin":"direct"}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:15 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=oZirp51bMpGhH6H6OqNMbq12JhFlMUr0jIzy6YQfI6Y-1705853595-1-Ae18Kv/OfsPyT5/zEf9jZoc0fStOBGrVISG44eYVP7JwaONsQ3tEh8Vv+5HOMJTOeZFUD6QcR7xWX5ay1L394AI=; path=/; expires=Mon, 20-Jan-25 16:13:15 GMT; domain=.modsfire.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uET5z1CMAFhF8eM3o9NDiLJqsk4bWjiWzPfdY%2F52Hs0lChy2Xy6eRKDlCKIQhWaIZ2X6t7vL%2BHlK9n%2FwU74zgbErDpxuvAT%2B5i9hc9M%2BSwXXHkHNjCFe%2BiMfIMPVkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8490d7eb6d93568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
POST prebid-stag.setupad.net/cookie_sync
200 OK 10 kB URL POST HTTP/2 prebid-stag.setupad.net/cookie_sync
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1C:7E:B1:65:38:AD:C4:5D:82:7C:55:E2:FE:28:9C:08:2D:2A:6F:DC
ValidityTue, 11 Apr 2023 00:00:00 GMT - Wed, 10 Apr 2024 23:59:59 GMT
Hash 26dbdbad267e73f9bc29f44da9643611
f07f9faee178dbe960fd8626951886f493d40197
10e815a060e2a997f23a523121d3a4cd3f318ec8dae153e5e34aece6f6d867f6
POST /cookie_sync HTTP/1.1
Host: prebid-stag.setupad.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 235
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:15 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://modsfire.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wIoni%2BKJfnYL6ormwusD5sVo9D%2FWd2gCuGuYNt5HuL%2BAQdke94w8ZlLKV2MtxMDO7lBbmIXrJfN%2B148u%2BNqz1GYr4iB2HhQOAVrLsBg5TFoJ9IBC316BebUxlS2B3H0kLCT6dJAuXJEn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8490d7ecc9680b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET stitchalmond.com/f2/84/a3/f284a3ef401042c6af78ccfc62011d16.js
200 OK 26 kB URL GET HTTP/1.1 stitchalmond.com/f2/84/a3/f284a3ef401042c6af78ccfc62011d16.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectstitchalmond.com
Fingerprint8C:76:3C:D0:62:1D:A0:BB:9F:AB:21:0B:39:CB:41:9C:36:EF:9E:7C
ValidityWed, 20 Dec 2023 08:17:44 GMT - Tue, 19 Mar 2024 08:17:43 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 146b2afdd2e89e8e70a622b317a556df
8200506486325e2b97121106a738dbd2da5e0d8c
451514523bd480071b88e5a3a622401f7420d21bc1539f5d10857c85267b1b7b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /f2/84/a3/f284a3ef401042c6af78ccfc62011d16.js HTTP/1.1
Host: stitchalmond.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 21 Jan 2024 16:13:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7eb935bfa344c743958ae4c8980ce429
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET stitchalmond.com/ntv.json?key=d64e14187ad204ab33c0ae928b36025f&vstc=3
200 OK 12 kB URL GET HTTP/1.1 stitchalmond.com/ntv.json?key=d64e14187ad204ab33c0ae928b36025f&vstc=3
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectstitchalmond.com
Fingerprint8C:76:3C:D0:62:1D:A0:BB:9F:AB:21:0B:39:CB:41:9C:36:EF:9E:7C
ValidityWed, 20 Dec 2023 08:17:44 GMT - Tue, 19 Mar 2024 08:17:43 GMT
Hash 701e274f39c94321b6261d3cb3504308
498f95a9136007372bc159dfd8e504088d2102ac
c6d5fa2fa2533dac68c1d8f92323e86a38d7f07a22717b24ea8c8683f90278c8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=d64e14187ad204ab33c0ae928b36025f&vstc=3 HTTP/1.1
Host: stitchalmond.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 21 Jan 2024 16:13:16 GMT
Content-Type: application/json
Content-Length: 12296
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://modsfire.com
Access-Control-Allow-Origin: https://modsfire.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=21731862; expires=Mon, 22 Jan 2024 16:13:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 22 Jan 2024 16:13:16 GMT; secure; SameSite=None
uncs=1; expires=Mon, 22 Jan 2024 16:13:16 GMT; secure; SameSite=None
pdhtkv49=true; expires=Mon, 22 Jan 2024 16:13:16 GMT; secure; SameSite=None
uncs49=1; expires=Mon, 22 Jan 2024 16:13:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 204183736276159521d57798e4c66d44
Strict-Transport-Security: max-age=0; includeSubdomains
GET cdn.cloudimagesb.com/cti/17/9a/a2/179aa280f4d8a9a1e329d738b16a8c76/1675415973.jpg
200 OK 20 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/17/9a/a2/179aa280f4d8a9a1e329d738b16a8c76/1675415973.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3
Hash f5e8af0b1eb83a8a5a76c9a648362839
d0ba49056ca83668e9a8afdea50096b97596f73a
b01f68b57e6512f3233380181b11807fb0ec19ad9794e926eff4bdeb40248640
GET /cti/17/9a/a2/179aa280f4d8a9a1e329d738b16a8c76/1675415973.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:16 GMT
content-type: image/jpeg
content-length: 19594
server: nginx/1.21.6
last-modified: Fri, 03 Feb 2023 09:19:41 GMT
etag: "63dcd1ad-4c8a"
expires: Tue, 23 Jan 2024 16:13:16 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn.cloudimagesb.com/cti/76/fb/3d/76fb3d2d2d0a1dc0b0d81ef60b7f44e7/1606718751.jpg
200 OK 16 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/76/fb/3d/76fb3d2d2d0a1dc0b0d81ef60b7f44e7/1606718751.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3
Hash 37b4cdc1b5b904ac9e2297d4a1c35170
1751df37a6c92374e64617da51f5a0a3160b4789
b625540b5f1178f5267139998eeb0ab2d0d05e73b3ad44ead44506e765a4f44d
GET /cti/76/fb/3d/76fb3d2d2d0a1dc0b0d81ef60b7f44e7/1606718751.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:16 GMT
content-type: image/jpeg
content-length: 16317
server: nginx/1.21.6
last-modified: Mon, 30 Nov 2020 06:45:58 GMT
etag: "5fc49526-3fbd"
expires: Tue, 23 Jan 2024 16:13:16 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET cdn.cloudimagesb.com/cti/1d/44/2f/1d442f52a9172789f100854bcd14658b/1657625225.jpg
200 OK 13 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/1d/44/2f/1d442f52a9172789f100854bcd14658b/1657625225.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3
Hash 103601c25dad1b13eb54ad1584f686be
36d9b86afa884b195850f4c038fb0b3935b8f0b3
ccf22a9b0c9e1800d81689623b2b882c23f65151ffec5bd1798677b657de5da9
GET /cti/1d/44/2f/1d442f52a9172789f100854bcd14658b/1657625225.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:16 GMT
content-type: image/jpeg
content-length: 13096
server: nginx/1.21.6
last-modified: Tue, 12 Jul 2022 11:27:14 GMT
etag: "62cd5a92-3328"
expires: Tue, 23 Jan 2024 16:13:16 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET sootpluglousy.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWsk1Rd9Ncn84KerkcGNLtqNKEinqr%2FjCGKMkTBxMs4oupP3VZ1nXtUr3qvX1Ymb4IDMzgZXDi4qp5MJahT9AxykMyAyIKR2WRi37oXBpXQbbL1Q3HPuuQXn3vs%2B2ffnJIKnZ6tvmV2lNV1q18PaC%2B9H0bXahkr9sDbsdT7otK7V7ODl5U49fLH2puTbZqkRRmEYhVFtTVkZm%2BHSVITKjpej%2BnJYbzXqUbuFof0vdz6AowHE4Jw8BSWqxYfBVSg%2BQZp8tyrddm6yl95IvKa5sRiIo3fT7dQUKZI5jG2AOD266IZxp2sPYNLDmV2YwT%2BNTFUk%2BOkBWHp0YRJscDDzyTRkCiaeRDGYQOoJFJ2AmztQ4pQAXODGJtLk%2Fg1jC7rzt0qnakUWH%2F8BVVRk8derSJNvV7Qa1m4b7XNlUodhXEINJ1D9CTJ%2Fgnw3gCpOwPOPocQvZOnxBtLkYNNpAyXK2exKTaDiCbQcgboAfvqpAD4O4LMAiTir8SiKuqHgNOwtc94UXck6IoxoN45oFHZ68Hxqb4Q8G4HrEbjdQ2b3sK1GsP5HuK0STgRweUWCt%2FcwECUKSVA4goISFIqgyAmKQXkotGu48r7QzrPoIjcucrMcm7y%2FTw9N3pcpAbWj%2FeycXJnuJrh%2B72lsy7Oa6LRk1Ip6XSoaYYuyZpOHVC43eqzZCRvtGE6VUO7SbNxdVZHnPjpCpipyWbfA6AmcPgFXV0B9BFqMu40QdGvc6oXYTY8TI1ysrKxzk0CYElm%2BiHwn2Nfn5JnZjTqXP4Xkj8hFgNsSmS3xoXpI0Nd3x7dMQQ5umcKR7zezXCVql07vdzunufzfV9flTmGsWF91oy9f41NhCo%2FfkS7foKlQad%2BRr1eUENKuGcsl%2BWHdvSfZTe%2B2VrxNfbZx8%2FW19SSz0jll0gmoOt38E1xV5P%2FZ77OH%2BexmE8pOYH2JxM%2BdKjMBz%2FbgsnnNGQKr55xll1D4cmwbbF7UikDLOaeshPsXZ3M8tnT6N1XlvruLvl0Aze8gTUoMbImBLkH1CM4%2FMc4z%2B%2BjVnz%2Bfxj0wvTBm2i4cMG31ZxV5Htls0xV55bdDOHVWa4aiy2Qsu0y22q1YcsHabRbymLOm6PU4clfJb1a%2B%2BAsAAP%2F%2FAQAA%2F%2F%2BbfThjdwQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 sootpluglousy.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWsk1Rd9Ncn84KerkcGNLtqNKEinqr%2FjCGKMkTBxMs4oupP3VZ1nXtUr3qvX1Ymb4IDMzgZXDi4qp5MJahT9AxykMyAyIKR2WRi37oXBpXQbbL1Q3HPuuQXn3vs%2B2ffnJIKnZ6tvmV2lNV1q18PaC%2B9H0bXahkr9sDbsdT7otK7V7ODl5U49fLH2puTbZqkRRmEYhVFtTVkZm%2BHSVITKjpej%2BnJYbzXqUbuFof0vdz6AowHE4Jw8BSWqxYfBVSg%2BQZp8tyrddm6yl95IvKa5sRiIo3fT7dQUKZI5jG2AOD266IZxp2sPYNLDmV2YwT%2BNTFUk%2BOkBWHp0YRJscDDzyTRkCiaeRDGYQOoJFJ2AmztQ4pQAXODGJtLk%2Fg1jC7rzt0qnakUWH%2F8BVVRk8derSJNvV7Qa1m4b7XNlUodhXEINJ1D9CTJ%2Fgnw3gCpOwPOPocQvZOnxBtLkYNNpAyXK2exKTaDiCbQcgboAfvqpAD4O4LMAiTir8SiKuqHgNOwtc94UXck6IoxoN45oFHZ68Hxqb4Q8G4HrEbjdQ2b3sK1GsP5HuK0STgRweUWCt%2FcwECUKSVA4goISFIqgyAmKQXkotGu48r7QzrPoIjcucrMcm7y%2FTw9N3pcpAbWj%2FeycXJnuJrh%2B72lsy7Oa6LRk1Ip6XSoaYYuyZpOHVC43eqzZCRvtGE6VUO7SbNxdVZHnPjpCpipyWbfA6AmcPgFXV0B9BFqMu40QdGvc6oXYTY8TI1ysrKxzk0CYElm%2BiHwn2Nfn5JnZjTqXP4Xkj8hFgNsSmS3xoXpI0Nd3x7dMQQ5umcKR7zezXCVql07vdzunufzfV9flTmGsWF91oy9f41NhCo%2FfkS7foKlQad%2BRr1eUENKuGcsl%2BWHdvSfZTe%2B2VrxNfbZx8%2FW19SSz0jll0gmoOt38E1xV5P%2FZ77OH%2BexmE8pOYH2JxM%2BdKjMBz%2FbgsnnNGQKr55xll1D4cmwbbF7UikDLOaeshPsXZ3M8tnT6N1XlvruLvl0Aze8gTUoMbImBLkH1CM4%2FMc4z%2B%2BjVnz%2Bfxj0wvTBm2i4cMG31ZxV5Htls0xV55bdDOHVWa4aiy2Qsu0y22q1YcsHabRbymLOm6PU4clfJb1a%2B%2BAsAAP%2F%2FAQAA%2F%2F%2BbfThjdwQAAA%3D%3D
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectsootpluglousy.com
FingerprintBC:A3:67:E4:E1:EB:E1:9B:46:20:ED:3B:02:B4:AD:79:AC:B4:FF:8D
ValidityWed, 20 Dec 2023 08:29:33 GMT - Tue, 19 Mar 2024 08:29:32 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWsk1Rd9Ncn84KerkcGNLtqNKEinqr%2FjCGKMkTBxMs4oupP3VZ1nXtUr3qvX1Ymb4IDMzgZXDi4qp5MJahT9AxykMyAyIKR2WRi37oXBpXQbbL1Q3HPuuQXn3vs%2B2ffnJIKnZ6tvmV2lNV1q18PaC%2B9H0bXahkr9sDbsdT7otK7V7ODl5U49fLH2puTbZqkRRmEYhVFtTVkZm%2BHSVITKjpej%2BnJYbzXqUbuFof0vdz6AowHE4Jw8BSWqxYfBVSg%2BQZp8tyrddm6yl95IvKa5sRiIo3fT7dQUKZI5jG2AOD266IZxp2sPYNLDmV2YwT%2BNTFUk%2BOkBWHp0YRJscDDzyTRkCiaeRDGYQOoJFJ2AmztQ4pQAXODGJtLk%2Fg1jC7rzt0qnakUWH%2F8BVVRk8derSJNvV7Qa1m4b7XNlUodhXEINJ1D9CTJ%2Fgnw3gCpOwPOPocQvZOnxBtLkYNNpAyXK2exKTaDiCbQcgboAfvqpAD4O4LMAiTir8SiKuqHgNOwtc94UXck6IoxoN45oFHZ68Hxqb4Q8G4HrEbjdQ2b3sK1GsP5HuK0STgRweUWCt%2FcwECUKSVA4goISFIqgyAmKQXkotGu48r7QzrPoIjcucrMcm7y%2FTw9N3pcpAbWj%2FeycXJnuJrh%2B72lsy7Oa6LRk1Ip6XSoaYYuyZpOHVC43eqzZCRvtGE6VUO7SbNxdVZHnPjpCpipyWbfA6AmcPgFXV0B9BFqMu40QdGvc6oXYTY8TI1ysrKxzk0CYElm%2BiHwn2Nfn5JnZjTqXP4Xkj8hFgNsSmS3xoXpI0Nd3x7dMQQ5umcKR7zezXCVql07vdzunufzfV9flTmGsWF91oy9f41NhCo%2FfkS7foKlQad%2BRr1eUENKuGcsl%2BWHdvSfZTe%2B2VrxNfbZx8%2FW19SSz0jll0gmoOt38E1xV5P%2FZ77OH%2BexmE8pOYH2JxM%2BdKjMBz%2FbgsnnNGQKr55xll1D4cmwbbF7UikDLOaeshPsXZ3M8tnT6N1XlvruLvl0Aze8gTUoMbImBLkH1CM4%2FMc4z%2B%2BjVnz%2Bfxj0wvTBm2i4cMG31ZxV5Htls0xV55bdDOHVWa4aiy2Qsu0y22q1YcsHabRbymLOm6PU4clfJb1a%2B%2BAsAAP%2F%2FAQAA%2F%2F%2BbfThjdwQAAA%3D%3D HTTP/1.1
Host: sootpluglousy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 21 Jan 2024 16:13:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 24d0a925dbb6c19570cb6599cad22dfb
Strict-Transport-Security: max-age=0; includeSubdomains
GET sootpluglousy.com/pixel/nvwbdp?key=d64e14187ad204ab33c0ae928b36025f
200 OK 0 B URL GET HTTP/1.1 sootpluglousy.com/pixel/nvwbdp?key=d64e14187ad204ab33c0ae928b36025f
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectsootpluglousy.com
FingerprintBC:A3:67:E4:E1:EB:E1:9B:46:20:ED:3B:02:B4:AD:79:AC:B4:FF:8D
ValidityWed, 20 Dec 2023 08:29:33 GMT - Tue, 19 Mar 2024 08:29:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/nvwbdp?key=d64e14187ad204ab33c0ae928b36025f HTTP/1.1
Host: sootpluglousy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 21 Jan 2024 16:13:16 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET sootpluglousy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxReu%2FiX7O%2BhpdfHiZfQgCjLp7pn0zLiCGLORsHGz7ip6k%2BqqmkmZ6q6mqmt6Ei%2FBBdmbA55cPHS%2BSTaoUfQPcJHOgsiCkLnlYPwjhGWP0mNw9EHz3ve%2B1%2FB979Vn%2B%2B6cBHD0bPUdvSuVokvLTb%2Fx8odBcLWxIVM3aoy60UdR%2B2rDDF%2FrRU3%2Flcbbgm3rpdAPfD%2Fwg8aaNKKvR0s1CZkd94Jmz2%2B2w2aw3MbI%2FBdb58FSD3x4Tp6B5NPFh94VSFYhTX5YFXY719mr1xKnaK4Nhvzo%2FXQ71UWKZF72jYd%2BenQxDW1P1x5Ap4czudDDfwZjOSXeLw8Qp0cXIhEPD2Y6YwWRIuZPoxhWEKqCpBWYvgPJTwnAOG5sIk3u39CmoDt%2Fs7Rmp2Tx8Z%2BQxZQs%2Fn4FafL9ipKjxm2tXC51ajHql5CjCnJQIXMnyHc9yOIELP8Ukv9Glh5vIE0ONq3SkLyceZeyguxXUGIMaj24%2BpMeXN%2BDyzwk%2FKzBgiDo%2BJxRv9tjrMU7Io64H9BOP6CBH3XhWC1vjDwbg6kxmNlDZvawLccw7mfYrRKWe7D5lHjv7mHISxSCoLAEBSUoJEGRExTD8pArG9ryPlfWxcFFDi9yq5zofLBPD3U%2BECkBNeP97JxcrnfjXb%2F3HLbFWYNHbRG0g26H8tBv07jVYj4VvbAbtyI%2FXO7DyhLS%2Fm9md1dOyQufHCGTU3JJtRHTE1h1AiYvg7oAtJh0Qh90a9Lu%2BthNjxPNbV8a0WQ6AdclsnwR%2BY63r87J87MbvYQMgj0iFwFmSmSmxMfyIcFA3Z3c0gU5uKULS37czHKZyF1a3%2B92TnPx%2F2%2Bui51CG76%2Basdfv8lqoi6P3xM236Apl%2BnAkm9XJOfCrGnDBPlp3X4g4pvObq04k7ps4%2BZba%2BtJZoS1UqcVqDzdfAJWG3zy4uxhPnvtBNJUMK5E4uZKpa7Asj3YbN6zmsCoOY4zD4UrJyaM500lCZSYYxqXsP%2FC8byeGFr%2FTWW5b%2B9iYBZA8ztIkxJDU2KoSlA1hnVPTfLMPHrj1y%2FruIdYLUxiZRYOYmXUF7MlT0l06fMpef2PQ1h51ui0Wj6NestBp0NFJ26H3X4UcErDdhRGEW0ht1Px3cpXfwEAAP%2F%2FAQAA%2F%2F%2F3kQiRdwQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 sootpluglousy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxReu%2FiX7O%2BhpdfHiZfQgCjLp7pn0zLiCGLORsHGz7ip6k%2BqqmkmZ6q6mqmt6Ei%2FBBdmbA55cPHS%2BSTaoUfQPcJHOgsiCkLnlYPwjhGWP0mNw9EHz3ve%2B1%2FB979Vn%2B%2B6cBHD0bPUdvSuVokvLTb%2Fx8odBcLWxIVM3aoy60UdR%2B2rDDF%2FrRU3%2Flcbbgm3rpdAPfD%2Fwg8aaNKKvR0s1CZkd94Jmz2%2B2w2aw3MbI%2FBdb58FSD3x4Tp6B5NPFh94VSFYhTX5YFXY719mr1xKnaK4Nhvzo%2FXQ71UWKZF72jYd%2BenQxDW1P1x5Ap4czudDDfwZjOSXeLw8Qp0cXIhEPD2Y6YwWRIuZPoxhWEKqCpBWYvgPJTwnAOG5sIk3u39CmoDt%2Fs7Rmp2Tx8Z%2BQxZQs%2Fn4FafL9ipKjxm2tXC51ajHql5CjCnJQIXMnyHc9yOIELP8Ukv9Glh5vIE0ONq3SkLyceZeyguxXUGIMaj24%2BpMeXN%2BDyzwk%2FKzBgiDo%2BJxRv9tjrMU7Io64H9BOP6CBH3XhWC1vjDwbg6kxmNlDZvawLccw7mfYrRKWe7D5lHjv7mHISxSCoLAEBSUoJEGRExTD8pArG9ryPlfWxcFFDi9yq5zofLBPD3U%2BECkBNeP97JxcrnfjXb%2F3HLbFWYNHbRG0g26H8tBv07jVYj4VvbAbtyI%2FXO7DyhLS%2Fm9md1dOyQufHCGTU3JJtRHTE1h1AiYvg7oAtJh0Qh90a9Lu%2BthNjxPNbV8a0WQ6AdclsnwR%2BY63r87J87MbvYQMgj0iFwFmSmSmxMfyIcFA3Z3c0gU5uKULS37czHKZyF1a3%2B92TnPx%2F2%2Bui51CG76%2Basdfv8lqoi6P3xM236Apl%2BnAkm9XJOfCrGnDBPlp3X4g4pvObq04k7ps4%2BZba%2BtJZoS1UqcVqDzdfAJWG3zy4uxhPnvtBNJUMK5E4uZKpa7Asj3YbN6zmsCoOY4zD4UrJyaM500lCZSYYxqXsP%2FC8byeGFr%2FTWW5b%2B9iYBZA8ztIkxJDU2KoSlA1hnVPTfLMPHrj1y%2FruIdYLUxiZRYOYmXUF7MlT0l06fMpef2PQ1h51ui0Wj6NestBp0NFJ26H3X4UcErDdhRGEW0ht1Px3cpXfwEAAP%2F%2FAQAA%2F%2F%2F3kQiRdwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectsootpluglousy.com
FingerprintBC:A3:67:E4:E1:EB:E1:9B:46:20:ED:3B:02:B4:AD:79:AC:B4:FF:8D
ValidityWed, 20 Dec 2023 08:29:33 GMT - Tue, 19 Mar 2024 08:29:32 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxReu%2FiX7O%2BhpdfHiZfQgCjLp7pn0zLiCGLORsHGz7ip6k%2BqqmkmZ6q6mqmt6Ei%2FBBdmbA55cPHS%2BSTaoUfQPcJHOgsiCkLnlYPwjhGWP0mNw9EHz3ve%2B1%2FB979Vn%2B%2B6cBHD0bPUdvSuVokvLTb%2Fx8odBcLWxIVM3aoy60UdR%2B2rDDF%2FrRU3%2Flcbbgm3rpdAPfD%2Fwg8aaNKKvR0s1CZkd94Jmz2%2B2w2aw3MbI%2FBdb58FSD3x4Tp6B5NPFh94VSFYhTX5YFXY719mr1xKnaK4Nhvzo%2FXQ71UWKZF72jYd%2BenQxDW1P1x5Ap4czudDDfwZjOSXeLw8Qp0cXIhEPD2Y6YwWRIuZPoxhWEKqCpBWYvgPJTwnAOG5sIk3u39CmoDt%2Fs7Rmp2Tx8Z%2BQxZQs%2Fn4FafL9ipKjxm2tXC51ajHql5CjCnJQIXMnyHc9yOIELP8Ukv9Glh5vIE0ONq3SkLyceZeyguxXUGIMaj24%2BpMeXN%2BDyzwk%2FKzBgiDo%2BJxRv9tjrMU7Io64H9BOP6CBH3XhWC1vjDwbg6kxmNlDZvawLccw7mfYrRKWe7D5lHjv7mHISxSCoLAEBSUoJEGRExTD8pArG9ryPlfWxcFFDi9yq5zofLBPD3U%2BECkBNeP97JxcrnfjXb%2F3HLbFWYNHbRG0g26H8tBv07jVYj4VvbAbtyI%2FXO7DyhLS%2Fm9md1dOyQufHCGTU3JJtRHTE1h1AiYvg7oAtJh0Qh90a9Lu%2BthNjxPNbV8a0WQ6AdclsnwR%2BY63r87J87MbvYQMgj0iFwFmSmSmxMfyIcFA3Z3c0gU5uKULS37czHKZyF1a3%2B92TnPx%2F2%2Bui51CG76%2Basdfv8lqoi6P3xM236Apl%2BnAkm9XJOfCrGnDBPlp3X4g4pvObq04k7ps4%2BZba%2BtJZoS1UqcVqDzdfAJWG3zy4uxhPnvtBNJUMK5E4uZKpa7Asj3YbN6zmsCoOY4zD4UrJyaM500lCZSYYxqXsP%2FC8byeGFr%2FTWW5b%2B9iYBZA8ztIkxJDU2KoSlA1hnVPTfLMPHrj1y%2FruIdYLUxiZRYOYmXUF7MlT0l06fMpef2PQ1h51ui0Wj6NestBp0NFJ26H3X4UcErDdhRGEW0ht1Px3cpXfwEAAP%2F%2FAQAA%2F%2F%2F3kQiRdwQAAA%3D%3D HTTP/1.1
Host: sootpluglousy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 21 Jan 2024 16:13:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: edd1004fc41ca1309406b52bb83c2b9f
Strict-Transport-Security: max-age=0; includeSubdomains
POST node.setupad.com/node/node.php
200 OK 27 B URL POST HTTP/2 node.setupad.com/node/node.php
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectnode.setupad.com
Fingerprint4E:A5:90:C1:A9:34:8B:76:2B:71:88:8B:64:01:8C:B5:69:CF:4A:48
ValiditySun, 24 Dec 2023 16:40:57 GMT - Sat, 23 Mar 2024 16:40:56 GMT
File type gzip compressed data, max speed, from Unix
Hash 86878a349727ff2004eed0702ea59b89
d87ecae4d4db5d81cda85214d9e9c4101b80e195
55620b418dc52ba4f52222a8e5bcb177b581eebf20135713a788e3b42f67b3e2
POST /node/node.php HTTP/1.1
Host: node.setupad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 428
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 21 Jan 2024 16:13:16 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache
pragma: no-cache
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With
content-encoding: gzip
X-Firefox-Spdy: h2
GET sootpluglousy.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2sdVRS%2BY1IXuqoUN25GF6IgLzPvd6wgxhoNjU1tFd3J%2FTUv19yZO9w78%2BYlboIF6c4HriwuJt9LGtQo%2BgdYZFIQKQh5CyEL4x8hlC5lXoNPDwznfOc7A993zv18Lz8jIXJ6euVds6O0pkudRuC%2F9FEYXvbXVZKP%2FFG%2F%2B3G3fdm3w1eXu43gZf9tybfMUjMIgyAMQn9VWRmZ0VJNQqVHy2FjOWi0m42w08bI%2Fh%2B73IOjHsTwjDwDJaaL971LULxCEv94RbqtzKSvvBXnmmbGYigOP0i2ElMkiOdlZD1EyeH5NIw7Wb0HkxzM5MIM%2Fx1kakq8X%2B%2BBJYfnIsGG%2BzOdTEMmYOJpFMMKUldQtAI3t6DECQG4wLUNJPHda8YWdPsxS2t2ShYf%2Fg1VTMnin5eQxD%2BsaDXybxqdZ8okDqOohBpVUIMKaX6MbMeDKo7Bs8%2BgxO9k6eE6knh%2Fw2kDJcqZd6UqqKiClmNQ5yGvP%2BUhjzzkqYdYnPo8DMNeIDgN%2Bsuct0RPsq4IQtqLQhoG3T5yXssbI0vH4HoMbneR2l1sqTFs%2FgvcZgknPLhsSrz3djEUJQpJUDiCghIUiqDICIpheSC0a7ryrtAuZ%2BF5bp7nVjkx2WCPHphsIBMCasd76Rm5WO%2FGu3rnWWzJU1902zJsh%2F0eFc2gTVmrxQMql5t91uoGzU4Ep0oo98TM7o6akuc%2FPUSqpuSCboPRYzh9DK4uguYhaDHpNQPQzUm7H2AnOYqNcJGyssFNDGFKpNkism1vT5%2BR52Y3eu2vA0j%2BgJwHuC2R2hKfqPsEA317csMUZP%2BGKRz5aSPNVKx2aH2%2FmxnN5JPfXpXbhbFi7Yobf%2FMGr4m6PHpfumydJkIlA0e%2BW1FCSLtqLJfk5zX3oWTXc7e5ktskT9evv7m6FqdWOqdMUoGqk41H4LXBRy%2FMHqb%2FxztQtoLNS8T5XKkyFXi6C5fOe84QWD3HLF1AkZcT22TzplYEWs4xZSXcfzCb1xNL67%2BpKvfcbQzsAmh2C0lcYmhLDHUJqsdw%2BVOTLLUPXv%2FtqzrugOmFCdN2YZ9pq7%2BckheRTkn3wheP1%2B3Uqd8KRI%2FJSPaYbHfakeSCdTos4BFnLdHvc2RuKr9f%2BfofAAAA%2F%2F8BAAD%2F%2F%2F1pIdh3BAAA
200 OK 7 B URL GET HTTP/1.1 sootpluglousy.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2sdVRS%2BY1IXuqoUN25GF6IgLzPvd6wgxhoNjU1tFd3J%2FTUv19yZO9w78%2BYlboIF6c4HriwuJt9LGtQo%2BgdYZFIQKQh5CyEL4x8hlC5lXoNPDwznfOc7A993zv18Lz8jIXJ6euVds6O0pkudRuC%2F9FEYXvbXVZKP%2FFG%2F%2B3G3fdm3w1eXu43gZf9tybfMUjMIgyAMQn9VWRmZ0VJNQqVHy2FjOWi0m42w08bI%2Fh%2B73IOjHsTwjDwDJaaL971LULxCEv94RbqtzKSvvBXnmmbGYigOP0i2ElMkiOdlZD1EyeH5NIw7Wb0HkxzM5MIM%2Fx1kakq8X%2B%2BBJYfnIsGG%2BzOdTEMmYOJpFMMKUldQtAI3t6DECQG4wLUNJPHda8YWdPsxS2t2ShYf%2Fg1VTMnin5eQxD%2BsaDXybxqdZ8okDqOohBpVUIMKaX6MbMeDKo7Bs8%2BgxO9k6eE6knh%2Fw2kDJcqZd6UqqKiClmNQ5yGvP%2BUhjzzkqYdYnPo8DMNeIDgN%2Bsuct0RPsq4IQtqLQhoG3T5yXssbI0vH4HoMbneR2l1sqTFs%2FgvcZgknPLhsSrz3djEUJQpJUDiCghIUiqDICIpheSC0a7ryrtAuZ%2BF5bp7nVjkx2WCPHphsIBMCasd76Rm5WO%2FGu3rnWWzJU1902zJsh%2F0eFc2gTVmrxQMql5t91uoGzU4Ep0oo98TM7o6akuc%2FPUSqpuSCboPRYzh9DK4uguYhaDHpNQPQzUm7H2AnOYqNcJGyssFNDGFKpNkism1vT5%2BR52Y3eu2vA0j%2BgJwHuC2R2hKfqPsEA317csMUZP%2BGKRz5aSPNVKx2aH2%2FmxnN5JPfXpXbhbFi7Yobf%2FMGr4m6PHpfumydJkIlA0e%2BW1FCSLtqLJfk5zX3oWTXc7e5ktskT9evv7m6FqdWOqdMUoGqk41H4LXBRy%2FMHqb%2FxztQtoLNS8T5XKkyFXi6C5fOe84QWD3HLF1AkZcT22TzplYEWs4xZSXcfzCb1xNL67%2BpKvfcbQzsAmh2C0lcYmhLDHUJqsdw%2BVOTLLUPXv%2FtqzrugOmFCdN2YZ9pq7%2BckheRTkn3wheP1%2B3Uqd8KRI%2FJSPaYbHfakeSCdTos4BFnLdHvc2RuKr9f%2BfofAAAA%2F%2F8BAAD%2F%2F%2F1pIdh3BAAA
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectsootpluglousy.com
FingerprintBC:A3:67:E4:E1:EB:E1:9B:46:20:ED:3B:02:B4:AD:79:AC:B4:FF:8D
ValidityWed, 20 Dec 2023 08:29:33 GMT - Tue, 19 Mar 2024 08:29:32 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2sdVRS%2BY1IXuqoUN25GF6IgLzPvd6wgxhoNjU1tFd3J%2FTUv19yZO9w78%2BYlboIF6c4HriwuJt9LGtQo%2BgdYZFIQKQh5CyEL4x8hlC5lXoNPDwznfOc7A993zv18Lz8jIXJ6euVds6O0pkudRuC%2F9FEYXvbXVZKP%2FFG%2F%2B3G3fdm3w1eXu43gZf9tybfMUjMIgyAMQn9VWRmZ0VJNQqVHy2FjOWi0m42w08bI%2Fh%2B73IOjHsTwjDwDJaaL971LULxCEv94RbqtzKSvvBXnmmbGYigOP0i2ElMkiOdlZD1EyeH5NIw7Wb0HkxzM5MIM%2Fx1kakq8X%2B%2BBJYfnIsGG%2BzOdTEMmYOJpFMMKUldQtAI3t6DECQG4wLUNJPHda8YWdPsxS2t2ShYf%2Fg1VTMnin5eQxD%2BsaDXybxqdZ8okDqOohBpVUIMKaX6MbMeDKo7Bs8%2BgxO9k6eE6knh%2Fw2kDJcqZd6UqqKiClmNQ5yGvP%2BUhjzzkqYdYnPo8DMNeIDgN%2Bsuct0RPsq4IQtqLQhoG3T5yXssbI0vH4HoMbneR2l1sqTFs%2FgvcZgknPLhsSrz3djEUJQpJUDiCghIUiqDICIpheSC0a7ryrtAuZ%2BF5bp7nVjkx2WCPHphsIBMCasd76Rm5WO%2FGu3rnWWzJU1902zJsh%2F0eFc2gTVmrxQMql5t91uoGzU4Ep0oo98TM7o6akuc%2FPUSqpuSCboPRYzh9DK4uguYhaDHpNQPQzUm7H2AnOYqNcJGyssFNDGFKpNkism1vT5%2BR52Y3eu2vA0j%2BgJwHuC2R2hKfqPsEA317csMUZP%2BGKRz5aSPNVKx2aH2%2FmxnN5JPfXpXbhbFi7Yobf%2FMGr4m6PHpfumydJkIlA0e%2BW1FCSLtqLJfk5zX3oWTXc7e5ktskT9evv7m6FqdWOqdMUoGqk41H4LXBRy%2FMHqb%2FxztQtoLNS8T5XKkyFXi6C5fOe84QWD3HLF1AkZcT22TzplYEWs4xZSXcfzCb1xNL67%2BpKvfcbQzsAmh2C0lcYmhLDHUJqsdw%2BVOTLLUPXv%2FtqzrugOmFCdN2YZ9pq7%2BckheRTkn3wheP1%2B3Uqd8KRI%2FJSPaYbHfakeSCdTos4BFnLdHvc2RuKr9f%2BfofAAAA%2F%2F8BAAD%2F%2F%2F1pIdh3BAAA HTTP/1.1
Host: sootpluglousy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 21 Jan 2024 16:13:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 413dea4d4c8b97dc36dccffef8dfac56
Strict-Transport-Security: max-age=0; includeSubdomains
POST prebid-stag.setupad.net/openrtb2/auction
200 OK 225 B URL POST HTTP/2 prebid-stag.setupad.net/openrtb2/auction
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1C:7E:B1:65:38:AD:C4:5D:82:7C:55:E2:FE:28:9C:08:2D:2A:6F:DC
ValidityTue, 11 Apr 2023 00:00:00 GMT - Wed, 10 Apr 2024 23:59:59 GMT
Hash 28934a32ce9b303a8ae3d5237542ae51
df0e84fb65519879b508eaf2c8138f498bca288a
0537a64eb1fb50d6628ede03790ced864a7693eb261b1255ff1b43a99b13b74b
POST /openrtb2/auction HTTP/1.1
Host: prebid-stag.setupad.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 4744
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:16 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://modsfire.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin
x-prebid: pbs-go/0.259.0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sr2exToxd%2FeNaAWs6mv82ESUJgVE0tQpOSt8G5%2B5jJ864iL6cz338g8B%2BIIWRukFMyy%2BlXv6f8xbP45liTZhRZLxUxxDXWOFQLmkiNmNa385gOEXQKnCgYfSetoIQEqJ2DpPkccYeeO9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8490d7ecc9640b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET sootpluglousy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQWskRRSuNlkPelpZvHgZPYiCTLp7Jj0zriDGNRo2btZdRW9SXVUzKVPd1VR1TU%2FiJbgge3PAk4uHzjfJBjWK%2FgAX6SyILAiZg5CD8UcIyx6lZ4OjD5r3vve9hu97rz7fc2ckgKOnV97VO1IpurTc9BsvfRQElxvrMnWjxqgbfRy1LzfM8NVe1PRfbrwt2JZeCv3A9wM%2FaKxKI%2Fp6tFSTkNlRL2j2%2FGY7bAbLbYzM%2F7F1Hiz1wIdn5BlIPl28712CZBXS5Mcrwm7lOnvlrcQpmmuDIT%2F8IN1KdZEimZd946GfHp5PQ9uT1XvQ6cFMLvTw38FYTon36z3E6eG5SMTD%2FZnOWEGkiPnTKIYVhKogaQWmb0HyEwIwjmsbSJO717Qp6PZjltbslCw%2B%2FBuymJLFPy8hTX5YUXLUuKmVy6VOLUb9EnJUQQ4qZO4Y%2BY4HWRyD5Z9B8t%2FJ0sN1pMn%2BhlUakpcz71JWkP0KSoxBrQdXf9KD63twmYeEnzZYEAQdnzPqd3uMtXhHxBH3A9rpBzTwoy4cq%2BWNkWdjMDUGM7vIzC625BjG%2FQK7WcJyDzafEu%2B9XQx5iUIQFJagoASFJChygmJYHnBlQ1ve5cq6ODjP4XlulROdD%2Fbogc4HIiWgZryXnZGL9W68q3eexZY4bfCoLYJ20O1QHvptGrdazKeiF3bjVuSHy31YWULaJ2Z2d%2BSUPP%2FpITI5JRdUGzE9hlXHYPIiqAtAi0kn9EE3J%2B2uj530KNHc9qURTaYTcF0iyxeRb3t76ow8N7vRa38dQLAH5DzATInMlPhE3icYqNuTG7og%2Bzd0YclPG1kuE7lD6%2FvdzGkunvz2qtgutOFrV%2Bz4mzdYTdTl0fvC5us05TIdWPLdiuRcmFVtmCA%2Fr9kPRXzd2c0VZ1KXrV9%2Fc3UtyYywVuq0ApUnG4%2FAaoOPXpg9zMYf70CaCsaVSNxcqdQVWLYLm817VhMYNcdxtoDClRMTxvOmkgRKzDGNS9j%2F4HheTwyt%2F6ay3LO3MTALoPktpEmJoSkxVCWoGsO6pyZ5Zh68%2FttXddxBrBYmsTIL%2B7Ey6sspeRHZlEQXvni8bitPG51Wy6dRbznodKjoxO2w248CTmnYjsIooi3kdiq%2BX%2Fn6HwAAAP%2F%2FAQAA%2F%2F99vfQwdwQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 sootpluglousy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQWskRRSuNlkPelpZvHgZPYiCTLp7Jj0zriDGNRo2btZdRW9SXVUzKVPd1VR1TU%2FiJbgge3PAk4uHzjfJBjWK%2FgAX6SyILAiZg5CD8UcIyx6lZ4OjD5r3vve9hu97rz7fc2ckgKOnV97VO1IpurTc9BsvfRQElxvrMnWjxqgbfRy1LzfM8NVe1PRfbrwt2JZeCv3A9wM%2FaKxKI%2Fp6tFSTkNlRL2j2%2FGY7bAbLbYzM%2F7F1Hiz1wIdn5BlIPl28712CZBXS5Mcrwm7lOnvlrcQpmmuDIT%2F8IN1KdZEimZd946GfHp5PQ9uT1XvQ6cFMLvTw38FYTon36z3E6eG5SMTD%2FZnOWEGkiPnTKIYVhKogaQWmb0HyEwIwjmsbSJO717Qp6PZjltbslCw%2B%2FBuymJLFPy8hTX5YUXLUuKmVy6VOLUb9EnJUQQ4qZO4Y%2BY4HWRyD5Z9B8t%2FJ0sN1pMn%2BhlUakpcz71JWkP0KSoxBrQdXf9KD63twmYeEnzZYEAQdnzPqd3uMtXhHxBH3A9rpBzTwoy4cq%2BWNkWdjMDUGM7vIzC625BjG%2FQK7WcJyDzafEu%2B9XQx5iUIQFJagoASFJChygmJYHnBlQ1ve5cq6ODjP4XlulROdD%2Fbogc4HIiWgZryXnZGL9W68q3eexZY4bfCoLYJ20O1QHvptGrdazKeiF3bjVuSHy31YWULaJ2Z2d%2BSUPP%2FpITI5JRdUGzE9hlXHYPIiqAtAi0kn9EE3J%2B2uj530KNHc9qURTaYTcF0iyxeRb3t76ow8N7vRa38dQLAH5DzATInMlPhE3icYqNuTG7og%2Bzd0YclPG1kuE7lD6%2FvdzGkunvz2qtgutOFrV%2Bz4mzdYTdTl0fvC5us05TIdWPLdiuRcmFVtmCA%2Fr9kPRXzd2c0VZ1KXrV9%2Fc3UtyYywVuq0ApUnG4%2FAaoOPXpg9zMYf70CaCsaVSNxcqdQVWLYLm817VhMYNcdxtoDClRMTxvOmkgRKzDGNS9j%2F4HheTwyt%2F6ay3LO3MTALoPktpEmJoSkxVCWoGsO6pyZ5Zh68%2FttXddxBrBYmsTIL%2B7Ey6sspeRHZlEQXvni8bitPG51Wy6dRbznodKjoxO2w248CTmnYjsIooi3kdiq%2BX%2Fn6HwAAAP%2F%2FAQAA%2F%2F99vfQwdwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectsootpluglousy.com
FingerprintBC:A3:67:E4:E1:EB:E1:9B:46:20:ED:3B:02:B4:AD:79:AC:B4:FF:8D
ValidityWed, 20 Dec 2023 08:29:33 GMT - Tue, 19 Mar 2024 08:29:32 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQWskRRSuNlkPelpZvHgZPYiCTLp7Jj0zriDGNRo2btZdRW9SXVUzKVPd1VR1TU%2FiJbgge3PAk4uHzjfJBjWK%2FgAX6SyILAiZg5CD8UcIyx6lZ4OjD5r3vve9hu97rz7fc2ckgKOnV97VO1IpurTc9BsvfRQElxvrMnWjxqgbfRy1LzfM8NVe1PRfbrwt2JZeCv3A9wM%2FaKxKI%2Fp6tFSTkNlRL2j2%2FGY7bAbLbYzM%2F7F1Hiz1wIdn5BlIPl28712CZBXS5Mcrwm7lOnvlrcQpmmuDIT%2F8IN1KdZEimZd946GfHp5PQ9uT1XvQ6cFMLvTw38FYTon36z3E6eG5SMTD%2FZnOWEGkiPnTKIYVhKogaQWmb0HyEwIwjmsbSJO717Qp6PZjltbslCw%2B%2FBuymJLFPy8hTX5YUXLUuKmVy6VOLUb9EnJUQQ4qZO4Y%2BY4HWRyD5Z9B8t%2FJ0sN1pMn%2BhlUakpcz71JWkP0KSoxBrQdXf9KD63twmYeEnzZYEAQdnzPqd3uMtXhHxBH3A9rpBzTwoy4cq%2BWNkWdjMDUGM7vIzC625BjG%2FQK7WcJyDzafEu%2B9XQx5iUIQFJagoASFJChygmJYHnBlQ1ve5cq6ODjP4XlulROdD%2Fbogc4HIiWgZryXnZGL9W68q3eexZY4bfCoLYJ20O1QHvptGrdazKeiF3bjVuSHy31YWULaJ2Z2d%2BSUPP%2FpITI5JRdUGzE9hlXHYPIiqAtAi0kn9EE3J%2B2uj530KNHc9qURTaYTcF0iyxeRb3t76ow8N7vRa38dQLAH5DzATInMlPhE3icYqNuTG7og%2Bzd0YclPG1kuE7lD6%2FvdzGkunvz2qtgutOFrV%2Bz4mzdYTdTl0fvC5us05TIdWPLdiuRcmFVtmCA%2Fr9kPRXzd2c0VZ1KXrV9%2Fc3UtyYywVuq0ApUnG4%2FAaoOPXpg9zMYf70CaCsaVSNxcqdQVWLYLm817VhMYNcdxtoDClRMTxvOmkgRKzDGNS9j%2F4HheTwyt%2F6ay3LO3MTALoPktpEmJoSkxVCWoGsO6pyZ5Zh68%2FttXddxBrBYmsTIL%2B7Ey6sspeRHZlEQXvni8bitPG51Wy6dRbznodKjoxO2w248CTmnYjsIooi3kdiq%2BX%2Fn6HwAAAP%2F%2FAQAA%2F%2F99vfQwdwQAAA%3D%3D HTTP/1.1
Host: sootpluglousy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 21 Jan 2024 16:13:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 000b1b0f7f6b4ede31a5ed5f40edaf2f
Strict-Transport-Security: max-age=0; includeSubdomains
GET sootpluglousy.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2sk1Rd99Uvmt9DV6ODGTetCFKRT1f%2FjCGLMRMLEyTij6E7ev%2Bo886pe8V69rk7cBAdkdja4cnBROZ1MUKPoB3CQzoDIgJDeZWH8EMIwS6k22HqhuPfccwvOufd9tu%2FPSQRPz1bfMbtKa7rUroe1lz%2BMoqu1DZX6YW3Y63zUaV2t2cFry516%2BErtbcm3zVIjjMIwCqPamrIyNsOlioTKjpej%2BnJYbzXqUbuFof0vdj6AowHE4Jw8AyWmiw%2BDK1B8gjT5YVW67dxkr15LvKa5sRiIo%2FfT7dQUKZJ5GdsAcXp0MQ3jTtcewKSHM7kwg38GmZqS4JcHYOnRhUiwwcFMJ9OQKZh4GsVgAqknUHQCbu5AiVMCcIEbm0iT%2BzeMLejO3yyt2ClZfPwnVDEli79fQZp8v6LVsHbbaJ8rkzoM4xJqOIHqT5D5E%2BS7AVRxAp5%2FCiV%2BI0uPN5AmB5tOGyhRzrwrNYGKJ9ByBOoC%2BOpTAXwcwGcBEnFW41EUdUPBadhb5rwpupJ1RBjRbhzRKOz04Hklb4Q8G4HrEbjdQ2b3sK1GsP5nuK0STgRw%2BZQE7%2B5hIEoUkqBwBAUlKBRBkRMUg%2FJQaNdw5X2hnWfRRW5c5GY5Nnl%2Fnx6avC9TAmpH%2B9k5uVztJrh%2B7zlsy7Oa6LRk1Ip6XSoaYYuyZpOHVC43eqzZCRvtGE6VUO5%2FM7u7akpe%2BOQImZqSS7oFRk%2Fg9Am4ugzqI9Bi3G2EoFvjVi%2FEbnqcGOFiZWWdmwTClMjyReQ7wb4%2BJ8%2FPbvQSMkj%2BiFwEuC2R2RIfq4cEfX13fMsU5OCWKRz5cTPLVaJ2aXW%2F2znN5f%2B%2FuS53CmPF%2Bqobff0mr4iqPH5PunyDpkKlfUe%2BXVFCSLtmLJfkp3X3gWQ3vdta8Tb12cbNt9bWk8xK55RJJ6DqdPMJeGXwyYuzh%2FnstRMoO4H1JRI%2FV6rMBDzbg8vmPWcIrJ5jlgUofDm2DTZvakWg5RxTVsL9C7N5Pba0%2Bpuqct%2FdRd8ugOZ3kCYlBrbEQJegegTnnxrnmX30xq9fVnEPTC%2BMmbYLB0xb%2FcVsyVPSufT5lLz%2BxyGcOqs1Q9FlMpZdJlvtViy5YO02C3nMWVP0ehy5m8rvVr76CwAA%2F%2F8BAAD%2F%2F3dF3Xl3BAAA
200 OK 7 B URL GET HTTP/1.1 sootpluglousy.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2sk1Rd99Uvmt9DV6ODGTetCFKRT1f%2FjCGLMRMLEyTij6E7ev%2Bo886pe8V69rk7cBAdkdja4cnBROZ1MUKPoB3CQzoDIgJDeZWH8EMIwS6k22HqhuPfccwvOufd9tu%2FPSQRPz1bfMbtKa7rUroe1lz%2BMoqu1DZX6YW3Y63zUaV2t2cFry516%2BErtbcm3zVIjjMIwCqPamrIyNsOlioTKjpej%2BnJYbzXqUbuFof0vdj6AowHE4Jw8AyWmiw%2BDK1B8gjT5YVW67dxkr15LvKa5sRiIo%2FfT7dQUKZJ5GdsAcXp0MQ3jTtcewKSHM7kwg38GmZqS4JcHYOnRhUiwwcFMJ9OQKZh4GsVgAqknUHQCbu5AiVMCcIEbm0iT%2BzeMLejO3yyt2ClZfPwnVDEli79fQZp8v6LVsHbbaJ8rkzoM4xJqOIHqT5D5E%2BS7AVRxAp5%2FCiV%2BI0uPN5AmB5tOGyhRzrwrNYGKJ9ByBOoC%2BOpTAXwcwGcBEnFW41EUdUPBadhb5rwpupJ1RBjRbhzRKOz04Hklb4Q8G4HrEbjdQ2b3sK1GsP5nuK0STgRw%2BZQE7%2B5hIEoUkqBwBAUlKBRBkRMUg%2FJQaNdw5X2hnWfRRW5c5GY5Nnl%2Fnx6avC9TAmpH%2B9k5uVztJrh%2B7zlsy7Oa6LRk1Ip6XSoaYYuyZpOHVC43eqzZCRvtGE6VUO5%2FM7u7akpe%2BOQImZqSS7oFRk%2Fg9Am4ugzqI9Bi3G2EoFvjVi%2FEbnqcGOFiZWWdmwTClMjyReQ7wb4%2BJ8%2FPbvQSMkj%2BiFwEuC2R2RIfq4cEfX13fMsU5OCWKRz5cTPLVaJ2aXW%2F2znN5f%2B%2FuS53CmPF%2Bqobff0mr4iqPH5PunyDpkKlfUe%2BXVFCSLtmLJfkp3X3gWQ3vdta8Tb12cbNt9bWk8xK55RJJ6DqdPMJeGXwyYuzh%2FnstRMoO4H1JRI%2FV6rMBDzbg8vmPWcIrJ5jlgUofDm2DTZvakWg5RxTVsL9C7N5Pba0%2Bpuqct%2FdRd8ugOZ3kCYlBrbEQJegegTnnxrnmX30xq9fVnEPTC%2BMmbYLB0xb%2FcVsyVPSufT5lLz%2BxyGcOqs1Q9FlMpZdJlvtViy5YO02C3nMWVP0ehy5m8rvVr76CwAA%2F%2F8BAAD%2F%2F3dF3Xl3BAAA
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectsootpluglousy.com
FingerprintBC:A3:67:E4:E1:EB:E1:9B:46:20:ED:3B:02:B4:AD:79:AC:B4:FF:8D
ValidityWed, 20 Dec 2023 08:29:33 GMT - Tue, 19 Mar 2024 08:29:32 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RST2sk1Rd99Uvmt9DV6ODGTetCFKRT1f%2FjCGLMRMLEyTij6E7ev%2Bo886pe8V69rk7cBAdkdja4cnBROZ1MUKPoB3CQzoDIgJDeZWH8EMIwS6k22HqhuPfccwvOufd9tu%2FPSQRPz1bfMbtKa7rUroe1lz%2BMoqu1DZX6YW3Y63zUaV2t2cFry516%2BErtbcm3zVIjjMIwCqPamrIyNsOlioTKjpej%2BnJYbzXqUbuFof0vdj6AowHE4Jw8AyWmiw%2BDK1B8gjT5YVW67dxkr15LvKa5sRiIo%2FfT7dQUKZJ5GdsAcXp0MQ3jTtcewKSHM7kwg38GmZqS4JcHYOnRhUiwwcFMJ9OQKZh4GsVgAqknUHQCbu5AiVMCcIEbm0iT%2BzeMLejO3yyt2ClZfPwnVDEli79fQZp8v6LVsHbbaJ8rkzoM4xJqOIHqT5D5E%2BS7AVRxAp5%2FCiV%2BI0uPN5AmB5tOGyhRzrwrNYGKJ9ByBOoC%2BOpTAXwcwGcBEnFW41EUdUPBadhb5rwpupJ1RBjRbhzRKOz04Hklb4Q8G4HrEbjdQ2b3sK1GsP5nuK0STgRw%2BZQE7%2B5hIEoUkqBwBAUlKBRBkRMUg%2FJQaNdw5X2hnWfRRW5c5GY5Nnl%2Fnx6avC9TAmpH%2B9k5uVztJrh%2B7zlsy7Oa6LRk1Ip6XSoaYYuyZpOHVC43eqzZCRvtGE6VUO5%2FM7u7akpe%2BOQImZqSS7oFRk%2Fg9Am4ugzqI9Bi3G2EoFvjVi%2FEbnqcGOFiZWWdmwTClMjyReQ7wb4%2BJ8%2FPbvQSMkj%2BiFwEuC2R2RIfq4cEfX13fMsU5OCWKRz5cTPLVaJ2aXW%2F2znN5f%2B%2FuS53CmPF%2Bqobff0mr4iqPH5PunyDpkKlfUe%2BXVFCSLtmLJfkp3X3gWQ3vdta8Tb12cbNt9bWk8xK55RJJ6DqdPMJeGXwyYuzh%2FnstRMoO4H1JRI%2FV6rMBDzbg8vmPWcIrJ5jlgUofDm2DTZvakWg5RxTVsL9C7N5Pba0%2Bpuqct%2FdRd8ugOZ3kCYlBrbEQJegegTnnxrnmX30xq9fVnEPTC%2BMmbYLB0xb%2FcVsyVPSufT5lLz%2BxyGcOqs1Q9FlMpZdJlvtViy5YO02C3nMWVP0ehy5m8rvVr76CwAA%2F%2F8BAAD%2F%2F3dF3Xl3BAAA HTTP/1.1
Host: sootpluglousy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 21 Jan 2024 16:13:17 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6bdf2010ccd3ddf10afd672e4d5a925c
Strict-Transport-Security: max-age=0; includeSubdomains
GET modsfire.com/favicon-16x16.png
200 OK 672 B URL GET HTTP/2 modsfire.com/favicon-16x16.png
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 1dd2f51843db7a8173b5490522bc3c4d
146eb086f14b9b6a67fae939fc30dbb81aeae508
e0b33388814b903792197d33f6648c97b53a9b944bf24eaec3ad2bdbed77cbb6
GET /favicon-16x16.png HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/dI90LxHm0U9LN5B
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D; _ga_JXQKZFEW04=GS1.1.1705853595.1.0.1705853595.0.0.0; _ga=GA1.1.1726846736.1705853596; stpdOrigin={"origin":"direct"}; cf_clearance=oZirp51bMpGhH6H6OqNMbq12JhFlMUr0jIzy6YQfI6Y-1705853595-1-Ae18Kv/OfsPyT5/zEf9jZoc0fStOBGrVISG44eYVP7JwaONsQ3tEh8Vv+5HOMJTOeZFUD6QcR7xWX5ay1L394AI=; _pbjs_userid_consent_data=6683316680106290; dom3ic8zudi28v8lr6fgphwffqoz0j6c=0d85b983-4aca-43f2-b503-3920b0037641%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=stitchalmond.com; pp_idelay_f284a3ef401042c6af78ccfc62011d16=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:17 GMT
content-type: image/png
content-length: 672
last-modified: Mon, 04 Sep 2023 11:42:03 GMT
etag: "64f5c28b-2a0"
expires: Sun, 31 Dec 2023 03:34:47 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2093302
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QKYbWI8UaMQ0lw%2FSIcxrHD0HaioMmqVUDfajHypjlbP%2BzzH6S7cylZ8NPfAkzua2IahRxmb4rN4PhhZ2%2F%2Fl54TnVymE4KVjY33UakILeawWBRQsMf%2BSUAGgJ%2BPl7Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7f5dfe7568f-OSL
X-Firefox-Spdy: h2
GET modsfire.com/apple-touch-icon.png
200 OK 12 kB URL GET HTTP/2 modsfire.com/apple-touch-icon.png
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Hash f27adf134e5044768641c4a7d98768bf
cf73c38afc7b3f22b2f39b3bff944f5de183f4d6
0ad2cf4ee8b7279795668422b8e6778164d985bd909f52a712bb69953faaa827
GET /apple-touch-icon.png HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/dI90LxHm0U9LN5B
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D; _ga_JXQKZFEW04=GS1.1.1705853595.1.0.1705853595.0.0.0; _ga=GA1.1.1726846736.1705853596; stpdOrigin={"origin":"direct"}; cf_clearance=oZirp51bMpGhH6H6OqNMbq12JhFlMUr0jIzy6YQfI6Y-1705853595-1-Ae18Kv/OfsPyT5/zEf9jZoc0fStOBGrVISG44eYVP7JwaONsQ3tEh8Vv+5HOMJTOeZFUD6QcR7xWX5ay1L394AI=; _pbjs_userid_consent_data=6683316680106290; dom3ic8zudi28v8lr6fgphwffqoz0j6c=0d85b983-4aca-43f2-b503-3920b0037641%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=stitchalmond.com; pp_idelay_f284a3ef401042c6af78ccfc62011d16=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:17 GMT
content-type: image/png
content-length: 12464
last-modified: Mon, 04 Sep 2023 11:42:03 GMT
etag: "64f5c28b-30b0"
expires: Sat, 30 Dec 2023 07:34:38 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2543376
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VkFf1Mf%2FbECNzfeGN%2BZ5R0W4KDTx6wH3fcMcFR6nnHXPlj4iUFc09cosWGzFDdAtnxFmKUDSEKQjnroaB%2BI7hxXz7zZPzsGLEe2yk%2FVxkTkn64KgHfBWLcEQky%2BUxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7f5dfe4568f-OSL
X-Firefox-Spdy: h2
GET unseenreport.com/pxf.gif?uuid=0d85b983-4aca-43f2-b503-3920b0037641&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=f284a3ef401042c6af78ccfc62011d16&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=16
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=0d85b983-4aca-43f2-b503-3920b0037641&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=f284a3ef401042c6af78ccfc62011d16&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=16
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint18:C3:E7:4B:C5:EA:23:FC:38:62:D0:43:31:B5:79:2E:62:86:60:9E
ValiditySun, 21 Jan 2024 08:27:47 GMT - Sat, 20 Apr 2024 08:27:46 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=0d85b983-4aca-43f2-b503-3920b0037641&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=f284a3ef401042c6af78ccfc62011d16&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=16 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 21 Jan 2024 16:13:17 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c2a47121a26de2d966f1b215a47e5a44
Strict-Transport-Security: max-age=0; includeSubdomains
GET prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
204 No Content 0 B URL GET HTTP/2 prebid.a-mo.net/isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid=
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subject*.a-mo.net
Fingerprint7D:D8:F5:1F:F9:CA:FD:EA:BC:CA:C5:50:47:C2:2D:B6:AC:B4:6A:80
ValiditySat, 06 Jan 2024 12:50:19 GMT - Fri, 05 Apr 2024 12:50:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /isyn?gdpr_consent=&gdpr=0&us_privacy=&gpp=&gpp_sid= HTTP/1.1
Host: prebid.a-mo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Cookie: _Amc_b=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: max-age=0, private, must-revalidate
date: Sun, 21 Jan 2024 16:13:18 GMT
server: envoy
set-cookie: _Amc_b=0; path=/; expires=Sun, 21 Jan 2024 16:18:19 GMT; max-age=300; secure; HttpOnly; SameSite=None
x-envoy-upstream-service-time: 0
vary: Accept-Encoding
X-Firefox-Spdy: h2
GET as.ck-ie.com/prebid.gif?limit=50&redir=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dsmartyads%26uid%3D%5BUID%5D
204 No Content 0 B URL GET HTTP/1.1 as.ck-ie.com/prebid.gif?limit=50&redir=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dsmartyads%26uid%3D%5BUID%5D
IP
Requested by https://adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
Certificate IssuerGoDaddy.com, Inc.
Subjectck-ie.com
FingerprintE2:38:83:30:41:32:56:06:26:62:92:8D:8A:A2:7F:C4:D5:66:B3:D8
ValiditySun, 12 Nov 2023 11:51:46 GMT - Fri, 13 Dec 2024 11:51:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /prebid.gif?limit=50&redir=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dsmartyads%26uid%3D%5BUID%5D HTTP/1.1
Host: as.ck-ie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adxbid.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Content-Type: text/plain
Date: Sun, 21 Jan 2024 16:13:19 GMT
Connection: keep-alive
GET user-sync.adxpremium.services/setuid?bidder=vidoomy&uid=7b9c6871c64c0dd6bcb9b452885243b8
200 OK 86 B URL GET HTTP/1.1 user-sync.adxpremium.services/setuid?bidder=vidoomy&uid=7b9c6871c64c0dd6bcb9b452885243b8
IP
Requested by https://adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
Certificate IssuerSectigo Limited
Subject*.adxpremium.services
Fingerprint6A:EC:8D:6D:B8:F1:05:0D:4F:DE:C3:4E:4B:BA:17:D7:AA:67:4F:CC
ValidityTue, 11 Jul 2023 00:00:00 GMT - Mon, 05 Aug 2024 23:59:59 GMT
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Hash 6c6641b08f4be6f479f1588af08054b3
8da28b3146834c48fd843b108749191516d2a65d
c2ecff291918a3caf0b7e470323e89f2a1f05b92e12a10649e598cacebe62acf
GET /setuid?bidder=vidoomy&uid=7b9c6871c64c0dd6bcb9b452885243b8 HTTP/1.1
Host: user-sync.adxpremium.services
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vid.vidoomy.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
content-length: 86
content-type: image/png
set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJ2aWRvb215Ijp7InVpZCI6IjdiOWM2ODcxYzY0YzBkZDZiY2I5YjQ1Mjg4NTI0M2I4IiwiZXhwaXJlcyI6IjIwMjQtMDItMDRUMTc6MTM6MjQuNTU1MzI0MTIrMDE6MDAifX0sImJkYXkiOiIyMDI0LTAxLTIxVDE3OjEzOjI0LjU1NTMyMzQ0NSswMTowMCJ9; Path=/; Domain=adxpremium.services; Expires=Sat, 20 Apr 2024 16:13:24 GMT
date: Sun, 21 Jan 2024 16:13:24 GMT
GET modsfire.com/alt/assets/css/style.css
200 OK 27 kB URL GET HTTP/2 modsfire.com/alt/assets/css/style.css
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type assembler source, ASCII text, with very long lines (319), with CRLF line terminators
Hash 1000ba279e56f46d771fe396824b9f54
601c636ac73e53af62d16407dffe8e10838d4ec6
73d75c4bf927c7f169c308ab25adc01d15f496ea301021424dca65c928c5cb5a
GET /alt/assets/css/style.css HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/dI90LxHm0U9LN5B
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: text/css
last-modified: Mon, 13 Feb 2023 12:01:42 GMT
etag: W/"63ea26a6-67e3"
expires: Sat, 13 Jan 2024 08:05:11 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2197048
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EeoZiRjJDJhL3hYgIxTdZVL%2FRQEkqVu9yGybjqMNFNWys8HLIt10JLByD9FzXaph4h8yYFVipbwD8lLksHOmeOOz92HP54%2BSB7VR8IzxBzjMgdwCXJX2%2FJ4c8iJa%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e48a37568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
200 OK 33 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint59:56:55:62:78:0C:21:25:FB:11:29:98:6E:A8:21:EF:64:2B:33:C0
ValidityMon, 11 Dec 2023 08:09:11 GMT - Mon, 04 Mar 2024 08:09:10 GMT
Hash 27960c7510d0fa56825d8579241390cb
2b2c7c341656533e932fe48b3e8ca621d1fcae95
ff9a2be960794ffc4738368eeec7262cd5bf70316287f8d2f0c3790170cf1277
GET /css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 21 Jan 2024 16:13:14 GMT
date: Sun, 21 Jan 2024 16:13:14 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET vid.vidoomy.com/sync?limit=50&redirect=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dvidoomy%26uid%3D%7B%7BVID%7D%7D
200 OK 50 kB URL GET HTTP/2 vid.vidoomy.com/sync?limit=50&redirect=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dvidoomy%26uid%3D%7B%7BVID%7D%7D
IP
ASN #60068 Datacamp Limited
Requested by https://adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
Certificate IssuerSectigo Limited
Subject*.vidoomy.com
Fingerprint18:AF:A3:4C:BA:C9:5B:1A:FC:8B:1D:B0:76:50:FE:2F:8A:44:59:F3
ValidityWed, 06 Sep 2023 00:00:00 GMT - Sun, 06 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?limit=50&redirect=https%3A%2F%2Fuser-sync.adxpremium.services%2Fsetuid%3Fbidder%3Dvidoomy%26uid%3D%7B%7BVID%7D%7D HTTP/1.1
Host: vid.vidoomy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adxbid.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:20 GMT
content-type: text/html
vary: Accept-Encoding, Accept-Encoding
last-modified: Tue, 12 Dec 2023 09:09:26 GMT
x-rgw-object-type: Normal
etag: W/"a9290c6b5f8c75ebc321b414a16a5c2a"
x-amz-storage-class: STANDARD
x-amz-request-id: tx0000065019b5b84f86acc-006579900f-2bb0e51-prg
x-77-nzt: BLlMCQ03Nzf/hVUEALlMCgk3Nzf/CgAAANRmOBE3NzehbT1aAotn3wA
x-77-nzt-ray: c0a4cc28e1b42311a042ad6517691e04
x-77-cache: HIT
content-encoding: gzip
x-accel-expires: @1705929873
x-accel-date: 1705569563
x-77-age: 284047
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 10, 284037
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
GET modsfire.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/c8377512/main.js
200 OK 7.3 kB URL GET HTTP/2 modsfire.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/c8377512/main.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (7332), with no line terminators
Hash c82b59562c17588fbcd1e54e9778c2cf
a98e5c2e5a0177ac30c2f7a23a3b98abd8fb1bb5
f124fb4e0125162dec987983dd32068832829314eb335a31262c9363887e596c
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/c8377512/main.js HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D; _ga_JXQKZFEW04=GS1.1.1705853595.1.0.1705853595.0.0.0; _ga=GA1.1.1726846736.1705853596; stpdOrigin={"origin":"direct"}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:15 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
cache-control: max-age=14400, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j%2BqVNKYVqX1DozQrhx%2FlY%2BhxLs%2F1l2t3DMd6dPJ4a1x8tDWoD6DvgWxKErx7eT38uvuCltCObz3PVbq48SabzYirDSJObTaddstcuTLiO6GdMxFLR%2BdaB5p1kapbRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8490d7ea4beb568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
200 OK 7.6 kB URL GET HTTP/2 adxbid.info/sync-all.html?gdpr=0&gdpr_consent=&us_privacy=
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectadxbid.info
Fingerprint43:69:D9:4B:D6:AF:4A:B0:F2:19:AB:96:90:3A:3C:B5:37:05:DC:5A
ValidityTue, 05 Dec 2023 10:10:14 GMT - Mon, 04 Mar 2024 10:10:13 GMT
File type JavaScript source, ASCII text, with very long lines (7802), with no line terminators
Hash 19e5d2a921cb42c1e44ad5f2887a9789
d3d56184beff66da97462003a5f1953aa7430c33
3be8cd3735aa9dacb03195d96d23877ed360dc9e3ffaaa73e1973969f5070029
GET /sync-all.html?gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1
Host: adxbid.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:19 GMT
content-type: text/html; charset=utf-8
last-modified: Thu, 26 Jan 2023 09:50:58 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q3M1FV4DjFfvg3JI3D2ZvVCQWI3l4QVZw2clEB4R2TGCAoyL%2F6BpmFX9QG9TfMX02F2JiHLVRg0gTupOckP79kFGF4vd9Mq1Nmu1uXFsJW1qvup8R%2BltQII2Gn%2F0Ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8490d802cb60b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET modsfire.com/alt/assets/css/responsive-style.css
200 OK 11 kB URL GET HTTP/2 modsfire.com/alt/assets/css/responsive-style.css
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash f9484827e3ea8697e565a251b36712d1
ba3c0296825ef693d24b6841634a5d700ee56a8d
18072674818545e618a44ff38eb715bb9ab4971bf9505ec17fb8270c6a4c34a7
GET /alt/assets/css/responsive-style.css HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/dI90LxHm0U9LN5B
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: text/css
last-modified: Wed, 08 Nov 2023 10:55:08 GMT
etag: W/"654b690c-2a37"
expires: Sun, 28 Jan 2024 07:10:37 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 51824
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ZMEy6IYjaDjVDn19d2wus0Kz7x%2Bpp0184pTMNJNjRuQG3XWvk%2FfQ819hrczb69rKJsPcErmstbUDhNhgKIbhYGjhVhcibwGBchG5L7dmllDvtE7Jxbe7TpdYKefqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e48a3d568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET superlativefireman.com/pixel/purst?dl=0&th=0&sc=0&rs=2499&rd=2499&fd=514&bv=24.1.v.6&tmpl=136
200 OK 0 B URL GET HTTP/1.1 superlativefireman.com/pixel/purst?dl=0&th=0&sc=0&rs=2499&rd=2499&fd=514&bv=24.1.v.6&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectsuperlativefireman.com
Fingerprint10:AF:52:01:4E:A8:44:20:93:2F:37:2D:B3:2C:9A:FF:1E:FC:72:F0
ValidityWed, 17 Jan 2024 10:05:50 GMT - Tue, 16 Apr 2024 10:05:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2499&rd=2499&fd=514&bv=24.1.v.6&tmpl=136 HTTP/1.1
Host: superlativefireman.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 21 Jan 2024 16:13:16 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
GET stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 31 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: dd809c84048d5afa8e77adc8acacd559
cdn-cache: HIT
cf-cache-status: HIT
age: 5227769
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8490d7e49c617127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET api.btloader.com/mw/state?bt_env=prod
204 No Content 0 B URL GET HTTP/2 api.btloader.com/mw/state?bt_env=prod
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectapi.btloader.com
Fingerprint1C:C5:7B:C6:D2:A6:1B:8A:77:75:C5:FF:E7:32:76:55:8A:51:55:63
ValidityFri, 08 Dec 2023 16:48:47 GMT - Thu, 07 Mar 2024 17:42:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mw/state?bt_env=prod HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://modsfire.com/
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: *
vary: Origin
date: Sun, 21 Jan 2024 16:13:15 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET modsfire.com/alt/assets/css/dw.css?751
200 OK 2.8 kB URL GET HTTP/2 modsfire.com/alt/assets/css/dw.css?751
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (2845), with no line terminators
Hash 03adcfe8d0a9e9dfa36d90ee93b2c7b3
2e3e57f05ad34084833af7a8d62f6f20364b1f46
213f0b13edb8df8cb020abf1144c263dd3644426c4f7b8dd9e89f934a267e2ad
GET /alt/assets/css/dw.css?751 HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/dI90LxHm0U9LN5B
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: text/css
last-modified: Fri, 30 Jun 2023 11:20:41 GMT
etag: W/"649eba89-b19"
expires: Fri, 29 Dec 2023 02:03:28 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 2467278
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ObmVRPIJ63iBpwtlXku2N34zmHNZyZywSHvmqrvr356OwMAeatC%2FYw7S8wC9IWaAGnsc9vNNUMbGV0QJMFkaGmS1M9mWSCMCQ92QYPastOYA9nvImtyGXCGoqjPh%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e48a42568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET ad-delivery.net/px.gif?ch=2
200 OK 43 B URL GET HTTP/2 ad-delivery.net/px.gif?ch=2
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectad-delivery.net
Fingerprint34:A0:99:E5:AA:C6:1A:63:22:B7:FB:C7:64:85:73:B2:0E:77:D5:B9
ValiditySat, 20 Jan 2024 00:33:53 GMT - Fri, 19 Apr 2024 00:33:52 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:15 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPp0wgCF-V8nWRRFweDLkLlZ59B9_HaB5uMb_BoI2XEvFDluZgJZMS-L6RsjtVqwyDwhSyI
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Sun, 24 Dec 2023 04:48:35 GMT
cache-control: public, max-age=86400
age: 2463880
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NRTN1iZ%2FE0DyaqO%2F9rQ2kBms2AZmlCpi6OI6E%2BfbYO0nmM%2BJXGwub%2FQw8hDJoDAmKa7ipk%2BSBoYdJ9DfAy9Zoq3jCgwAh2HV06jfc4a8M%2BfEmmnjFmeguyKZrFBRsoZbuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e92d72712b-OSL
X-Firefox-Spdy: h2
GET cmp.setupcmp.com/cmp/cmp/cmp-stub.js
200 OK 1.0 kB URL GET HTTP/2 cmp.setupcmp.com/cmp/cmp/cmp-stub.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectsetupcmp.com
Fingerprint4C:36:AA:0E:4E:BE:1E:86:1C:5C:E2:35:5F:23:25:B4:51:42:6A:73
ValidityTue, 26 Dec 2023 15:31:33 GMT - Mon, 25 Mar 2024 15:31:32 GMT
File type JavaScript source, ASCII text, with very long lines (1052), with no line terminators
Hash 906f1d6ecea594f407cd8ed5759a072a
12ce19aa45a975771c287b109f60abd049da1c46
fdc4c7109f25bc0468125638c2cc90dbc13a8f8f82a5de4a2b3013c6039beda2
GET /cmp/cmp/cmp-stub.js HTTP/1.1
Host: cmp.setupcmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:14 GMT
content-type: text/javascript
content-md5: 3jfo58Cotbsu8TxBvJOgIw==
last-modified: Tue, 28 Nov 2023 10:43:06 GMT
x-ms-request-id: 1d9f291c-701e-002c-01b6-2d9fa9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: country
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 4719
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=goKGuRKwYkelCAhqT%2B3lvbWRquuY9qcCvSSdRFXwHXY5tfs%2BV4VTW2ajRPqmHPlGvTZor7IA4CIpctKMqaL1UpwHQD6I6J7YI25kmVp8g7tRHUS5mWFqmSjbScH3VmYzDgo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e66b8d0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET sootpluglousy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxReu3mR%2F8NPTyuJFD%2BNFFGTS3TPpmXEFMcZI2LhZdxW9SXVXzeSZ6q6mqnt6Ei%2FBBdmbA55cPHS%2BSTaoUfQPcJHOgsiCkL7lYLx6FxaPMmNw9EHzvu99r%2BF779Un%2B%2Fk585Dzs9W39C4pxZeWm27jhfc971pjg5J81Bh1gw%2BC9rWGGb7cC5rui403ZbStl3zXc13P9RprZGRfj5amIig97nnNntts%2B01vuY2R%2BS%2B3uQPLHYjhOXsKJOrFh85VUFQhib9blXY70%2BlLb8S54pk2GIqjd5PtRBcJ4jnsGwf95OiiG9qerj2ATg5ndqGH%2FzSGVDPnpwcIk6MLkwiHBzOfoYJMEIonUQwrSFWBeIVI3wGJUwZEAjc2kcT3b2hT8J2%2FVT5Va7b4%2BA9QUbPFX68iib9dUTRq3NYqz0gnFqN%2BCRpVoEGFND9BtuuAihNE2ccg8QtberyBJD7YtEqDRDmbnagC9SsoOQa3DvLpRw7yvoM8dRCLs0bkeV7HFRF3u70oaomODAPherzT97jnBl3k0dTeGFk6RqTGiMweUrOHbRrD5D%2FCbpWwwoHNaua8vYehKFFIhsIyFJyhIIYiYyiG5aFQ1rflfaFsHnoX2b%2FIrXKis8E%2BP9TZQCYM3Iz303N2Zbob5%2Fq9p7EtzxoiaEuv7XU7XPhum4etVuRy2fO7YStw%2FeU%2BLJUge2k27i7V7LmPjpBSzS6rNkJ%2BAqtOENEV8NwDLyYd3wXfmrS7LnaT41gL2ycjm5GOIXSJNFtEtuPsq3P2zOxGweVPIaNH7CIQmRKpKfEhPWQYqLuTW7pgB7d0Ydn3m2lGMe3y6f1uZzyT%2F%2FvqutwptBHrq3b85WvRVJjC43ekzTZ4IigZWPb1CgkhzZo2kWQ%2FrNv3ZHgzt1sruUnydOPm62vrcWqktaSTCpxON%2F9ERDX7f%2Fr77GE%2Bu9kCmQomLxHnc6ekK0TpHmw6r1nNYNSch%2BklFHk5MX44LypiUHLOeVjC%2FouHczwxfPo3p3Lf3sXALIBnd5DEJYamxFCV4GoMmz8xyVLz6NWfP5%2FGPYRqYRIqs3AQKqM%2Bq9nzSGebrtkrvx3C0lmj02q5POgte50Ol52w7Xf7gSc499uBHwS8hczW8puVL%2F4CAAD%2F%2FwEAAP%2F%2FG6nti3cEAAA%3D
200 OK 0 B URL GET HTTP/1.1 sootpluglousy.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxReu3mR%2F8NPTyuJFD%2BNFFGTS3TPpmXEFMcZI2LhZdxW9SXVXzeSZ6q6mqnt6Ei%2FBBdmbA55cPHS%2BSTaoUfQPcJHOgsiCkL7lYLx6FxaPMmNw9EHzvu99r%2BF779Un%2B%2Fk585Dzs9W39C4pxZeWm27jhfc971pjg5J81Bh1gw%2BC9rWGGb7cC5rui403ZbStl3zXc13P9RprZGRfj5amIig97nnNntts%2B01vuY2R%2BS%2B3uQPLHYjhOXsKJOrFh85VUFQhib9blXY70%2BlLb8S54pk2GIqjd5PtRBcJ4jnsGwf95OiiG9qerj2ATg5ndqGH%2FzSGVDPnpwcIk6MLkwiHBzOfoYJMEIonUQwrSFWBeIVI3wGJUwZEAjc2kcT3b2hT8J2%2FVT5Va7b4%2BA9QUbPFX68iib9dUTRq3NYqz0gnFqN%2BCRpVoEGFND9BtuuAihNE2ccg8QtberyBJD7YtEqDRDmbnagC9SsoOQa3DvLpRw7yvoM8dRCLs0bkeV7HFRF3u70oaomODAPherzT97jnBl3k0dTeGFk6RqTGiMweUrOHbRrD5D%2FCbpWwwoHNaua8vYehKFFIhsIyFJyhIIYiYyiG5aFQ1rflfaFsHnoX2b%2FIrXKis8E%2BP9TZQCYM3Iz303N2Zbob5%2Fq9p7EtzxoiaEuv7XU7XPhum4etVuRy2fO7YStw%2FeU%2BLJUge2k27i7V7LmPjpBSzS6rNkJ%2BAqtOENEV8NwDLyYd3wXfmrS7LnaT41gL2ycjm5GOIXSJNFtEtuPsq3P2zOxGweVPIaNH7CIQmRKpKfEhPWQYqLuTW7pgB7d0Ydn3m2lGMe3y6f1uZzyT%2F%2FvqutwptBHrq3b85WvRVJjC43ekzTZ4IigZWPb1CgkhzZo2kWQ%2FrNv3ZHgzt1sruUnydOPm62vrcWqktaSTCpxON%2F9ERDX7f%2Fr77GE%2Bu9kCmQomLxHnc6ekK0TpHmw6r1nNYNSch%2BklFHk5MX44LypiUHLOeVjC%2FouHczwxfPo3p3Lf3sXALIBnd5DEJYamxFCV4GoMmz8xyVLz6NWfP5%2FGPYRqYRIqs3AQKqM%2Bq9nzSGebrtkrvx3C0lmj02q5POgte50Ol52w7Xf7gSc499uBHwS8hczW8puVL%2F4CAAD%2F%2FwEAAP%2F%2FG6nti3cEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerLet's Encrypt
Subjectsootpluglousy.com
FingerprintBC:A3:67:E4:E1:EB:E1:9B:46:20:ED:3B:02:B4:AD:79:AC:B4:FF:8D
ValidityWed, 20 Dec 2023 08:29:33 GMT - Tue, 19 Mar 2024 08:29:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxReu3mR%2F8NPTyuJFD%2BNFFGTS3TPpmXEFMcZI2LhZdxW9SXVXzeSZ6q6mqnt6Ei%2FBBdmbA55cPHS%2BSTaoUfQPcJHOgsiCkL7lYLx6FxaPMmNw9EHzvu99r%2BF779Un%2B%2Fk585Dzs9W39C4pxZeWm27jhfc971pjg5J81Bh1gw%2BC9rWGGb7cC5rui403ZbStl3zXc13P9RprZGRfj5amIig97nnNntts%2B01vuY2R%2BS%2B3uQPLHYjhOXsKJOrFh85VUFQhib9blXY70%2BlLb8S54pk2GIqjd5PtRBcJ4jnsGwf95OiiG9qerj2ATg5ndqGH%2FzSGVDPnpwcIk6MLkwiHBzOfoYJMEIonUQwrSFWBeIVI3wGJUwZEAjc2kcT3b2hT8J2%2FVT5Va7b4%2BA9QUbPFX68iib9dUTRq3NYqz0gnFqN%2BCRpVoEGFND9BtuuAihNE2ccg8QtberyBJD7YtEqDRDmbnagC9SsoOQa3DvLpRw7yvoM8dRCLs0bkeV7HFRF3u70oaomODAPherzT97jnBl3k0dTeGFk6RqTGiMweUrOHbRrD5D%2FCbpWwwoHNaua8vYehKFFIhsIyFJyhIIYiYyiG5aFQ1rflfaFsHnoX2b%2FIrXKis8E%2BP9TZQCYM3Iz303N2Zbob5%2Fq9p7EtzxoiaEuv7XU7XPhum4etVuRy2fO7YStw%2FeU%2BLJUge2k27i7V7LmPjpBSzS6rNkJ%2BAqtOENEV8NwDLyYd3wXfmrS7LnaT41gL2ycjm5GOIXSJNFtEtuPsq3P2zOxGweVPIaNH7CIQmRKpKfEhPWQYqLuTW7pgB7d0Ydn3m2lGMe3y6f1uZzyT%2F%2FvqutwptBHrq3b85WvRVJjC43ekzTZ4IigZWPb1CgkhzZo2kWQ%2FrNv3ZHgzt1sruUnydOPm62vrcWqktaSTCpxON%2F9ERDX7f%2Fr77GE%2Bu9kCmQomLxHnc6ekK0TpHmw6r1nNYNSch%2BklFHk5MX44LypiUHLOeVjC%2FouHczwxfPo3p3Lf3sXALIBnd5DEJYamxFCV4GoMmz8xyVLz6NWfP5%2FGPYRqYRIqs3AQKqM%2Bq9nzSGebrtkrvx3C0lmj02q5POgte50Ol52w7Xf7gSc499uBHwS8hczW8puVL%2F4CAAD%2F%2FwEAAP%2F%2FG6nti3cEAAA%3D HTTP/1.1
Host: sootpluglousy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 21 Jan 2024 16:13:16 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cba109c11da1761ba37f21d2a91b5609
Strict-Transport-Security: max-age=0; includeSubdomains
GET ad-delivery.net/px.gif?ch=1&e=0.4953959313656392
200 OK 43 B URL GET HTTP/2 ad-delivery.net/px.gif?ch=1&e=0.4953959313656392
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerGoogle Trust Services LLC
Subjectad-delivery.net
Fingerprint34:A0:99:E5:AA:C6:1A:63:22:B7:FB:C7:64:85:73:B2:0E:77:D5:B9
ValiditySat, 20 Jan 2024 00:33:53 GMT - Fri, 19 Apr 2024 00:33:52 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.4953959313656392 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:15 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPp0wgCF-V8nWRRFweDLkLlZ59B9_HaB5uMb_BoI2XEvFDluZgJZMS-L6RsjtVqwyDwhSyI
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
expires: Sun, 24 Dec 2023 04:48:35 GMT
cache-control: public, max-age=86400
age: 2463880
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f7RoPljX2Wb2xTu3Fd55Vh2dw1qEjKlgbjVCs%2FP146%2FoK%2BpH094UhpqgqM3ew7nvBPGZK5aov5zLAm9JdzY9kC0RSACBep9eQFHta5CILx%2BEWi1OciTv9EFwEF90tt61ow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7e92d6b712b-OSL
X-Firefox-Spdy: h2
POST mp.4dex.io/prebid
200 OK 60 B IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint02:E1:92:C5:72:6D:E0:64:4A:46:05:69:81:98:7C:43:13:E7:15:7A
ValidityTue, 01 Aug 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash a1884f600d7fc4b248d48992e08cbcc9
0c1d2c3753339249da9c28a4941ad7271fda0bef
24a9b895cda57aea260bce4c6ef89964ee518f931a019d068f5dfb0500244f18
POST /prebid HTTP/1.1
Host: mp.4dex.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 8860
Origin: https://modsfire.com
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:15 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://modsfire.com
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Origin, Accept-Encoding
x-err: Shapings: no adunits with size and seat and mapping
x-version: 3.0.0-gcp-ams
x-warn: Process Floors. 6 inventory rules not found for mediatype: banner and adUnitCode: modsfire_com_1000x100_anchor_responsive, Process Floors. 15 inventory rules not found for mediatype: banner and adUnitCode: modsfire_com_1050x336_billboard_1_responsive, Process Floors. 4 inventory rules not found for mediatype: banner and adUnitCode: modsfire_com_336x336_top_double_banner_left, Process Floors. 4 inventory rules not found for mediatype: banner and adUnitCode: modsfire_com_336x336_top_double_banner_right_desktop
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8490d7ed2b2656a2-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET modsfire.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 7.3 kB URL GET HTTP/2 modsfire.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint42:B6:47:08:C9:02:81:5C:4E:5E:91:5E:4F:4F:3B:02:AE:A3:44:FF
ValidityFri, 03 Mar 2023 00:00:00 GMT - Sat, 02 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: modsfire.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6Ilwvck9Gb3VXOE4xcU1rdUdXdnZxZmV3PT0iLCJ2YWx1ZSI6IjhVbFp0RVVETjF6cVFGNzhBR1NUMnhMMm9DZUs2YzVEZzVNWW8raUpcL09wVG90a1daV1lJa3lYeE5QRTZMNjFUIiwibWFjIjoiN2RmZDZmOGYzZTkyNGYwMWExZDZjN2NlOTA3ZDhkMzI4MGU4NGVlYWMzNmEzMDRlMDNjMDMwN2Y1Nzk5YTA5MiJ9; modsfire_session=eyJpdiI6Ilwvb05jcWNNSHdWR2dCK3FnXC8yVHVLUT09IiwidmFsdWUiOiJnTENPZ3orUFRoMXN0YURvU1cyYThHYkVDMFJJQWEwTUVwVlgxUUcwbkVmdUs1NUFjNkQrRWhDamRsUkZPanpTIiwibWFjIjoiMjY0N2YwOTM2NzMyNzVmMDg5ODNiZWMwMmMxNTdlMTU2ZjhjOWQxOTU1OTU2MDU3Zjg5YjA4NDA3MjU0MDI0NiJ9; 90e7855136176e9dc4cae7b096dc8cd6=eyJpdiI6ImdUTkk5YldjbUprOTdMazFXMVR5Mnc9PSIsInZhbHVlIjoieE5yR1B2dlBRWXA4VWdWc2thVVwvTUE9PSIsIm1hYyI6ImYwMDFlOTAxYTkyZGQwYmQ3MDhkNDExYTRmNDg3ZTBjZmY1YzIyYTJlMzE5YjE4OWY2NDM2MDAzN2JmYzgxYjgifQ%3D%3D; referer_domain=eyJpdiI6Iko5WUZJYmF1dXkzNlNJM1p4bWhNRXc9PSIsInZhbHVlIjoiN2pvRUVkYjMraXJyM0FcL1BIckFmbkE9PSIsIm1hYyI6IjQ1NjY0MmYwYTVlODkyZGQyM2NkNjQxZjkzNDRjNTlmNDM2MWZhOTcyY2JjMjIyYzFmMWNlNDMwNDNmM2QwYjAifQ%3D%3D; _ga_JXQKZFEW04=GS1.1.1705853595.1.0.1705853595.0.0.0; _ga=GA1.1.1726846736.1705853596; stpdOrigin={"origin":"direct"}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 21 Jan 2024 16:13:15 GMT
vary: accept-encoding
access-control-allow-origin: *
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/c8377512/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BjIXp46WydALbNiibXoVTR2U9a%2FckC9ZEoRs9HRZD9yAR4%2BtWyVJvge8kapmnJVnOFMC7Xidq5YynH1Yq5aR3sYYTTn1IrczvI%2FPMNcSxKIobDL%2B6nsTPzpP%2BMZWWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8490d7ea0b83568f-OSL
X-Firefox-Spdy: h2
GET friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://modsfire.com/dI90LxHm0U9LN5B
Certificate IssuerCloudflare, Inc.
Subjectfriendshipmale.com
Fingerprint77:97:02:FC:C8:FC:DE:5B:AC:45:9E:A1:D2:B1:B7:9C:1B:F8:23:92
ValidityThu, 18 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://modsfire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 21 Jan 2024 16:13:16 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 90d9a0a2359042ba29f589b9046856e0
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 21 Jan 2024 16:13:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WDVI69twEbSpy2OjLIW5G%2B%2F2pZMe9GkZEV97wJ4KdgDwHflJpJXLXaHYlk6fLQ%2BWzh1cC5C1RFmKu1lJhRS3wBK5VZ1YTuV3DEhChr2iDg4IGduAeREYgLtl2Es3zOOWc9ZFYRg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8490d7f1ee5b067b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.73.172
104.22.75.216
18.157.249.149
147.75.84.158
185.76.9.15
0.0.0.0