Report - 178.128.227.28/bins/oxy.mpsl

Report Overview

Submitted URL
178.128.227.28/bins/oxy.mpsl
IP
178.128.227.28
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-04-19 09:03:30
Access
public
Website Title
Skyline Community Hub | Committed to Building and Supporting Vibrant Communities
Final URL
178.128.227.28/bins/oxy.mpsl
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
178.128.227.28	unknown	unknown	2019-01-14	2024-03-22	1.5 kB	1.3 MB	178.128.227.28
cdn.ampproject.org	329	2015-08-31	2015-10-09	2024-04-18	7.9 kB	284 kB	142.250.74.65
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-04-18	1.0 kB	110 kB	104.18.11.207
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-18	1.1 kB	30 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	178.128.227.28	Sinkholed
2024-04-19	medium	178.128.227.28	Sinkholed
2024-04-19	medium	178.128.227.28	Sinkholed
2024-04-19	medium	178.128.227.28	Sinkholed

ThreatFox

No alerts detected

JavaScript (16)

	URL	Size	First Seen	Last Seen
	cdn.ampproject.org/rtv/012404021934000/v0/amp-loader-0.1.js	13 kB	2024-04-17	2024-04-24
Pretty URL cdn.ampproject.org/rtv/012404021934000/v0/amp-loader-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 06:07:54 Last Seen2024-04-24 17:57:24 Times Seen30 Hash 99d0b8fcdea2c5995139abaf283392bd fbd6bc486116a9ffbb8662b6a952dc0aeba10ae7 15d2fe411597796d07b83bdddc7f074fef90ab99bc47b7e85a020140459b8251 Loading...

	cdn.ampproject.org/v0/amp-image-lightbox-0.1.js	38 kB	2024-04-17	2024-04-19
Pretty URL cdn.ampproject.org/v0/amp-image-lightbox-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:50 Last Seen2024-04-19 11:03:32 Times Seen6 Hash 79f3d7251328ea3a3f5246f78435c71f 1c23418225b4b286fdf40700f4e8847f89556723 1c618b3b2c2e09d394b7716f656640416b59d82325fca182f28b89300c8ce1b5 Loading...

	cdn.ampproject.org/v0/amp-carousel-0.1.js	39 kB	2024-04-17	2024-04-24
Pretty URL cdn.ampproject.org/v0/amp-carousel-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:50 Last Seen2024-04-24 17:57:24 Times Seen12 Hash 69d63049dba70c68e0181e0a06a5678a 2840f0aafcdc3ac970c01bff920cda78d427e53c 5919942782d07ebce07c9d52dccfb0bd85cffa1d829d3d753f843ecd251dc4e6 Loading...

	cdn.ampproject.org/v0/amp-lightbox-0.1.js	27 kB	2024-04-17	2024-04-19
Pretty URL cdn.ampproject.org/v0/amp-lightbox-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:50 Last Seen2024-04-19 11:03:32 Times Seen8 Hash 2533012f768c0c8e771d91c5caa4863f aa6e3b662b6a54378b31eaf12b11660d5b0353a8 4e6025d27d3facbd4275f97ab219bf3d1d106eca23fae69fd7d26b08aea947d1 Loading...

	cdn.ampproject.org/v0/amp-lightbox-gallery-0.1.js	67 kB	2024-04-17	2024-04-19
Pretty URL cdn.ampproject.org/v0/amp-lightbox-gallery-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:50 Last Seen2024-04-19 11:03:32 Times Seen8 Hash f2935fde177486dba0de755993d1bb53 9d4f13e82149a9d0f4f2eb99bedaa5892b1a90a3 a8ffe327a8e67cd61147fdb7b2dc971bc8e8b50455cebe276cc3cc382b74d335 Loading...

	cdn.ampproject.org/rtv/012404021934000/v0/amp-crypto-polyfill-0.1.js	8.9 kB	2024-04-17	2024-04-19
Pretty URL cdn.ampproject.org/rtv/012404021934000/v0/amp-crypto-polyfill-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:50 Last Seen2024-04-19 11:03:32 Times Seen6 Hash cc83bae0758e14dc712188ce4b3533fa ce444211ce66938d58ad4146667b0a5a3392efcf 478180e4d2c115c8c2d5638d441cb81d25ec6bd6530de7fdd3b5b5d2265b3944 Loading...

	cdn.ampproject.org/v0/amp-bind-0.1.js	52 kB	2024-04-17	2024-04-19
Pretty URL cdn.ampproject.org/v0/amp-bind-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:50 Last Seen2024-04-19 11:03:32 Times Seen6 Hash 2f08791447c46be16a48c200af92baa8 10c7872f4a87367025f9f96c95f30c786d4df9e9 500dba1b3200e58e45c9f402cdaeb957cac9583dc6f5e5c6f89e2f14822e2845 Loading...

	cdn.ampproject.org/v0/amp-mustache-0.2.js	46 kB	2024-04-17	2024-04-21
Pretty URL cdn.ampproject.org/v0/amp-mustache-0.2.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:50 Last Seen2024-04-21 20:35:31 Times Seen8 Hash cdfe984677c89c4ee0aa53157e5c116c 533a8cee3a22cc2d058f227fe829320807f9ff6b 6166cacf6f6e07c81d13a069c22019ffbf4503ba91736a54527bd106ee801084 Loading...

	cdn.ampproject.org/v0/amp-selector-0.1.js	10 kB	2024-04-17	2024-04-19
Pretty URL cdn.ampproject.org/v0/amp-selector-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:50 Last Seen2024-04-19 11:03:32 Times Seen6 Hash 19cd170e6a277d42f75441b294b9154c 5526e9d6e73fb6bb47ebeed041a6099e70ccf897 51c6d2b8bf1b31ed38a40e4a706d0efd20bf4bb37a0b811afe1a2e25cd607afa Loading...

	cdn.ampproject.org/v0/amp-accordion-0.1.js	18 kB	2024-04-17	2024-04-24
Pretty URL cdn.ampproject.org/v0/amp-accordion-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:51 Last Seen2024-04-24 17:57:24 Times Seen16 Hash 5b25cb924ef9e32af7e51d2f55de8643 d373f3db056ea718b66096e7349570bbca952cc1 271b2b33082ea4ad5f0d06fa04191728a71f2741783e3e13396a3d9ae5e27d1a Loading...

	cdn.ampproject.org/v0/amp-analytics-0.1.js	113 kB	2024-04-16	2024-04-24
Pretty URL cdn.ampproject.org/v0/amp-analytics-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 09:56:13 Last Seen2024-04-24 20:09:25 Times Seen65 Hash 5e43f5de8c1a9080b124dd71e70c2b29 e080c2ad4901614213c48940f53e3b0496703e87 c13ec83c4fd0a81e262ff6ac9e3562ddc38a070e5eb0892b0ac93f179ffef6ba Loading...

	cdn.ampproject.org/v0.js	285 kB	2024-04-17	2024-04-24
Pretty URL cdn.ampproject.org/v0.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 06:07:54 Last Seen2024-04-24 17:57:24 Times Seen33 Hash 0aa2be56e68f4827cd30170c5219a044 cd63be95f241680fdbb1a5db740d1f9e20782b59 2178c2c7039c0f565fd638053998d92fdeba670af287085c106b4b54139f5f3a Loading...

	cdn.ampproject.org/rtv/012404021934000/v0/amp-auto-lightbox-0.1.js	7.8 kB	2024-04-17	2024-04-24
Pretty URL cdn.ampproject.org/rtv/012404021934000/v0/amp-auto-lightbox-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 06:07:54 Last Seen2024-04-24 17:57:24 Times Seen30 Hash 5a1fe5027acdaaa505a2f65faf624e3d 8e71ce231ebea0015fde9aad9780a31abc341ef1 20f0500c17c818b7393cdd055cd8a8364f264fe1785a726f10af0fc352409f11 Loading...

	cdn.ampproject.org/v0/amp-form-0.1.js	51 kB	2024-04-17	2024-04-21
Pretty URL cdn.ampproject.org/v0/amp-form-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:51 Last Seen2024-04-21 20:35:31 Times Seen10 Hash 35cee9581f7b7d4699600fc55e88c808 be8ae42da4d815083d782e2cdd6179deb87ef2b0 1743e2aa6355ad08f7347ed8cc9b8c65eea46c11bce31ac296cad1e6b32256a1 Loading...

	cdn.ampproject.org/v0/amp-iframe-0.1.js	26 kB	2024-04-17	2024-04-24
Pretty URL cdn.ampproject.org/v0/amp-iframe-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:51 Last Seen2024-04-24 17:57:24 Times Seen10 Hash 73b936413d95143b5d2a99e6d8380e83 6dfae5bf80c719971580d998b21d76232777c188 d567cdd74995e45b15c2f5d9db5d530c976459d48376a3d876b494ae2c090a4b Loading...

	cdn.ampproject.org/v0/amp-sidebar-0.1.js	31 kB	2024-04-17	2024-04-24
Pretty URL cdn.ampproject.org/v0/amp-sidebar-0.1.js IP 142.250.74.65 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 09:18:50 Last Seen2024-04-24 10:38:14 Times Seen10 Hash 37ddb7aa87da5b1895431337d8920448 80c31a8686b1f63842f875dd844724d3ee6bfcfc 05623aa89d24b81a0bb936408738c9f59b17ea9dea05e960b04cf444635f489a Loading...

HTTP Transactions (26)

URL IP Response Size

178.128.227.28/bins/oxy.mpsl

178.128.227.28

200 OK

11 kB

URL User Request GET HTTP/1.1
178.128.227.28/bins/oxy.mpsl
IP
178.128.227.28:80
ASN
#14061 DIGITALOCEAN-ASN

File type
HTML document, Unicode text, UTF-8 text, with very long lines (3713)
Size
11 kB (11029 bytes)
Hash
a4ab5028ce0585de6907321799083072
02d7dd5fe8a6c386a8b359aa6b0ecb7a3ecb1d51
50fe68ee290ac4756895623fbe3f9605a9f534526d9c6ff0025352d863585155

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /bins/oxy.mpsl HTTP/1.1
Host: 178.128.227.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 09:03:04 GMT
Server: Apache/2.4.59 (Ubuntu)
Set-Cookie: contact-form-meta=Name%3Atrue%3Bhp-Surname%3Afalse%3BPhone%3Afalse%3BEmail%3Atrue%3BMessage%3Atrue%3BEmailMarketingConsent%3Afalse%3B; expires=Fri, 19-Apr-2024 09:33:04 GMT; Max-Age=1800
Strict-Transport-Security: max-age=16070400;
Upgrade: h2
Connection: Upgrade, Keep-Alive
Cache-Control: max-age=0
Expires: Fri, 19 Apr 2024 09:03:04 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11029
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8

cdn.ampproject.org/v0/amp-accordion-0.1.js

142.250.74.65

200 OK

5.8 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-accordion-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (17484)
Size
5.8 kB (5838 bytes)
Hash
5b25cb924ef9e32af7e51d2f55de8643
d373f3db056ea718b66096e7349570bbca952cc1
271b2b33082ea4ad5f0d06fa04191728a71f2741783e3e13396a3d9ae5e27d1a

HTTP Headers

GET /v0/amp-accordion-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 5838
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "37b5d052ddf4213b"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-form-0.1.js

142.250.74.65

200 OK

15 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-form-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (50567)
Size
15 kB (14976 bytes)
Hash
35cee9581f7b7d4699600fc55e88c808
be8ae42da4d815083d782e2cdd6179deb87ef2b0
1743e2aa6355ad08f7347ed8cc9b8c65eea46c11bce31ac296cad1e6b32256a1

HTTP Headers

GET /v0/amp-form-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 14976
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "ea539e0a296b86a4"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-image-lightbox-0.1.js

142.250.74.65

200 OK

11 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-image-lightbox-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (37849)
Size
11 kB (10890 bytes)
Hash
79f3d7251328ea3a3f5246f78435c71f
1c23418225b4b286fdf40700f4e8847f89556723
1c618b3b2c2e09d394b7716f656640416b59d82325fca182f28b89300c8ce1b5

HTTP Headers

GET /v0/amp-image-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 10890
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "f2cecb50ae04c3c8"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-carousel-0.1.js

142.250.74.65

200 OK

12 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-carousel-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (38603)
Size
12 kB (11523 bytes)
Hash
69d63049dba70c68e0181e0a06a5678a
2840f0aafcdc3ac970c01bff920cda78d427e53c
5919942782d07ebce07c9d52dccfb0bd85cffa1d829d3d753f843ecd251dc4e6

HTTP Headers

GET /v0/amp-carousel-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 11523
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "31c2ffa54c0100e0"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-lightbox-0.1.js

142.250.74.65

200 OK

8.5 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-lightbox-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (26547)
Size
8.5 kB (8513 bytes)
Hash
2533012f768c0c8e771d91c5caa4863f
aa6e3b662b6a54378b31eaf12b11660d5b0353a8
4e6025d27d3facbd4275f97ab219bf3d1d106eca23fae69fd7d26b08aea947d1

HTTP Headers

GET /v0/amp-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 8513
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "6ec9314797ac5c64"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-iframe-0.1.js

142.250.74.65

200 OK

8.9 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-iframe-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (25617)
Size
8.9 kB (8938 bytes)
Hash
73b936413d95143b5d2a99e6d8380e83
6dfae5bf80c719971580d998b21d76232777c188
d567cdd74995e45b15c2f5d9db5d530c976459d48376a3d876b494ae2c090a4b

HTTP Headers

GET /v0/amp-iframe-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 8938
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "e7de80d17b4ab6ad"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-lightbox-gallery-0.1.js

142.250.74.65

200 OK

19 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-lightbox-gallery-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65526)
Size
19 kB (19068 bytes)
Hash
f2935fde177486dba0de755993d1bb53
9d4f13e82149a9d0f4f2eb99bedaa5892b1a90a3
a8ffe327a8e67cd61147fdb7b2dc971bc8e8b50455cebe276cc3cc382b74d335

HTTP Headers

GET /v0/amp-lightbox-gallery-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 19068
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "85b5032fc3a4767c"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-analytics-0.1.js

142.250.74.65

200 OK

32 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-analytics-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (65534)
Size
32 kB (32190 bytes)
Hash
5e43f5de8c1a9080b124dd71e70c2b29
e080c2ad4901614213c48940f53e3b0496703e87
c13ec83c4fd0a81e262ff6ac9e3562ddc38a070e5eb0892b0ac93f179ffef6ba

HTTP Headers

GET /v0/amp-analytics-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 32190
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "be1febb0b481b7bb"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-bind-0.1.js

142.250.74.65

200 OK

16 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-bind-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (51440)
Size
16 kB (16372 bytes)
Hash
2f08791447c46be16a48c200af92baa8
10c7872f4a87367025f9f96c95f30c786d4df9e9
500dba1b3200e58e45c9f402cdaeb957cac9583dc6f5e5c6f89e2f14822e2845

HTTP Headers

GET /v0/amp-bind-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 16372
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "7c651a9fc86966bd"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0.js

142.250.74.65

200 OK

73 kB

URL GET HTTP/2
cdn.ampproject.org/v0.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64654)
Size
73 kB (73102 bytes)
Hash
0aa2be56e68f4827cd30170c5219a044
cd63be95f241680fdbb1a5db740d1f9e20782b59
2178c2c7039c0f565fd638053998d92fdeba670af287085c106b4b54139f5f3a

HTTP Headers

GET /v0.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 73102
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=3000, stale-while-revalidate=1206600
etag: "aa2c955478cddb65"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-mustache-0.2.js

142.250.74.65

200 OK

15 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-mustache-0.2.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (45595)
Size
15 kB (15366 bytes)
Hash
cdfe984677c89c4ee0aa53157e5c116c
533a8cee3a22cc2d058f227fe829320807f9ff6b
6166cacf6f6e07c81d13a069c22019ffbf4503ba91736a54527bd106ee801084

HTTP Headers

GET /v0/amp-mustache-0.2.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 15366
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "4fc7466f89259cbe"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-sidebar-0.1.js

142.250.74.65

200 OK

9.6 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-sidebar-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (31247)
Size
9.6 kB (9628 bytes)
Hash
37ddb7aa87da5b1895431337d8920448
80c31a8686b1f63842f875dd844724d3ee6bfcfc
05623aa89d24b81a0bb936408738c9f59b17ea9dea05e960b04cf444635f489a

HTTP Headers

GET /v0/amp-sidebar-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 9628
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "a77a7bcefbd75b2e"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.ampproject.org/v0/amp-selector-0.1.js

142.250.74.65

200 OK

3.3 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-selector-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (10019)
Size
3.3 kB (3319 bytes)
Hash
19cd170e6a277d42f75441b294b9154c
5526e9d6e73fb6bb47ebeed041a6099e70ccf897
51c6d2b8bf1b31ed38a40e4a706d0efd20bf4bb37a0b811afe1a2e25cd607afa

HTTP Headers

GET /v0/amp-selector-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 3319
date: Fri, 19 Apr 2024 09:03:04 GMT
expires: Fri, 19 Apr 2024 09:03:04 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "8f37890e58ebad75"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0

104.18.11.207

200 OK

77 kB

URL GET HTTP/3
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://178.128.227.28
DNT: 1
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 09:03:06 GMT
content-type: font/woff2
content-length: 77160
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "af7ae505a9eed503f8b8e6982036873e"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 19:08:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: f9211d0b046944a9d4ddd83d254b56be
cdn-cache: HIT
cf-cache-status: HIT
age: 8607
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876bb833bcde56c6-OSL
alt-svc: h3=":443"; ma=86400

cdn.ampproject.org/rtv/012404021934000/ww.js

142.250.74.65

200 OK

14 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012404021934000/ww.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (51900)
Size
14 kB (14439 bytes)
Hash
5b10303a032c15f4bb1d26429d1f995b
cda357c8512ad5ab67abf87a23425ee1dbb5315a
96b145b9aa51194c9087abeaebd36137b884236174ebace796379b113d618c77

HTTP Headers

GET /rtv/012404021934000/ww.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/plain
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://178.128.227.28/
Origin: http://178.128.227.28
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 14439
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 03:31:37 GMT
expires: Wed, 16 Apr 2025 03:31:37 GMT
cache-control: public, max-age=31536000
etag: "542ca665af666aec"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 279089
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdn.ampproject.org/rtv/012404021934000/v0/amp-loader-0.1.js

142.250.74.65

200 OK

3.9 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012404021934000/v0/amp-loader-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (12614)
Size
3.9 kB (3942 bytes)
Hash
99d0b8fcdea2c5995139abaf283392bd
fbd6bc486116a9ffbb8662b6a952dc0aeba10ae7
15d2fe411597796d07b83bdddc7f074fef90ab99bc47b7e85a020140459b8251

HTTP Headers

GET /rtv/012404021934000/v0/amp-loader-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://178.128.227.28
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 3942
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 03:30:59 GMT
expires: Wed, 16 Apr 2025 03:30:59 GMT
cache-control: public, max-age=31536000
etag: "746b70bafab1ae1f"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 279127
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdn.ampproject.org/rtv/012404021934000/v0/amp-auto-lightbox-0.1.js

142.250.74.65

200 OK

3.0 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012404021934000/v0/amp-auto-lightbox-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (7690)
Size
3.0 kB (2971 bytes)
Hash
5a1fe5027acdaaa505a2f65faf624e3d
8e71ce231ebea0015fde9aad9780a31abc341ef1
20f0500c17c818b7393cdd055cd8a8364f264fe1785a726f10af0fc352409f11

HTTP Headers

GET /rtv/012404021934000/v0/amp-auto-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://178.128.227.28
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 2971
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 03:30:59 GMT
expires: Wed, 16 Apr 2025 03:30:59 GMT
cache-control: public, max-age=31536000
etag: "4983f70303035d33"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 279127
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2

142.250.74.131

200 OK

14 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14048, version 1.0
Size
14 kB (14048 bytes)
Hash
cffb686d7d2f4682df8342bd4d276e09
2c07a9656f1e38da408f20f1cf11581a15cbd7a2
3b98b0dc3bed9d40f43e64adba5de47c76895338a96f0a5a314676cd6287eca9

HTTP Headers

GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://178.128.227.28
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14048
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:36:00 GMT
expires: Fri, 18 Apr 2025 02:36:00 GMT
cache-control: public, max-age=31536000
age: 109626
last-modified: Wed, 11 Oct 2017 21:49:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2

142.250.74.131

200 OK

14 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v15/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 14048, version 1.0
Size
14 kB (14048 bytes)
Hash
cffb686d7d2f4682df8342bd4d276e09
2c07a9656f1e38da408f20f1cf11581a15cbd7a2
3b98b0dc3bed9d40f43e64adba5de47c76895338a96f0a5a314676cd6287eca9

HTTP Headers

GET /s/opensans/v15/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://178.128.227.28
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14048
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:36:00 GMT
expires: Fri, 18 Apr 2025 02:36:00 GMT
cache-control: public, max-age=31536000
age: 109627
last-modified: Wed, 11 Oct 2017 21:49:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

178.128.227.28/images/Skyline-Community-Hub-Logo.png

178.128.227.28

200 OK

54 kB

URL GET HTTP/1.1
178.128.227.28/images/Skyline-Community-Hub-Logo.png
IP
178.128.227.28:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://178.128.227.28/bins/oxy.mpsl

File type
PNG image data, 350 x 282, 8-bit/color RGBA, non-interlaced
Size
54 kB (53977 bytes)
Hash
7b615d2d1641a4244626b9938c08122a
0692cd53b0bdfb2e78d070ad40f39db205b0a34c
6c6569a8d91e7712001f46b8122a28ca6a70b4d4d9724cbcf48fa305a4d9a43a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/Skyline-Community-Hub-Logo.png HTTP/1.1
Host: 178.128.227.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/bins/oxy.mpsl
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 09:03:07 GMT
Server: Apache/2.4.59 (Ubuntu)
Strict-Transport-Security: max-age=16070400;
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 02 Sep 2021 17:24:19 GMT
ETag: "d2d9-5cb0673f67e8f"
Accept-Ranges: bytes
Content-Length: 53977
Cache-Control: max-age=2592000
Expires: Sun, 19 May 2024 09:03:07 GMT
Keep-Alive: timeout=5, max=100
Content-Type: image/png

cdn.ampproject.org/rtv/012404021934000/v0/analytics-vendors/googleanalytics.json

142.250.74.65

200 OK

856 B

URL GET HTTP/3
cdn.ampproject.org/rtv/012404021934000/v0/analytics-vendors/googleanalytics.json
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JSON text data
Size
856 B (856 bytes)
Hash
97a645ac8edabfd0f3ea7311ad50636a
56dc50f8cf4ec36edbb3bf7f0d3bd4bc787ce0c2
6c00736e58728d82754e3e5ced15af509097d091819b27a9b72129b91d8bff3b

HTTP Headers

GET /rtv/012404021934000/v0/analytics-vendors/googleanalytics.json HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://178.128.227.28/
Origin: http://178.128.227.28
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 856
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 03:30:59 GMT
expires: Wed, 16 Apr 2025 03:30:59 GMT
cache-control: public, max-age=31536000
etag: "c3be595388f310bf"
content-type: application/json
vary: Accept-Encoding
age: 279128
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

cdn.ampproject.org/rtv/012404021934000/v0/amp-crypto-polyfill-0.1.js

142.250.74.65

200 OK

3.7 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012404021934000/v0/amp-crypto-polyfill-0.1.js
IP
142.250.74.65:443
ASN
#15169 GOOGLE

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectmisc-sni.google.com
FingerprintF3:76:52:2E:82:03:17:59:3A:0C:25:75:49:66:99:4F:AB:15:33:CE
ValidityMon, 04 Mar 2024 06:40:54 GMT - Mon, 27 May 2024 06:40:53 GMT

File type
JavaScript source, ASCII text, with very long lines (8800)
Size
3.7 kB (3703 bytes)
Hash
cc83bae0758e14dc712188ce4b3533fa
ce444211ce66938d58ad4146667b0a5a3392efcf
478180e4d2c115c8c2d5638d441cb81d25ec6bd6530de7fdd3b5b5d2265b3944

HTTP Headers

GET /rtv/012404021934000/v0/amp-crypto-polyfill-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://178.128.227.28
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 3703
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 03:40:20 GMT
expires: Wed, 16 Apr 2025 03:40:20 GMT
cache-control: public, max-age=31536000
etag: "e5cb6561b597abc2"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 278567
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

178.128.227.28/images/community.jpg

178.128.227.28

200 OK

1.3 MB

URL GET HTTP/1.1
178.128.227.28/images/community.jpg
IP
178.128.227.28:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://178.128.227.28/bins/oxy.mpsl

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 75x75, segment length 16, progressive, precision 8, 1920x1280, components 3
Size
1.3 MB (1269819 bytes)
Hash
02c8bd9a9381bccb37dbda9fa73838b9
8898b1c1cbba2d356d8de62c181ed1c159d951bc
ba9174b38c88817edf6c86ae1a1fa85c0d5082cf07398cac7f71d6dfec977837

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/community.jpg HTTP/1.1
Host: 178.128.227.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/bins/oxy.mpsl
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 09:03:06 GMT
Server: Apache/2.4.59 (Ubuntu)
Strict-Transport-Security: max-age=16070400;
Last-Modified: Thu, 02 Sep 2021 17:24:19 GMT
ETag: "13603b-5cb0673f8dff2"
Accept-Ranges: bytes
Content-Length: 1269819
Cache-Control: max-age=2592000
Expires: Sun, 19 May 2024 09:03:06 GMT
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

178.128.227.28/favicon.ico

178.128.227.28

200 OK

11 kB

URL GET HTTP/1.1
178.128.227.28/favicon.ico
IP
178.128.227.28:80
ASN
#14061 DIGITALOCEAN-ASN

Requested by
http://178.128.227.28/bins/oxy.mpsl

File type
HTML document, Unicode text, UTF-8 text, with very long lines (3713)
Size
11 kB (11029 bytes)
Hash
a4ab5028ce0585de6907321799083072
02d7dd5fe8a6c386a8b359aa6b0ecb7a3ecb1d51
50fe68ee290ac4756895623fbe3f9605a9f534526d9c6ff0025352d863585155

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 178.128.227.28
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/bins/oxy.mpsl
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 19 Apr 2024 09:03:07 GMT
Server: Apache/2.4.59 (Ubuntu)
Set-Cookie: contact-form-meta=Name%3Atrue%3Bhp-Surname%3Afalse%3BPhone%3Afalse%3BEmail%3Atrue%3BMessage%3Atrue%3BEmailMarketingConsent%3Afalse%3B; expires=Fri, 19-Apr-2024 09:33:07 GMT; Max-Age=1800
Strict-Transport-Security: max-age=16070400;
Cache-Control: max-age=0
Expires: Fri, 19 Apr 2024 09:03:07 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11029
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

104.18.11.207

200 OK

31 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
http://178.128.227.28/bins/oxy.mpsl
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (30837)
Size
31 kB (31000 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://178.128.227.28/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 09:03:04 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9e61a4e37a75208649ae6b63a0cb4f72
cdn-cache: HIT
cf-cache-status: HIT
age: 12457654
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876bb8242a3556b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (16)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML