Report - voe.sx/k4b9twnsolts

Report Overview

Visited public
2024-07-04 22:49:48
Tags
suspicious
URL
voe.sx/k4b9twnsolts
Finishing URL
roberteachfinal.com/k4b9twnsolts
IP / ASN
186.2.163.208
#59692 IQWeb FZ-LLC
Title
Watch Love.Island.UK.S11E32.720p.WEB.h264-DIANA.mp4 - VOE | Content Delivery Network (CDN) & Video Cloud
Suspicious - Anti-debugging code

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-07-03 18:12:08	654 B	1.8 kB	23.36.76.226
roberteachfinal.com	unknown	unknown	No data	No data	7.9 kB	214 kB	186.2.163.111
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2024-07-04 08:55:12	2.6 kB	202 kB	104.17.25.14
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-03 18:12:42	2.3 kB	6.2 kB	23.36.77.32
o.pki.goog	unknown	2016-06-13	2024-04-24 13:44:57	2024-07-03 18:16:32	2.0 kB	4.2 kB	142.251.9.94
imasdk.googleapis.com	11661	2005-01-25	2014-10-30 18:42:18	2024-07-02 21:35:01	420 B	146 kB	142.250.74.74
anticipateplummorbid.com	unknown	2024-06-29	2024-06-30 15:53:52	2024-07-03 22:25:52	447 B	15 kB	172.240.108.84
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2024-07-04 03:59:07	524 B	21 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2024-07-03 18:15:36	464 B	3.0 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	roberteachfinal.com/k4b9twnsolts	ScriptElement	502 B	2023-12-21	2025-03-09
Pretty URL roberteachfinal.com/k4b9twnsolts IP 186.2.163.111 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-21 19:29 Last Seen2025-03-09 12:44 Times Seen637 Hash a70fb3ccc190fdfe4c06804cafa694bc 50630603fa35dcf518ed6bbeef164ec2a65ab6ae 2dd7b05386bab0c4528e26a81a13742dc580154aa2980ff125e99e0b4974376d Loading...

	imasdk.googleapis.com/js/sdkloader/ima3.js	ScriptElement	425 kB	2024-07-03	2024-08-19
Pretty URL imasdk.googleapis.com/js/sdkloader/ima3.js IP 142.250.74.74 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-07-03 16:19 Last Seen2024-08-19 18:13 Times Seen214 Hash a1b2503f25d9b026ab3d993538939674 4515324915d9cc04a792895e692abb4800523e03 936f5a4299c7435fde1e9db72f95b51fe142f901e9fc9972395e508726b3a4ed Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js	ScriptElement	88 kB	2023-08-31	2025-05-15
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-31 16:03 Last Seen2025-05-15 04:46 Times Seen36250 Hash 2c872dbe60f4ba70fb85356113d8b35e ee48592d1fff952fcf06ce0b666ed4785493afdc fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a Loading...

	roberteachfinal.com/k4b9twnsolts	ScriptElement	3.9 kB	2024-01-10	2025-04-11
Pretty URL roberteachfinal.com/k4b9twnsolts IP 186.2.163.111 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-10 02:44 Last Seen2025-04-11 02:20 Times Seen618 Hash f646a3bf6021cf9b091ce25e3e02accd fd5856375a2de55c233b98cea458dd45ad731b7f 1e03159bafb1e8ba958c5ee6d609084aea470aaa24fe3a05f4da41c152ab6006 Loading...

HTTP Transactions (32)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
957cd8e6bd774045d4cab550ce76f80a
d06d4246273e9ba4fba69494038c77f5c53aadb6
e4778c960b009c229dbb555ff7679b6d245d6f7111fd66fd5c514847b06acdbb

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E4778C960B009C229DBB555FF7679B6D245D6F7111FD66FD5C514847B06ACDBB"
Last-Modified: Wed, 03 Jul 2024 01:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20638
Expires: Fri, 05 Jul 2024 04:33:19 GMT
Date: Thu, 04 Jul 2024 22:49:21 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
e9a839fbbf2a5bc4f1a01cd5fca04d5e
ff4396bb2dcc9211b70f2e3266720172ee2ce085
3bb2a3698d452f1de2ff4f283a89fc427d9fe01c02ad968f215bee1834b1c1e3

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3BB2A3698D452F1DE2FF4F283A89FC427D9FE01C02AD968F215BEE1834B1C1E3"
Last-Modified: Thu, 04 Jul 2024 15:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14541
Expires: Fri, 05 Jul 2024 02:51:42 GMT
Date: Thu, 04 Jul 2024 22:49:21 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
b8ee6ca153df6819132dd5d8a6ba5c76
0ed0f0f631777272bd71ba23719e71695c9d95e1
bdca7ce7bb6febd6a6afb56a828cf4422c1a8971524484e8128cafad8e6b3367

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BDCA7CE7BB6FEBD6A6AFB56A828CF4422C1A8971524484E8128CAFAD8E6B3367"
Last-Modified: Tue, 02 Jul 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3870
Expires: Thu, 04 Jul 2024 23:53:52 GMT
Date: Thu, 04 Jul 2024 22:49:22 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
7a665c357c9589136708e266c9f9a140
e75c705088f540933589402929fb9dcbb39e7747
73dfddabe9477748a0f32d3c2105cc266659ed6cecee3b16ef8e8908192de269

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "73DFDDABE9477748A0F32D3C2105CC266659ED6CECEE3B16EF8E8908192DE269"
Last-Modified: Thu, 04 Jul 2024 16:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10350
Expires: Fri, 05 Jul 2024 01:41:52 GMT
Date: Thu, 04 Jul 2024 22:49:22 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
69ec9c6af979206e0686d9f044a5a38e
9e82ff382a22cbc83ee416411f6580908a47bb21
186b7d5e8f438c2fff69fc31e72d135806c4f22729aaa4699ef5f03c15fe8537

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "186B7D5E8F438C2FFF69FC31E72D135806C4F22729AAA4699EF5F03C15FE8537"
Last-Modified: Thu, 04 Jul 2024 05:43:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8395
Expires: Fri, 05 Jul 2024 01:09:17 GMT
Date: Thu, 04 Jul 2024 22:49:22 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL
r11.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
f1efb31e530ec3a8c8813e3f8a14709a
b09f221484011af9949505fa313aad6aaed4332f
8e19251d1bfe15458866cbf528b7124242ad0d47b7d91d587e6712af4df315f7

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E19251D1BFE15458866CBF528B7124242AD0D47B7D91D587E6712AF4DF315F7"
Last-Modified: Tue, 02 Jul 2024 09:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12
Expires: Thu, 04 Jul 2024 22:49:35 GMT
Date: Thu, 04 Jul 2024 22:49:23 GMT
Connection: keep-alive

roberteachfinal.com/s/css/site.min.css?b88a47d08bc271205f94a89a0b229d92

186.2.163.111

200 OK

36 kB

URL GET HTTP/2
roberteachfinal.com/s/css/site.min.css?b88a47d08bc271205f94a89a0b229d92
IP
186.2.163.111:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectroberteachfinal.com
Fingerprint6B:5F:26:72:10:3E:2D:60:9F:7E:C3:45:AD:06:EA:29:4F:11:84:4A
ValiditySat, 29 Jun 2024 20:30:35 GMT - Fri, 27 Sep 2024 20:30:34 GMT

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (65268)
Size
36 kB (35929 bytes)
Hash
693911829343f289c06e6c9aae38a67a
959dc426cea1454bfc42ad25a570d9d92f155bcf
20ff9cfee735b48ff17502b3e82696fb0b0ee2a10ec49436d0c601eb83405ed0

HTTP Headers

GET /s/css/site.min.css?b88a47d08bc271205f94a89a0b229d92 HTTP/1.1
Host: roberteachfinal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberteachfinal.com/k4b9twnsolts
Cookie: __ddg1_=CBOvzqyE5UxibwRnP5UP; XSRF-TOKEN=eyJpdiI6IjF6MlVSNS9EeklkRzRTdE93NzN1UkE9PSIsInZhbHVlIjoiQnBMQy9VOExSSTcraXZkK0I5dGJzZDI3am1qNDJLZjZrd0d0STAwclRNbEpvTXB3d1hNYkllL2NxeGFrdDhZNTBQL05HdzZBWllYYnJrbmxSLysyYzFJSURwdGs3UlFiSTdhcW50WFoyQWJjWkd2ek85RWJEMnJpQmswVTZqaTUiLCJtYWMiOiI4OGU3Y2M2ZjUyYzYyMTJmMjQyZDYyOWJhODIxYTZmZDhjN2IyYjMxZmEyNzY5ZGQ0NTFhYTIwOTVjNjllNjM4IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IkswdzJaNEN5OVhaVFhDZVFUWXVNNkE9PSIsInZhbHVlIjoiU0w5UmorT1YrZ2J5VGVKY1g3WUFEV0pOSTIzWUtVT1lCYXdFSS9FOEtGa3RNNENBcFZrTVFrdC9OZ280aVV6bzVDSXhmZURlbjBQZW9MQlAxRWZMVW1jUnF3L0Nla1VhRVVHK256UjNPUlR1bkVGTnJJd1BpVVpiK2twSnVkRWEiLCJtYWMiOiJmMDQzN2EwNWMzZTk2ZTA5MmM2NTM2NDhmY2JkOWZiNGYxZjZhMzhlZmY4MzM4NTFkOTE5YjZjODUzNWFhZjhhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
date: Sat, 29 Jun 2024 21:32:09 GMT
content-type: text/css
last-modified: Mon, 20 May 2024 13:32:00 GMT
vary: Accept-Encoding
etag: W/"664b50d0-41f8f"
expires: Mon, 29 Jul 2024 21:32:09 GMT
cache-control: max-age=2592000
content-encoding: br
age: 436634
content-length: 35929
ddg-cache-status: HIT
X-Firefox-Spdy: h2

roberteachfinal.com/s/images/logos/voe-logo.svg?v=2

186.2.163.111

200 OK

967 B

URL GET HTTP/2
roberteachfinal.com/s/images/logos/voe-logo.svg?v=2
IP
186.2.163.111:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectroberteachfinal.com
Fingerprint6B:5F:26:72:10:3E:2D:60:9F:7E:C3:45:AD:06:EA:29:4F:11:84:4A
ValiditySat, 29 Jun 2024 20:30:35 GMT - Fri, 27 Sep 2024 20:30:34 GMT

File type
SVG Scalable Vector Graphics image
Size
967 B (967 bytes)
Hash
54860be10a609212a47e58224f1f5a77
d5a9b87028f23ffb0daf4533faad5188b5b5d5e1
1b0cbfb702895cca8d51fcf2c3f8c9f56668372253c6c53ea50b17992fdde642

HTTP Headers

GET /s/images/logos/voe-logo.svg?v=2 HTTP/1.1
Host: roberteachfinal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberteachfinal.com/k4b9twnsolts
Cookie: __ddg1_=CBOvzqyE5UxibwRnP5UP; XSRF-TOKEN=eyJpdiI6IjF6MlVSNS9EeklkRzRTdE93NzN1UkE9PSIsInZhbHVlIjoiQnBMQy9VOExSSTcraXZkK0I5dGJzZDI3am1qNDJLZjZrd0d0STAwclRNbEpvTXB3d1hNYkllL2NxeGFrdDhZNTBQL05HdzZBWllYYnJrbmxSLysyYzFJSURwdGs3UlFiSTdhcW50WFoyQWJjWkd2ek85RWJEMnJpQmswVTZqaTUiLCJtYWMiOiI4OGU3Y2M2ZjUyYzYyMTJmMjQyZDYyOWJhODIxYTZmZDhjN2IyYjMxZmEyNzY5ZGQ0NTFhYTIwOTVjNjllNjM4IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IkswdzJaNEN5OVhaVFhDZVFUWXVNNkE9PSIsInZhbHVlIjoiU0w5UmorT1YrZ2J5VGVKY1g3WUFEV0pOSTIzWUtVT1lCYXdFSS9FOEtGa3RNNENBcFZrTVFrdC9OZ280aVV6bzVDSXhmZURlbjBQZW9MQlAxRWZMVW1jUnF3L0Nla1VhRVVHK256UjNPUlR1bkVGTnJJd1BpVVpiK2twSnVkRWEiLCJtYWMiOiJmMDQzN2EwNWMzZTk2ZTA5MmM2NTM2NDhmY2JkOWZiNGYxZjZhMzhlZmY4MzM4NTFkOTE5YjZjODUzNWFhZjhhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
date: Thu, 04 Jul 2024 19:39:07 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Aug 2023 01:22:26 GMT
vary: Accept-Encoding
etag: W/"64d981d2-735"
expires: Sat, 03 Aug 2024 19:39:07 GMT
cache-control: max-age=2592000
content-encoding: br
age: 11416
content-length: 967
ddg-cache-status: HIT
X-Firefox-Spdy: h2

roberteachfinal.com/s/images/logos/voe-logo-2.svg?v=2

186.2.163.111

200 OK

239 B

URL GET HTTP/2
roberteachfinal.com/s/images/logos/voe-logo-2.svg?v=2
IP
186.2.163.111:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectroberteachfinal.com
Fingerprint6B:5F:26:72:10:3E:2D:60:9F:7E:C3:45:AD:06:EA:29:4F:11:84:4A
ValiditySat, 29 Jun 2024 20:30:35 GMT - Fri, 27 Sep 2024 20:30:34 GMT

File type
SVG Scalable Vector Graphics image
Size
239 B (239 bytes)
Hash
b1596cdc210a2042143491e18763edab
b848dda4a8630ca524603b206a305ff25e764455
48e9c5371db27436eb5cb330335ae02d4253e90d7babe3a02e0231b34f208b65

HTTP Headers

GET /s/images/logos/voe-logo-2.svg?v=2 HTTP/1.1
Host: roberteachfinal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberteachfinal.com/k4b9twnsolts
Cookie: __ddg1_=CBOvzqyE5UxibwRnP5UP; XSRF-TOKEN=eyJpdiI6IjF6MlVSNS9EeklkRzRTdE93NzN1UkE9PSIsInZhbHVlIjoiQnBMQy9VOExSSTcraXZkK0I5dGJzZDI3am1qNDJLZjZrd0d0STAwclRNbEpvTXB3d1hNYkllL2NxeGFrdDhZNTBQL05HdzZBWllYYnJrbmxSLysyYzFJSURwdGs3UlFiSTdhcW50WFoyQWJjWkd2ek85RWJEMnJpQmswVTZqaTUiLCJtYWMiOiI4OGU3Y2M2ZjUyYzYyMTJmMjQyZDYyOWJhODIxYTZmZDhjN2IyYjMxZmEyNzY5ZGQ0NTFhYTIwOTVjNjllNjM4IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IkswdzJaNEN5OVhaVFhDZVFUWXVNNkE9PSIsInZhbHVlIjoiU0w5UmorT1YrZ2J5VGVKY1g3WUFEV0pOSTIzWUtVT1lCYXdFSS9FOEtGa3RNNENBcFZrTVFrdC9OZ280aVV6bzVDSXhmZURlbjBQZW9MQlAxRWZMVW1jUnF3L0Nla1VhRVVHK256UjNPUlR1bkVGTnJJd1BpVVpiK2twSnVkRWEiLCJtYWMiOiJmMDQzN2EwNWMzZTk2ZTA5MmM2NTM2NDhmY2JkOWZiNGYxZjZhMzhlZmY4MzM4NTFkOTE5YjZjODUzNWFhZjhhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
date: Sat, 29 Jun 2024 21:32:10 GMT
content-type: image/svg+xml
last-modified: Mon, 14 Aug 2023 01:22:27 GMT
etag: W/"64d981d3-1d9"
expires: Mon, 29 Jul 2024 21:32:10 GMT
cache-control: max-age=2592000
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
age: 436633
content-length: 239
ddg-cache-status: HIT
X-Firefox-Spdy: h2

roberteachfinal.com/s/js/site.min.js?ea7bc466cd21d4b756b621241c671b1d

186.2.163.111

200 OK

23 kB

URL GET HTTP/2
roberteachfinal.com/s/js/site.min.js?ea7bc466cd21d4b756b621241c671b1d
IP
186.2.163.111:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectroberteachfinal.com
Fingerprint6B:5F:26:72:10:3E:2D:60:9F:7E:C3:45:AD:06:EA:29:4F:11:84:4A
ValiditySat, 29 Jun 2024 20:30:35 GMT - Fri, 27 Sep 2024 20:30:34 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (52179)
Size
23 kB (23388 bytes)
Hash
72e89292dad5c7e8a82f6101fc52b71a
11917db2f454df110fedaf803ebf640052f953b8
1058329efc2e4de916dc58c5996ae6620836b878c33d13742b90f20ccddabe61

HTTP Headers

GET /s/js/site.min.js?ea7bc466cd21d4b756b621241c671b1d HTTP/1.1
Host: roberteachfinal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberteachfinal.com/k4b9twnsolts
Cookie: __ddg1_=CBOvzqyE5UxibwRnP5UP; XSRF-TOKEN=eyJpdiI6IjF6MlVSNS9EeklkRzRTdE93NzN1UkE9PSIsInZhbHVlIjoiQnBMQy9VOExSSTcraXZkK0I5dGJzZDI3am1qNDJLZjZrd0d0STAwclRNbEpvTXB3d1hNYkllL2NxeGFrdDhZNTBQL05HdzZBWllYYnJrbmxSLysyYzFJSURwdGs3UlFiSTdhcW50WFoyQWJjWkd2ek85RWJEMnJpQmswVTZqaTUiLCJtYWMiOiI4OGU3Y2M2ZjUyYzYyMTJmMjQyZDYyOWJhODIxYTZmZDhjN2IyYjMxZmEyNzY5ZGQ0NTFhYTIwOTVjNjllNjM4IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IkswdzJaNEN5OVhaVFhDZVFUWXVNNkE9PSIsInZhbHVlIjoiU0w5UmorT1YrZ2J5VGVKY1g3WUFEV0pOSTIzWUtVT1lCYXdFSS9FOEtGa3RNNENBcFZrTVFrdC9OZ280aVV6bzVDSXhmZURlbjBQZW9MQlAxRWZMVW1jUnF3L0Nla1VhRVVHK256UjNPUlR1bkVGTnJJd1BpVVpiK2twSnVkRWEiLCJtYWMiOiJmMDQzN2EwNWMzZTk2ZTA5MmM2NTM2NDhmY2JkOWZiNGYxZjZhMzhlZmY4MzM4NTFkOTE5YjZjODUzNWFhZjhhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
date: Sat, 29 Jun 2024 21:32:09 GMT
content-type: application/javascript
last-modified: Mon, 20 May 2024 13:32:00 GMT
etag: W/"664b50d0-191d9"
expires: Mon, 29 Jul 2024 21:32:09 GMT
cache-control: max-age=2592000
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
age: 436634
content-length: 23388
ddg-cache-status: HIT
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/plyr/3.7.8/plyr.polyfilled.min.js

104.17.25.14

200 OK

31 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/plyr/3.7.8/plyr.polyfilled.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
31 kB (30620 bytes)
Hash
71dc06ef63bafd519190803503d6fdd0
efc20140bd1efe04b3a56bb3635874f0749cd8ca
b0fc604958d3c5d9b393c4a4e48f77e232ab9928ee1a585a0e87e97984b5b024

HTTP Headers

GET /ajax/libs/plyr/3.7.8/plyr.polyfilled.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://roberteachfinal.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 04 Jul 2024 22:49:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 30620
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "641dd583-779c"
last-modified: Fri, 24 Mar 2023 16:53:23 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1217882
expires: Tue, 24 Jun 2025 22:49:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b55UGg0j3e2TguIAZ%2BhFeZyXezgswK9cmh8HH0FHZOC4jHsqa0JiLcKECsxd7KY7WXnzSodSGxOfx9Tl8XlIE0b39fAP4AUM2IDDLAOlmltD4ZLFsySvui991zD28XZJoYrnBxJ7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 89e2ab11c8e992e5-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js

104.17.25.14

200 OK

83 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
83 kB (82604 bytes)
Hash
1e59b3a541bcfa025fdda12cbbaa9f6e
b04d134373a70c5c2c536e0246b99dabdde8db9d
88fa861d6c2d711a4a0e9c186234ab06f7e0f77b7bda6da22ae50eae6c892570

HTTP Headers

GET /ajax/libs/hls.js/1.2.7/hls.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://roberteachfinal.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 04 Jul 2024 22:49:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 82604
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "636ff6bc-142ac"
last-modified: Sat, 12 Nov 2022 19:40:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1298857
expires: Tue, 24 Jun 2025 22:49:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lX3LU1B%2FjTt3bxhxvlrgFIuLp%2BxxrzGYF0DUsUWpkesRwHOjeyJrrkf1nnL0t7bcuBdZw9eR9aafZ8saJCYn0Xlut8uDZoeAhQ6j%2BcewFAx7sfR1J1pVcgTzN6muTRsZaJfzhfUs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 89e2ab11d8ed92e5-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js

104.17.25.14

200 OK

27 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
27 kB (27446 bytes)
Hash
2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a

HTTP Headers

GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://roberteachfinal.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 04 Jul 2024 22:49:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1301516
expires: Tue, 24 Jun 2025 22:49:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AL9Shv3d393uxb6A5JJ0h4rpTEoYFIs5Xg68f2i6IUgS9HMRxr3JeS3l1y3FNU9bMW2e3cCrKaCHeuGaGVl%2FMwDLpbfqphilAmY70k03meR87%2F4rbzpFQfb3moT%2FLfkryiDTvoYB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 89e2ab11d8f592e5-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/plyr/3.7.8/plyr.min.js

104.17.25.14

200 OK

29 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/plyr/3.7.8/plyr.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
29 kB (29012 bytes)
Hash
4fb2ab36696965f30dd02a36089bfc64
9b165c0e728a0ac4e2cddc944c9a2c5819ca7342
ae7266d9eb50c1614c4f425edba8b3aa805b8b22c97cbbd360ae9a0ea47c02ad

HTTP Headers

GET /ajax/libs/plyr/3.7.8/plyr.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://roberteachfinal.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 04 Jul 2024 22:49:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 29012
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "641dd583-7154"
last-modified: Fri, 24 Mar 2023 16:53:23 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1894626
expires: Tue, 24 Jun 2025 22:49:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ok%2BA%2F%2BWtgnBGGhGkiNBiEnEJYQAvyAoByE7YknanXVyFkJQAT%2FXiIyccJI5Iil7SRIYkOwOLC9F1zJpFC5M2W7QM852COPLImnU7JkXIsC9gEyA5SRMTi10t63IvQSlktzihLyll"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 89e2ab11d8fa92e5-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.2/js/bootstrap.bundle.min.js

104.17.25.14

200 OK

21 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.2/js/bootstrap.bundle.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
JavaScript source, ASCII text, with very long lines (65299)
Size
21 kB (21203 bytes)
Hash
6baf57f25796c332144ed58a2a0cd9ee
f7fd0f3dc84b2cf93bf81e832505a673f354e0a3
82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd

HTTP Headers

GET /ajax/libs/bootstrap/5.3.2/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://roberteachfinal.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 04 Jul 2024 22:49:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 21203
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6503298b-52d3"
last-modified: Thu, 14 Sep 2023 15:40:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3121763
expires: Tue, 24 Jun 2025 22:49:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AZnZKykPX%2FT6xZ1VF6n6H%2FJzEtzITxZKG09NRtcQf6GP1DFClCvhLq74JCSd8ZYd9%2FIisnw%2FuZkgjCT4CtzIWfptKHra92DOnxGwdBwKK9CSg9bD0IWYHpsICZccL8FdLW6GWKAy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 89e2ab12091492e5-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/plyr/3.7.8/plyr.min.css

104.17.25.14

200 OK

4.5 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/plyr/3.7.8/plyr.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectcdnjs.cloudflare.com
Fingerprint3B:5B:7C:DD:19:E8:16:5A:09:22:D6:1E:03:84:8D:B9:A1:32:BF:8E
ValiditySun, 02 Jun 2024 00:47:32 GMT - Sat, 31 Aug 2024 00:47:31 GMT

File type
Unicode text, UTF-8 text, with very long lines (32524), with no line terminators
Size
4.5 kB (4503 bytes)
Hash
27a5932e6ea87c90e820203b47311518
9cd7e9b94c01a5cf5ffe0bd27f2d2e2429738e91
6bfc1e307a874e08da7f2529dd89cca1e4a213d32cc06afaa1086ed85179d8b1

HTTP Headers

GET /ajax/libs/plyr/3.7.8/plyr.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://roberteachfinal.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 04 Jul 2024 22:49:23 GMT
content-type: text/css; charset=utf-8
content-length: 4503
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "641dd583-1197"
last-modified: Fri, 24 Mar 2023 16:53:23 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1898389
expires: Tue, 24 Jun 2025 22:49:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2FI3z0%2FSfnqQSaqs69aqIE7ABuLlX6g8mPI9uRQV3sOX3DnoaJ0hDGD%2BMhb32P66zLBfqL9veTOl6ziAWQveMavid27tLmMtmzAiOYRv%2F8%2BhZuByvBV9uTnfzHEELUB3sxSphbPl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 89e2ab12091392e5-CPH
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
3c9666abc933069bc8c0177d92c27f36
d9e6fcf6da0f5ca874d4b83dc1b52d61b2848269
d036ea8b32b342adead27831ebd8fed7996002a9f0f5791ecb3ec30e1f29bd20

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D036EA8B32B342ADEAD27831EBD8FED7996002A9F0F5791ECB3EC30E1F29BD20"
Last-Modified: Tue, 02 Jul 2024 20:22:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4037
Expires: Thu, 04 Jul 2024 23:56:40 GMT
Date: Thu, 04 Jul 2024 22:49:23 GMT
Connection: keep-alive

o.pki.goog/wr2

142.251.9.94

472 B

URL
o.pki.goog/wr2
IP
142.251.9.94:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
579ba5dbc1de1a0e2e554ddf2930ef97
830c9e452464e987df5acc795b55e6dc339fd59d
79d5fc35a30a40754283beba4b15343aa61e7b37cc2c388033cd6b1a569d6dd1

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 04 Jul 2024 22:49:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.251.9.94

472 B

URL
o.pki.goog/wr2
IP
142.251.9.94:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
579ba5dbc1de1a0e2e554ddf2930ef97
830c9e452464e987df5acc795b55e6dc339fd59d
79d5fc35a30a40754283beba4b15343aa61e7b37cc2c388033cd6b1a569d6dd1

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 04 Jul 2024 22:49:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

imasdk.googleapis.com/js/sdkloader/ima3.js

142.250.74.74

200 OK

145 kB

URL GET HTTP/2
imasdk.googleapis.com/js/sdkloader/ima3.js
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC7:12:52:3A:BD:E0:73:20:AD:A8:5F:DF:12:DB:C6:DE:AF:63:88:6B
ValidityThu, 13 Jun 2024 16:32:33 GMT - Thu, 05 Sep 2024 16:32:32 GMT

File type
JavaScript source, ASCII text, with very long lines (1900)
Size
145 kB (145330 bytes)
Hash
a1b2503f25d9b026ab3d993538939674
4515324915d9cc04a792895e692abb4800523e03
936f5a4299c7435fde1e9db72f95b51fe142f901e9fc9972395e508726b3a4ed

HTTP Headers

GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberteachfinal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 145330
date: Thu, 04 Jul 2024 22:49:23 GMT
expires: Thu, 04 Jul 2024 22:49:23 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

anticipateplummorbid.com/0e/d5/91/0ed591400877d316744c6353cd338f08.js

172.240.108.84

200 OK

14 kB

URL GET HTTP/1.1
anticipateplummorbid.com/0e/d5/91/0ed591400877d316744c6353cd338f08.js
IP
172.240.108.84:443
ASN
#7979 SERVERS-COM

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectanticipateplummorbid.com
FingerprintBB:EE:8E:38:FE:7A:A2:6C:FD:A3:C2:12:56:12:72:82:68:62:52:07
ValiditySat, 29 Jun 2024 20:05:40 GMT - Fri, 27 Sep 2024 20:05:39 GMT

File type
JavaScript source, ASCII text, with very long lines (39485), with no line terminators
Size
14 kB (13872 bytes)
Hash
90d3e813e6c6d875e1583237e75e27e2
aaa4c66fd48e0505f139cdbba7575d5bd6a2873e
9216f0d45a107f577c82936fb5f22c6b6558278c3b556fe655883a25f5251d8c

HTTP Headers

GET /0e/d5/91/0ed591400877d316744c6353cd338f08.js HTTP/1.1
Host: anticipateplummorbid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberteachfinal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 04 Jul 2024 22:49:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 4db809a72c3b9fb983e1ac0014e91103
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

o.pki.goog/wr2

142.251.9.94

472 B

URL
o.pki.goog/wr2
IP
142.251.9.94:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
579ba5dbc1de1a0e2e554ddf2930ef97
830c9e452464e987df5acc795b55e6dc339fd59d
79d5fc35a30a40754283beba4b15343aa61e7b37cc2c388033cd6b1a569d6dd1

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 04 Jul 2024 22:49:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.251.9.94

472 B

URL
o.pki.goog/wr2
IP
142.251.9.94:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
579ba5dbc1de1a0e2e554ddf2930ef97
830c9e452464e987df5acc795b55e6dc339fd59d
79d5fc35a30a40754283beba4b15343aa61e7b37cc2c388033cd6b1a569d6dd1

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 04 Jul 2024 22:49:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.251.9.94

471 B

URL
o.pki.goog/wr2
IP
142.251.9.94:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
7adb5d21cb7b127aded52edafaccc88c
0aa27f20343bfc61c12b9f6006a9400825de4aa1
1008cd5bad989f2471b6ab319d2534c45e767ed4680d00a494c291176b90a08e

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 04 Jul 2024 22:49:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/figtree/v5/_Xms-HUzqDCFdgfMm4S9DQ.woff2

216.58.207.227

200 OK

20 kB

URL GET HTTP/2
fonts.gstatic.com/s/figtree/v5/_Xms-HUzqDCFdgfMm4S9DQ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintC4:9C:27:09:1C:F7:14:C9:86:F0:B5:42:0B:8A:D2:AE:5E:AE:98:04
ValidityThu, 13 Jun 2024 16:31:03 GMT - Thu, 05 Sep 2024 16:31:02 GMT

File type
Web Open Font Format (Version 2), TrueType, length 20080, version 1.0
Size
20 kB (20080 bytes)
Hash
a87b95d73b0a1092ca62a6934227ec22
5e1de72648af71b468843876289fdd0a763a10c4
aafc56842faa29d254e8317348063a257c11c5d2369d36d5a437e36c398bbe99

HTTP Headers

GET /s/figtree/v5/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://roberteachfinal.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 03 Jul 2024 16:33:48 GMT
expires: Thu, 03 Jul 2025 16:33:48 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 20 Jul 2023 20:53:10 GMT
content-type: font/woff2
age: 108936
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.251.9.94

471 B

URL
o.pki.goog/wr2
IP
142.251.9.94:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
7adb5d21cb7b127aded52edafaccc88c
0aa27f20343bfc61c12b9f6006a9400825de4aa1
1008cd5bad989f2471b6ab319d2534c45e767ed4680d00a494c291176b90a08e

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 04 Jul 2024 22:49:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
20f6da3946882ea83e1d78dfaedbf953
1a8f214ff6a98dae0e57244bac88b6721452a40c
a6ad831046e57007e12f62b75b6fc71963f13823e799a3e25e618ee09a3c9d27

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A6AD831046E57007E12F62B75B6FC71963F13823E799A3E25E618EE09A3C9D27"
Last-Modified: Wed, 03 Jul 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20348
Expires: Fri, 05 Jul 2024 04:28:32 GMT
Date: Thu, 04 Jul 2024 22:49:24 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
20f6da3946882ea83e1d78dfaedbf953
1a8f214ff6a98dae0e57244bac88b6721452a40c
a6ad831046e57007e12f62b75b6fc71963f13823e799a3e25e618ee09a3c9d27

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A6AD831046E57007E12F62B75B6FC71963F13823E799A3E25E618EE09A3C9D27"
Last-Modified: Wed, 03 Jul 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20348
Expires: Fri, 05 Jul 2024 04:28:32 GMT
Date: Thu, 04 Jul 2024 22:49:24 GMT
Connection: keep-alive

roberteachfinal.com/android-icon-192x192.png

186.2.163.111

200 OK

7.1 kB

URL GET HTTP/2
roberteachfinal.com/android-icon-192x192.png
IP
186.2.163.111:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectroberteachfinal.com
Fingerprint6B:5F:26:72:10:3E:2D:60:9F:7E:C3:45:AD:06:EA:29:4F:11:84:4A
ValiditySat, 29 Jun 2024 20:30:35 GMT - Fri, 27 Sep 2024 20:30:34 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
7.1 kB (7068 bytes)
Hash
6e09fa5e43f9f169c8b65bdba9683b46
e986e9353a404b28a522b85dc0b7afb480b6cb27
7940cbb7ef222596bef1a1d1db04e8a1b745dfdeb769ff9a46f4e3717396af0b

HTTP Headers

GET /android-icon-192x192.png HTTP/1.1
Host: roberteachfinal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberteachfinal.com/k4b9twnsolts
Cookie: __ddg1_=CBOvzqyE5UxibwRnP5UP; XSRF-TOKEN=eyJpdiI6IjF6MlVSNS9EeklkRzRTdE93NzN1UkE9PSIsInZhbHVlIjoiQnBMQy9VOExSSTcraXZkK0I5dGJzZDI3am1qNDJLZjZrd0d0STAwclRNbEpvTXB3d1hNYkllL2NxeGFrdDhZNTBQL05HdzZBWllYYnJrbmxSLysyYzFJSURwdGs3UlFiSTdhcW50WFoyQWJjWkd2ek85RWJEMnJpQmswVTZqaTUiLCJtYWMiOiI4OGU3Y2M2ZjUyYzYyMTJmMjQyZDYyOWJhODIxYTZmZDhjN2IyYjMxZmEyNzY5ZGQ0NTFhYTIwOTVjNjllNjM4IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IkswdzJaNEN5OVhaVFhDZVFUWXVNNkE9PSIsInZhbHVlIjoiU0w5UmorT1YrZ2J5VGVKY1g3WUFEV0pOSTIzWUtVT1lCYXdFSS9FOEtGa3RNNENBcFZrTVFrdC9OZ280aVV6bzVDSXhmZURlbjBQZW9MQlAxRWZMVW1jUnF3L0Nla1VhRVVHK256UjNPUlR1bkVGTnJJd1BpVVpiK2twSnVkRWEiLCJtYWMiOiJmMDQzN2EwNWMzZTk2ZTA5MmM2NTM2NDhmY2JkOWZiNGYxZjZhMzhlZmY4MzM4NTFkOTE5YjZjODUzNWFhZjhhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
date: Sat, 29 Jun 2024 21:32:11 GMT
content-type: image/png
content-length: 7068
last-modified: Mon, 14 Aug 2023 01:22:26 GMT
etag: "64d981d2-1b9c"
expires: Mon, 29 Jul 2024 21:32:11 GMT
cache-control: max-age=2592000
accept-ranges: bytes
age: 436633
ddg-cache-status: HIT
X-Firefox-Spdy: h2

roberteachfinal.com/favicon-16x16.png

186.2.163.111

200 OK

533 B

URL GET HTTP/2
roberteachfinal.com/favicon-16x16.png
IP
186.2.163.111:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerLet's Encrypt
Subjectroberteachfinal.com
Fingerprint6B:5F:26:72:10:3E:2D:60:9F:7E:C3:45:AD:06:EA:29:4F:11:84:4A
ValiditySat, 29 Jun 2024 20:30:35 GMT - Fri, 27 Sep 2024 20:30:34 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
533 B (533 bytes)
Hash
4a1c219d978909f413ca1b9a39f7523d
08859f796b01690ee81a13e4bcc0976f16c473ca
dc91f3be29e28fa5aa027f4c3165a5df794424e66c1627b90a204482b470f0be

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: roberteachfinal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberteachfinal.com/k4b9twnsolts
Cookie: __ddg1_=CBOvzqyE5UxibwRnP5UP; XSRF-TOKEN=eyJpdiI6IjF6MlVSNS9EeklkRzRTdE93NzN1UkE9PSIsInZhbHVlIjoiQnBMQy9VOExSSTcraXZkK0I5dGJzZDI3am1qNDJLZjZrd0d0STAwclRNbEpvTXB3d1hNYkllL2NxeGFrdDhZNTBQL05HdzZBWllYYnJrbmxSLysyYzFJSURwdGs3UlFiSTdhcW50WFoyQWJjWkd2ek85RWJEMnJpQmswVTZqaTUiLCJtYWMiOiI4OGU3Y2M2ZjUyYzYyMTJmMjQyZDYyOWJhODIxYTZmZDhjN2IyYjMxZmEyNzY5ZGQ0NTFhYTIwOTVjNjllNjM4IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IkswdzJaNEN5OVhaVFhDZVFUWXVNNkE9PSIsInZhbHVlIjoiU0w5UmorT1YrZ2J5VGVKY1g3WUFEV0pOSTIzWUtVT1lCYXdFSS9FOEtGa3RNNENBcFZrTVFrdC9OZ280aVV6bzVDSXhmZURlbjBQZW9MQlAxRWZMVW1jUnF3L0Nla1VhRVVHK256UjNPUlR1bkVGTnJJd1BpVVpiK2twSnVkRWEiLCJtYWMiOiJmMDQzN2EwNWMzZTk2ZTA5MmM2NTM2NDhmY2JkOWZiNGYxZjZhMzhlZmY4MzM4NTFkOTE5YjZjODUzNWFhZjhhIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
date: Sat, 29 Jun 2024 21:32:11 GMT
content-type: image/png
content-length: 533
last-modified: Mon, 14 Aug 2023 01:22:26 GMT
etag: "64d981d2-215"
expires: Mon, 29 Jul 2024 21:32:11 GMT
cache-control: max-age=2592000
accept-ranges: bytes
age: 436633
ddg-cache-status: HIT
X-Firefox-Spdy: h2

roberteachfinal.com/k4b9twnsolts

186.2.163.111

200 OK

142 kB

URL User Request GET HTTP/2
roberteachfinal.com/k4b9twnsolts
IP
186.2.163.111:443
ASN
#59692 IQWeb FZ-LLC

Certificate
IssuerLet's Encrypt
Subjectroberteachfinal.com
Fingerprint6B:5F:26:72:10:3E:2D:60:9F:7E:C3:45:AD:06:EA:29:4F:11:84:4A
ValiditySat, 29 Jun 2024 20:30:35 GMT - Fri, 27 Sep 2024 20:30:34 GMT

File type

Size
142 kB (142260 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	suspicious	Suspicious - Anti-debugging code

HTTP Headers

GET /k4b9twnsolts HTTP/1.1
Host: roberteachfinal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://voe.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
date: Thu, 04 Jul 2024 22:49:23 GMT
set-cookie: __ddg1_=CBOvzqyE5UxibwRnP5UP; Domain=.roberteachfinal.com; HttpOnly; Path=/; Expires=Fri, 04-Jul-2025 22:49:23 GMT
XSRF-TOKEN=eyJpdiI6IjF6MlVSNS9EeklkRzRTdE93NzN1UkE9PSIsInZhbHVlIjoiQnBMQy9VOExSSTcraXZkK0I5dGJzZDI3am1qNDJLZjZrd0d0STAwclRNbEpvTXB3d1hNYkllL2NxeGFrdDhZNTBQL05HdzZBWllYYnJrbmxSLysyYzFJSURwdGs3UlFiSTdhcW50WFoyQWJjWkd2ek85RWJEMnJpQmswVTZqaTUiLCJtYWMiOiI4OGU3Y2M2ZjUyYzYyMTJmMjQyZDYyOWJhODIxYTZmZDhjN2IyYjMxZmEyNzY5ZGQ0NTFhYTIwOTVjNjllNjM4IiwidGFnIjoiIn0%3D; expires=Fri, 05 Jul 2024 00:19:23 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned
voe_session=eyJpdiI6IkswdzJaNEN5OVhaVFhDZVFUWXVNNkE9PSIsInZhbHVlIjoiU0w5UmorT1YrZ2J5VGVKY1g3WUFEV0pOSTIzWUtVT1lCYXdFSS9FOEtGa3RNNENBcFZrTVFrdC9OZ280aVV6bzVDSXhmZURlbjBQZW9MQlAxRWZMVW1jUnF3L0Nla1VhRVVHK256UjNPUlR1bkVGTnJJd1BpVVpiK2twSnVkRWEiLCJtYWMiOiJmMDQzN2EwNWMzZTk2ZTA5MmM2NTM2NDhmY2JkOWZiNGYxZjZhMzhlZmY4MzM4NTFkOTE5YjZjODUzNWFhZjhhIiwidGFnIjoiIn0%3D; expires=Fri, 05 Jul 2024 00:19:23 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Figtree:wght@400;600;800&display=swap

142.250.74.106

200 OK

2.3 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Figtree:wght@400;600;800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://roberteachfinal.com/k4b9twnsolts
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC7:12:52:3A:BD:E0:73:20:AD:A8:5F:DF:12:DB:C6:DE:AF:63:88:6B
ValidityThu, 13 Jun 2024 16:32:33 GMT - Thu, 05 Sep 2024 16:32:32 GMT

File type
ASCII text, with very long lines (2391), with no line terminators
Size
2.3 kB (2337 bytes)
Hash
ddba7b8787290772e4475f68d088c2dc
9c967d600b474c8197044f47f61fcbfddd83613c
c8d913cb4a80ebf4bd6994233d28ef96270195c5bbc113120265b390cf993f8c

HTTP Headers

GET /css2?family=Figtree:wght@400;600;800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roberteachfinal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 04 Jul 2024 22:49:23 GMT
date: Thu, 04 Jul 2024 22:49:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (32)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN