sygox.com/images/education-online-books.png
104.21.76.10 310 kB URL sygox.com/images/education-online-books.png
IP 104.21.76.10:0
File type PNG image data, 725 x 905, 8-bit/color RGBA, non-interlaced\012- data
Size 310 kB (310455 bytes)
Hash effbcadb714b24e2cabb8d64097c8dcc
239e471a633629d027c050e19b441a6ce9fa77b4
3752073371d57443834b6693c146073d90c52015eff88f241fe2e1df21b8b203
GET /images/education-online-books.png HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: image/png
content-length: 310455
last-modified: Thu, 29 Dec 2022 07:38:01 GMT
etag: "4bcb7-5f0f29085e840"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kdzPf4aG0Qsut9o11Gy1LvK7uVfwxAKuyUtihGysCQjiwqh7GysPOL6Wi7yPVQL%2FFN9BAvCQcNv2skgril9UbIhzJRmXdcsNvEBKN9csnCK2V%2F9%2BpHNt0d8Ajno%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9d6d545688-OSL
alt-svc: h3=":443"; ma=86400
sygox.com/images/avatar/portrait-beautiful-young-woman-standing-grey-wall.jpg
104.21.76.10 24 kB URL sygox.com/images/avatar/portrait-beautiful-young-woman-standing-grey-wall.jpg
IP 104.21.76.10:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 500x334, components 3\012- data
Hash 2b00b22d0fc9400405e0a93d2c32581d
9ccb0bcdab3c25027740217df2a64ee2dc18ec93
1b5d07b73321be8f54ea2281e6f6520f4d730df706676895c99d7e988cb96ffc
GET /images/avatar/portrait-beautiful-young-woman-standing-grey-wall.jpg HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: image/jpeg
content-length: 24232
last-modified: Tue, 15 Mar 2022 07:33:50 GMT
etag: "5ea8-5da3cd16c9380"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X4890Oskc0TV9ooIJzKFh8vr4T0NU3Vy0Wjg9UQg%2FCp%2B00mJ6InLOV8mL9uhg%2BhXDrBI00rA%2Bqe1IXFcnNC%2F9YnrM5D%2FIR2%2FikosI8x8lPkJW3hMGJtUotIaN1s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9d6d565688-OSL
alt-svc: h3=":443"; ma=86400
sygox.com/images/avatar/portrait-young-redhead-bearded-male.jpg
104.21.76.10 26 kB URL sygox.com/images/avatar/portrait-young-redhead-bearded-male.jpg
IP 104.21.76.10:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 500x334, components 3\012- data
Hash 71e947fcdeaa5cf2a2a5dfb28e4921ec
cfa6b029f4437f5687bcd64227597584c47b7ab7
c3df7f5fc1f27d7f400fb7ec2fce0b202d0101c56f8251a3de2c9d3b580d0122
GET /images/avatar/portrait-young-redhead-bearded-male.jpg HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: image/jpeg
content-length: 25921
last-modified: Tue, 15 Mar 2022 10:21:33 GMT
etag: "6541-5da3f2939c540"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q7Y6KdKfhsPjuqQKvmdX66eow%2FBLc%2FWvRTqWdmHJ081YopOhDlnG7yMYyo7%2FrGoJhOVPRihaoL17lH2wN3vvlBju48vZdgUq2Po4VvH4PY%2FU204Rm63w9uiI3BE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9d6d585688-OSL
alt-svc: h3=":443"; ma=86400
sygox.com/images/avatar/pretty-blonde-woman.jpg
104.21.76.10 30 kB URL sygox.com/images/avatar/pretty-blonde-woman.jpg
IP 104.21.76.10:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 500x334, components 3\012- data
Hash 83251e8a0f137b34118d0eba449b5471
c8971e020d6ecc4fda7559ef7dfa1c64e7f36d62
b5c8cd944dd5dad57ce0672dfca04123aabd9e35b03052467610d34536518411
GET /images/avatar/pretty-blonde-woman.jpg HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: image/jpeg
content-length: 30052
last-modified: Mon, 14 Mar 2022 04:47:17 GMT
etag: "7564-5da265ff41f40"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lbjgk2bg%2FESYd9hu8NmRySEBUqiiDraxl76xyWIyf5pJRZ8tz2AV92tGetxHU8CBI4MWVrHZ%2F1QeaA3unLRmshZsMzT6ppqZ98OZ3fAqosI779mQT0uBZ%2BE2GZg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9d6d5d5688-OSL
alt-svc: h3=":443"; ma=86400
sygox.com/images/avatar/studio-portrait-emotional-happy-funny-smiling-boyfriend.jpg
104.21.76.10 26 kB URL sygox.com/images/avatar/studio-portrait-emotional-happy-funny-smiling-boyfriend.jpg
IP 104.21.76.10:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1000], progressive, precision 8, 500x334, components 3\012- data
Hash 2c1eba2ef33f5d5dff9e8dd2b04073ce
cb767536742c4844448bb69aa3da8858c77dcf63
f253622fdd5a4f20f46b85f188de785b08302a62164f82721070535a4c9acf04
GET /images/avatar/studio-portrait-emotional-happy-funny-smiling-boyfriend.jpg HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: image/jpeg
content-length: 26473
last-modified: Mon, 14 Mar 2022 04:47:35 GMT
etag: "6769-5da266106c7c0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z7imT0aaSwbhnhzf2ETZ1tT0U2zx6tD1%2Btt2sH3vYxeSx%2BghPQz8JYIjJm7P3%2B52oLp%2F6kPEjXHVwCYOYE4hjR%2FbyMRJ0khHUG3ozOiCpxlsDpzzZY7DdsLdSZ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9d6d5f5688-OSL
alt-svc: h3=":443"; ma=86400
sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
104.21.76.10 224 kB URL sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
IP 104.21.76.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size 224 kB (223812 bytes)
Hash 9b8cd90373262c0154741aca9ae7a8fd
5ba88aa488295a547daf3d3053301552530e91cc
61940137570bddc088bb3617487a54f20d9935b2a89a419492c704d8912c85ad
GET /file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:39:25 GMT
content-type: text/html;charset=UTF-8
x-powered-by: PHP/8.1.2
cache-control: no-store
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VOHWHnNvms9wK0WApEu%2FOa0856MDFrQkd2uCFAMoicQGIeiRbXCBZt4YjxRVRbtzuz0hgJt82126i%2B%2FfdQ6c1JK9r62s49bx0c9VbpKkDH4I%2BQoG0T%2FZRWDvOqA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b98d9d15689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sygox.com/images/portrait-mature-smiling-authoress-sitting-desk.jpg
104.21.76.10 246 kB URL sygox.com/images/portrait-mature-smiling-authoress-sitting-desk.jpg
IP 104.21.76.10:0
File type JPEG image data, progressive, precision 8, 1200x800, components 3\012- data
Size 246 kB (245913 bytes)
Hash c2145d3454a8746683132d9e811983f1
8370e814fdff455fa198d7acb0842ef4f99e5911
0cb646bdf34b06c9bd365078812099e41aae0de5d75d71e6f822be0e76e64fa4
GET /images/portrait-mature-smiling-authoress-sitting-desk.jpg HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: image/jpeg
content-length: 245913
last-modified: Mon, 02 Jan 2023 03:10:16 GMT
etag: "3c099-5f13f4a56f600"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L2BdCnxd6AQKWpFb3HoRc9egEUmEGr1dTjk4jXzjQD7hXuZJLxmZWGefix4gdteGHV1EVFKLlrN2Vp1GVd4P8JjmL9EeiO1nfPvFXZsEBbe8aERMLsaDfnQnQik%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9d7d675688-OSL
alt-svc: h3=":443"; ma=86400
sygox.com/images/businessman-sitting-by-table-cafe.jpg
104.21.76.10 271 kB URL sygox.com/images/businessman-sitting-by-table-cafe.jpg
IP 104.21.76.10:0
File type JPEG image data, progressive, precision 8, 1920x1280, components 3\012- data
Size 271 kB (271312 bytes)
Hash 51dc9f63ce344cc166d6f2ae3f9c998e
079bcd439c8959ab809d38a8d739fb04b6e83fcf
061f46b2950582a059e667f2123474063a59a4422aadfd25c84ff007a45b8b14
GET /images/businessman-sitting-by-table-cafe.jpg HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: image/jpeg
content-length: 271312
last-modified: Mon, 02 Jan 2023 03:09:46 GMT
etag: "423d0-5f13f488d3280"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0p9jLuNAv2zWFCZxNQ6w3gLLs1GIfqNKIM5hV6pbnQvvnMFV2dW%2FJBoHTXSGNF%2BHY1%2FLHtC68j%2F5gmT5R%2BTWVWkLPk%2B6kO4MD7LfMDYMlglYXTK3APzXHCeOIEE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9d7d695688-OSL
alt-svc: h3=":443"; ma=86400
sygox.com/images/circle-scatter-haikei.png
104.21.76.10 28 kB URL sygox.com/images/circle-scatter-haikei.png
IP 104.21.76.10:0
File type PNG image data, 562 x 1000, 8-bit/color RGBA, non-interlaced\012- data
Hash 00fa544a8f7b68ecd2fa2269a8b29baf
f95d1fba2ca79d9eb64003c72b6d4124284b8006
6b1341f874cd118bc840c9e3d0095605718088a53c324caeed4c30381b88de61
GET /images/circle-scatter-haikei.png HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/css/templatemo-ebook-landing.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: image/png
content-length: 27975
last-modified: Mon, 02 Jan 2023 02:34:34 GMT
etag: "6d47-5f13ecaaaa280"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8I%2ByqVe%2BvzzM4v1CG%2BoMf5BbcnVrGLnt8kQW8Yyn748%2BoxEO51bFZJxuSLnS5fJ0UWz4CSWt8McD8tutRJK59yt46OnJbcVX8Uy7qKwU10YoCWRtXpRygqSr9jU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9f8ef05688-OSL
alt-svc: h3=":443"; ma=86400
sygox.com/fonts/bootstrap-icons.woff2?8d200481aa7f02a2d63a331fc782cfaf
104.21.76.10 112 kB URL sygox.com/fonts/bootstrap-icons.woff2?8d200481aa7f02a2d63a331fc782cfaf
IP 104.21.76.10:0
File type Web Open Font Format (Version 2), TrueType, length 112440, version 1.0\012- data
Size 112 kB (112440 bytes)
Hash 31e1300d419245fd27614630601dc74d
3a284b0618771f29da8eb6be900e99439253dce0
c69bf1ccae5f13b5aa4345dcfeb209a8148ad0bfa1e0678b93792aae0429c764
GET /fonts/bootstrap-icons.woff2?8d200481aa7f02a2d63a331fc782cfaf HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/css/bootstrap-icons.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: font/woff2
content-length: 112440
last-modified: Sat, 16 Jul 2022 23:30:40 GMT
etag: "1b738-5e3f485cec800"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VWJnm5tWd%2BVO1RfOFZ1iqqp3b6ldgLD6Rqfle7g6eRuwRCVHGNehAINe3MdPHFpkWDUUiI6d4GM4S9UWNGECvioG39D58Vlf7Dw%2BsE8eIOlQyWhdCK3ov3FqMPc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9f9ef85688-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2
216.58.207.227 51 kB URL fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 51260, version 1.0\012- data
Hash 74bf64b24d4a4b52dfa338d65eeaf6ee
4665e45f8f77481f978fba203ab13a7c2fa94444
9984b7beae79d0eb3f15475f9ec1e71063caff4019d5f6ee15ed56a6716c56ae
GET /s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sygox.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 51260
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 20:44:24 GMT
expires: Tue, 03 Dec 2024 20:44:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:46:12 GMT
content-type: font/woff2
age: 6902
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2
216.58.207.227 51 kB URL fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 51260, version 1.0\012- data
Hash 74bf64b24d4a4b52dfa338d65eeaf6ee
4665e45f8f77481f978fba203ab13a7c2fa94444
9984b7beae79d0eb3f15475f9ec1e71063caff4019d5f6ee15ed56a6716c56ae
GET /s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sygox.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 51260
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 20:44:24 GMT
expires: Tue, 03 Dec 2024 20:44:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:46:12 GMT
content-type: font/woff2
age: 6902
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2
216.58.207.227 51 kB URL fonts.gstatic.com/s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 51260, version 1.0\012- data
Hash 74bf64b24d4a4b52dfa338d65eeaf6ee
4665e45f8f77481f978fba203ab13a7c2fa94444
9984b7beae79d0eb3f15475f9ec1e71063caff4019d5f6ee15ed56a6716c56ae
GET /s/unbounded/v7/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sygox.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 51260
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 20:44:24 GMT
expires: Tue, 03 Dec 2024 20:44:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:46:12 GMT
content-type: font/woff2
age: 6902
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sygox.com/favicon.ico
104.21.76.10 405 B IP 104.21.76.10:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 46f10b9bddf64a1972eb021669fc2b9e
c49a54787dc40e0e53c12bf61f2e5ef8d8ecc929
a16bc7fb2da1bdf2115b7416397fc4b8f2408e338b7a791b737a67d18a866628
GET /favicon.ico HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 22:39:27 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iZpwKEsWQD6YbyssfP3WX1jcKhLtoiDYaB%2FhfgtVGBFOprMKNE2uZ27l%2F%2FhkNqDkJojcw%2BI4WtDDSv07CByCjZtiV%2F%2FQfdoZad77zHf6Af%2FCUNUItvhCZgBqWxI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078ba128375688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sygox.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
104.21.76.10 1.2 kB URL sygox.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 104.21.76.10:0
File type gzip compressed data, from Unix\012- data
Hash fe01763c4d065a481defa7d6b12b1637
701b18f78b9adf248c773385c20091964f423b4f
9d4aa984b63ff844f14a53d2c9aa1f3e99048fa334cd7717088330a8deca67aa
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: sygox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/file.zip?c=AP1UbmXUSwUAnlkCAE1YFwASAAAAAACx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:39:26 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 16:06:21 GMT
etag: W/"65660ffd-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cs3ttk%2Bxel3Bnq3e2qbpPTLl1nIaKRrfF15zDhzZTtPxcCxuxyrb%2F7yGfcDSAyllqwmVX8ZUEKXk3LtWYufUQ%2BU9voea9VnFDQMxC9JBk4RwB3EttBF8%2FXQaE7Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83078b9d7d6a5688-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 06 Dec 2023 22:39:26 GMT
cache-control: max-age=172800, public
content-encoding: gzip
mdakky.com/rpe?a=1&s=1&act=18&src=2&p=1138759&st=1177780&wd=479466&d=ptbqre.com&tpl=32&rnd=0.664357265787262&sbid=347319&sbid2=
185.162.85.1200 OK 0 B URL GET HTTP/2 mdakky.com/rpe?a=1&s=1&act=18&src=2&p=1138759&st=1177780&wd=479466&d=ptbqre.com&tpl=32&rnd=0.664357265787262&sbid=347319&sbid2=
IP 185.162.85.1:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://ptbqre.com/great?h=waWQiOjExMzg3NTksInNpZCI6MTE3Nzc4MCwid2lkIjo0Nzk0NjYsInNyYyI6Mn0=eyJ&si1=347319&clickid=AB9VbmW3TAUAZF4CAE5PFwAMAAAAAACC
Certificate IssuerLet's Encrypt
Subjectmdakky.com
FingerprintAD:81:3E:DA:20:71:A7:CF:FE:91:99:0A:CA:99:24:E4:8D:7B:86:8C
ValidityThu, 12 Oct 2023 14:32:06 GMT - Wed, 10 Jan 2024 14:32:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rpe?a=1&s=1&act=18&src=2&p=1138759&st=1177780&wd=479466&d=ptbqre.com&tpl=32&rnd=0.664357265787262&sbid=347319&sbid2= HTTP/1.1
Host: mdakky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ptbqre.com
DNT: 1
Connection: keep-alive
Referer: https://ptbqre.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 04 Dec 2023 22:39:28 GMT
content-length: 0
accept-ch: Sec-CH-UA-Platform-Version
access-control-allow-origin: *
X-Firefox-Spdy: h2
ecrwqu.com/phtbload?a=1&e=aeyJwaWQiOjExMzg3NTksInNpZCI6MTE3Nzc4MCwid2lkIjo0Nzk0NjZ9
185.162.85.3200 OK 550 B URL GET HTTP/2 ecrwqu.com/phtbload?a=1&e=aeyJwaWQiOjExMzg3NTksInNpZCI6MTE3Nzc4MCwid2lkIjo0Nzk0NjZ9
IP 185.162.85.3:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://ptbqre.com/great?h=waWQiOjExMzg3NTksInNpZCI6MTE3Nzc4MCwid2lkIjo0Nzk0NjYsInNyYyI6Mn0=eyJ&si1=347319&clickid=AB9VbmW3TAUAZF4CAE5PFwAMAAAAAACC
Certificate IssuerLet's Encrypt
Subjectecrwqu.com
Fingerprint47:45:B8:7D:4A:FC:D8:6D:B5:BA:0C:F0:19:2B:20:47:1E:FB:C9:BF
ValidityTue, 12 Sep 2023 03:46:32 GMT - Mon, 11 Dec 2023 03:46:31 GMT
File type gzip compressed data, from Unix\012- data
Hash dbc46b048176fac54a6c8f7fd082d1eb
d7269ab257dd1c7fec3723626f4d3355f82c117a
2e65c397793271d405d78a264f933424477b1dbd5de9e01b3107ec5102a0eff1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /phtbload?a=1&e=aeyJwaWQiOjExMzg3NTksInNpZCI6MTE3Nzc4MCwid2lkIjo0Nzk0NjZ9 HTTP/1.1
Host: ecrwqu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ptbqre.com/
Origin: https://ptbqre.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Mon, 04 Dec 2023 22:39:29 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Platform-Version
content-encoding: gzip
X-Firefox-Spdy: h2
track.wbdpnz.com/34cb433c-770b-4be0-a140-affedeca6aad?source_id=a479466&campaign_id=877656&country=NO&browser=Firefox&zone_id=a479466&creative_id={CREATIVE_ID}&format=pops&os=Windows&partner_id=1138759&sub_period={sub_period}&cost=0.0001&click_id=a2_4956443987459985032_479466_2_0
18.158.88.249302 Found 0 B URL User Request GET HTTP/2 track.wbdpnz.com/34cb433c-770b-4be0-a140-affedeca6aad?source_id=a479466&campaign_id=877656&country=NO&browser=Firefox&zone_id=a479466&creative_id={CREATIVE_ID}&format=pops&os=Windows&partner_id=1138759&sub_period={sub_period}&cost=0.0001&click_id=a2_4956443987459985032_479466_2_0
IP 18.158.88.249:443
Certificate IssuerLet's Encrypt
Subjecttrack.wbdpnz.com
Fingerprint5B:41:45:98:75:8A:FA:42:6A:97:D0:50:E3:90:F1:C6:E2:2E:DE:45
ValidityTue, 21 Nov 2023 06:55:54 GMT - Mon, 19 Feb 2024 06:55:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /34cb433c-770b-4be0-a140-affedeca6aad?source_id=a479466&campaign_id=877656&country=NO&browser=Firefox&zone_id=a479466&creative_id={CREATIVE_ID}&format=pops&os=Windows&partner_id=1138759&sub_period={sub_period}&cost=0.0001&click_id=a2_4956443987459985032_479466_2_0 HTTP/1.1
Host: track.wbdpnz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ptbqre.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 04 Dec 2023 22:39:29 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://mymemberamore.life/?u=875kd01&o=46zmlec&t=a479466&cid=w1o6t81rg1fhmegt2192kag4
pragma: no-cache
set-cookie: 34cb433c-770b-4be0-a140-affedeca6aad-v4=i475jLr388KqJaPuDZBA-3hbLbk8XiKI0eDbWdIsJV0; Max-Age=86400; Expires=Tue, 05-Dec-2023 22:39:29 GMT; Domain=track.wbdpnz.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=lSZe4mTKtJ%2FBCB4DVle2cqgKAsQ7xOxSM7xC1Xt34fsgOJhP0lYH9afKtUGqlXSIreFgLJyKCRDj0YEFH%2BavREAFpSeAkZohrp%2B40UmkxAgensvKTh1Nf6lctegzSIZRVziikGNORO408Kvs7BFb5g%3D%3D; Max-Age=31536000; Expires=Tue, 03-Dec-2024 22:39:29 GMT; Domain=track.wbdpnz.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
ecrwqu.com/cuclc?aid=4956443987459985032&t=1701729569&s=877656
185.162.85.14302 Found 0 B URL User Request GET HTTP/2 ecrwqu.com/cuclc?aid=4956443987459985032&t=1701729569&s=877656
IP 185.162.85.14:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectecrwqu.com
Fingerprint47:45:B8:7D:4A:FC:D8:6D:B5:BA:0C:F0:19:2B:20:47:1E:FB:C9:BF
ValidityTue, 12 Sep 2023 03:46:32 GMT - Mon, 11 Dec 2023 03:46:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cuclc?aid=4956443987459985032&t=1701729569&s=877656 HTTP/1.1
Host: ecrwqu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ptbqre.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.18.0
date: Mon, 04 Dec 2023 22:39:29 GMT
content-type: text/html; charset=utf-8
content-length: 410
location: https://track.wbdpnz.com/34cb433c-770b-4be0-a140-affedeca6aad?source_id=a479466&campaign_id=877656&country=NO&browser=Firefox&zone_id=a479466&creative_id={CREATIVE_ID}&format=pops&os=Windows&partner_id=1138759&sub_period={sub_period}&cost=0.0001&click_id=a2_4956443987459985032_479466_2_0
X-Firefox-Spdy: h2
mymemberamore.life/?u=875kd01&o=46zmlec&t=a479466&cid=w1o6t81rg1fhmegt2192kag4
0.0.0.0 0 B URL User Request GET mymemberamore.life/?u=875kd01&o=46zmlec&t=a479466&cid=w1o6t81rg1fhmegt2192kag4
IP 0.0.0.0:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?u=875kd01&o=46zmlec&t=a479466&cid=w1o6t81rg1fhmegt2192kag4 HTTP/1.1
Host: mymemberamore.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ptbqre.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
3jashd11.monster/z2rFQ0ef07ae76d225cb15dc8ec2fe1ac9504dfb3bf06
188.72.236.39302 Found 22 kB URL User Request GET HTTP/1.1 3jashd11.monster/z2rFQ0ef07ae76d225cb15dc8ec2fe1ac9504dfb3bf06
IP 188.72.236.39:443
Certificate IssuerLet's Encrypt
Subject3jashd11.monster
Fingerprint5A:A4:3E:CC:B4:E6:7F:DE:E7:DC:39:13:D3:52:2E:B8:51:CF:8F:D7
ValidityWed, 25 Oct 2023 05:39:19 GMT - Tue, 23 Jan 2024 05:39:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /z2rFQ0ef07ae76d225cb15dc8ec2fe1ac9504dfb3bf06 HTTP/1.1
Host: 3jashd11.monster
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sygox.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 04 Dec 2023 22:39:28 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 178
Connection: keep-alive
Accept-Ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
Location: https://ptbqre.com/great?h=waWQiOjExMzg3NTksInNpZCI6MTE3Nzc4MCwid2lkIjo0Nzk0NjYsInNyYyI6Mn0=eyJ&si1=347319&clickid=AB9VbmW3TAUAZF4CAE5PFwAMAAAAAACC
ptbqre.com/great?h=waWQiOjExMzg3NTksInNpZCI6MTE3Nzc4MCwid2lkIjo0Nzk0NjYsInNyYyI6Mn0=eyJ&si1=347319&clickid=AB9VbmW3TAUAZF4CAE5PFwAMAAAAAACC
185.162.87.220200 OK 22 kB URL User Request GET HTTP/2 ptbqre.com/great?h=waWQiOjExMzg3NTksInNpZCI6MTE3Nzc4MCwid2lkIjo0Nzk0NjYsInNyYyI6Mn0=eyJ&si1=347319&clickid=AB9VbmW3TAUAZF4CAE5PFwAMAAAAAACC
IP 185.162.87.220:443
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectptbqre.com
Fingerprint09:CC:84:A3:41:6D:23:34:9E:2F:23:D4:D3:AB:02:B0:C1:9D:DD:95
ValidityFri, 27 Oct 2023 04:12:54 GMT - Thu, 25 Jan 2024 04:12:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /great?h=waWQiOjExMzg3NTksInNpZCI6MTE3Nzc4MCwid2lkIjo0Nzk0NjYsInNyYyI6Mn0=eyJ&si1=347319&clickid=AB9VbmW3TAUAZF4CAE5PFwAMAAAAAACC HTTP/1.1
Host: ptbqre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sygox.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.0
date: Mon, 04 Dec 2023 22:39:28 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: truniq=1; expires=Tue, 05-Dec-2023 22:39:28 GMT; Max-Age=86400; path=/; domain=ptbqre.com
x-zone: eu3
content-encoding: gzip
X-Firefox-Spdy: h2