firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 03 Sep 2022 11:43:00 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RWMYQrrY9wZ5-zK4bEUMCXvvNoimdXixeOtMjzYrjvFDRlt7CFtXSg==
Age: 2684
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18501
Expires: Sat, 03 Sep 2022 17:36:05 GMT
Date: Sat, 03 Sep 2022 12:27:44 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KjfeDBtv84GgrOKDZmZkKWYlGcyPiiQj3iiMy4SGZYiOIJCUaskjQA==
age: 40347
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 12:27:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
200 OK 29 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (55566), with CRLF line terminators
Hash fa4d28ebedf54b943666c868b896a191
530e72dda430c3e3f2041cfaeff142d800803c1b
bf5909976923f3444f814d33d803cc32badb6fdd369fc1ba6555397cc685bea9
Analyzer Verdict Alert openphish Generic/Spear Phishing
fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/s5.html HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:44 GMT
Content-Type: text/html
Content-Length: 29420
Connection: keep-alive
Server: Apache
Last-Modified: Thu, 18 Nov 2021 20:06:48 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 03 Sep 2022 11:38:16 GMT
Cache-Control: max-age=3600
Expires: Sat, 03 Sep 2022 12:37:29 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: o9TP6c0lP2MFOwaCIUdHi5uTWgmFRJOtQ6fPoi9otSP6MRWNI9INYg==
Age: 2968
ocsp.digicert.com/
200 OK 471 B IP
Hash 4fc12f0a98aa28ccb56e0b56d7e40ded
f7efcfb8b4f4aa40268bada3fec380820a70ee35
a34aa9b7db949a583c3f1b4d87fed415a11d119c9615b5e710c3125173f8a277
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5526
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:44 GMT
Last-Modified: Sat, 03 Sep 2022 10:55:38 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/adrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js.download
200 OK 17 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/adrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (563)
Hash 635fe8b8c25253ad92e8f3a9e2c4fefd
87dc4990666591d9258921bc2846ad5be97d0942
20b8fe4e81301c0b586efaeeecb792f3a8c1931b834d58012a2ba1bee3fdd245
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/adrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:44 GMT
Content-Type: application/javascript
Content-Length: 16612
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/boxever-min.js.download
200 OK 8.1 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/boxever-min.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (555)
Hash 969068a67f0b6fe7679b097de6d87618
5453ca5a2838ea990a604f7eec31156de8d1afcd
7eb2e8fb9e21eec4383b1c667dc75a4d9da3b5a12ca503e2ba82a6d34e9f0fef
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/boxever-min.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:44 GMT
Content-Type: application/javascript
Content-Length: 8106
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/emirates.core.css
200 OK 41 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/emirates.core.css
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (62155), with CRLF line terminators
Hash 03d4271d9e9abd99857ff4de1d993146
1d08a01bb8948c88bb34670e5b35e1aff9be7ccf
cae761c75e73b7d1bf1c6005f7e0a4c99f9b099d66ca438ffd76ea49017ed26e
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/emirates.core.css HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:44 GMT
Content-Type: text/css
Content-Length: 40767
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2da0a95b3f98abd0da3d1e604e4ba58f
d19b6f218045ecf8f2dd982b831dede24075a51f
2aab5ea327d73a2222898907245f433ab92473d9532b6c2c2cfabd2c144ecb65
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 03 Sep 2022 12:27:45 GMT
Last-Modified: Sat, 03 Sep 2022 12:20:41 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vwHC-r557O0hQCsKK5rGyD340_q21BYkV0J2PVFWjkV4_spaC_Gazg==
Age: 424
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/responsive-main.js.download
200 OK 38 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/responsive-main.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (32019), with CRLF, LF line terminators
Hash 0f15fed5991d11a6ee17a1f03038515f
5fc19fd1a95f545c9448d2b17ec4e401c422fe4c
6f3657946d80d336de6a909f1bb9c2d5bfd456ceefe416ab5eedbaa1745385a0
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/responsive-main.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 38433
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/ek-webfonts.css
200 OK 1.6 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/ek-webfonts.css
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (3987), with CRLF line terminators
Hash 582a5f1afe6b27adbc97a6ee6abbffbb
8edd161fd3f4425e09f03908b7951ec228108b53
3e6cdb7020c541b19b5ad5edfae26c07d8bf48ad9643860dd8c9915101868696
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/ek-webfonts.css HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: text/css
Content-Length: 1561
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
api.boxever.com/v1.2/browser/create.json?client_key=ekb7q5q7htudvxjat3zmeuv2qjus0z6w&message=%7B%7D&callback=jsonp8920159453380742
401 Unauthorized 195 B URL HTTP/1.1 api.boxever.com/v1.2/browser/create.json?client_key=ekb7q5q7htudvxjat3zmeuv2qjus0z6w&message=%7B%7D&callback=jsonp8920159453380742
IP
File type ASCII text, with no line terminators
Hash d772bfa2bcc2646c6e3d38f1d62a1ade
da635b306e8794dac23b447c47dd42f3515304ce
4871ef1143b01d415137c95af4d079d5744543d7bf1caadb2ebab123c94f02b2
GET /v1.2/browser/create.json?client_key=ekb7q5q7htudvxjat3zmeuv2qjus0z6w&message=%7B%7D&callback=jsonp8920159453380742 HTTP/1.1
Host: api.boxever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 401 Unauthorized
Content-Type: application/json
Date: Sat, 03 Sep 2022 12:27:45 GMT
X-Robots-Tag: noindex
Content-Length: 195
Connection: keep-alive
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/opentag-93989-1321710.js.download
200 OK 37 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/opentag-93989-1321710.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (602)
Hash d36606afb2ee3439c63d7b55ceb5adf4
4ecae06cb50eec88e9f59e014404c94093eb7882
c2529b925bc1bf9809fe749a3c489d6aff341d18c6d065b9ef4dcb7c20bec149
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/opentag-93989-1321710.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:44 GMT
Content-Type: application/javascript
Content-Length: 37166
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/global-navigation-v3.css
200 OK 40 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/global-navigation-v3.css
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (65430), with CRLF line terminators
Hash 7842eb02d1a118c150851e7111570c29
d048724ad72d2767c5fe7f0c2ddb302c56dd7d9d
c2c74e426ed5cdee5c6dc3f888427b136f2bcd8a88e19041a5c19a855ed39ca5
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/global-navigation-v3.css HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: text/css
Content-Length: 40058
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BdpkLYHwcXcLxa+FpA7EAQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vAMXkPcGxv8rSFZmC54iot3O264=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 20cc30f2a41f9c5e824ea46460548950
c153b447d44cbbe8f30d7f490605d1a430af20a1
0f8bb96e7dfd8a6bb3d7eae1a958195cb8ca9f20e0ad8cd952c34267ff0625f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
orca.qubitproducts.com/misc/ip?cid=__ip&id=emirates&callback=__qubitIPCallBack
200 OK 72 B URL HTTP/1.1 orca.qubitproducts.com/misc/ip?cid=__ip&id=emirates&callback=__qubitIPCallBack
IP
File type ASCII text, with no line terminators
Hash cd3e22773fcded7ec5569a6a81f61f74
2b456f77f2cdd8935088fb9014d2283b0549fd64
9fd022d8e672d67510e2f2004dfa467eb3c7acc701220ae8600dafdc6a9bea8c
GET /misc/ip?cid=__ip&id=emirates&callback=__qubitIPCallBack HTTP/1.1
Host: orca.qubitproducts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/
HTTP/1.1 200 OK
Content-Type: application/javascript;charset=utf-8
Vary: Origin
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Length: 72
Via: 1.1 google
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 20cc30f2a41f9c5e824ea46460548950
c153b447d44cbbe8f30d7f490605d1a430af20a1
0f8bb96e7dfd8a6bb3d7eae1a958195cb8ca9f20e0ad8cd952c34267ff0625f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/platinum-stretch.css
200 OK 4.9 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/platinum-stretch.css
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (29235), with CRLF line terminators
Hash 84d38c5d1e96eb68815534297adb049f
830f7a821a67fadaa763a68a2ee135e5ccd74565
88ac44c2ccc8b1ce5a1d4abb26035557f2e5eb55f5c016e1affa3672ba68bc97
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/platinum-stretch.css HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: text/css
Content-Length: 4927
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/ek-core.css
200 OK 27 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/ek-core.css
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (19986), with CRLF line terminators
Hash c335ef71255e136c85558dacb93c8e4d
ae96c331b8b9faa8c6c4ae225fcd0dd3acb57f29
226b97bea46c680dacf02e9afa06b86caf9301d358c09673e2b4f95ed3fcf604
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/ek-core.css HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: text/css
Content-Length: 27045
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/initialloadaccount.js.download
200 OK 787 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/initialloadaccount.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (3235), with CRLF line terminators
Hash 57201e652d1266f8d6219db28159bfae
1377a4ce6d078b6f0c370ede37c895f5770d7ade
1d6bceaaeeb6c936dc2f3d325d784007335c36c6beb54091de5462063ea45bf1
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/initialloadaccount.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 787
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
cdn.ek.aero/qubit-smartserve/smartserve-3335.js
200 OK 23 B URL HTTP/1.1 cdn.ek.aero/qubit-smartserve/smartserve-3335.js
IP
File type ASCII text, with no line terminators
Hash e174615ce001bb4249e86ad04286e500
fdc31163880a889fc940efcebf33b562d93cdcd4
e8578594b131f30326510c32a70935b3407baf5ce26161a70c6803e58f8838e9
GET /qubit-smartserve/smartserve-3335.js HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/
HTTP/1.1 200 OK
Content-Length: 23
Cache-Control: max-age=3600
Date: Sat, 03 Sep 2022 12:27:45 GMT
Connection: keep-alive
Content-Type: text/javascript
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/gtm.js.download
200 OK 84 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/gtm.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (1889)
Hash 76bb0891ea276c141764cf1ff8d8afed
ab33592a3d38f1c67f24bab175e5078c77b2c6b3
fbd4b9d44b9ad9eff10494b7a089cc65264703ddb5d82530b81aa7464660ddc8
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/gtm.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/platinum.js.download
200 OK 1.8 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/platinum.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (5884), with CRLF line terminators
Hash 7016ce70d6fb1f9bcb26006923b59737
e4d237bf9d708f9eb90d08f2b69c2ae69a13bac7
3f4b206adcd5ab90b54fdafe4353572d20d98dac46db592bdc5fd335a9cf107b
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/platinum.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 1808
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/gtmutilities.js.download
200 OK 347 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/gtmutilities.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (1164), with CRLF line terminators
Hash e3d9117d8baae2b95050fcb54a5fe71b
c19855e380821f0e020043521e6f2b69d6468dc5
68db84812a44abec57bef537ae0d5163dd58a7767508e280c36aff93fd082f95
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/gtmutilities.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 347
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/manage_booking.js.download
200 OK 892 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/manage_booking.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (2243), with CRLF line terminators
Hash e15bbff1de1f851bd20f7740d2b009b1
5e56d9e6f6a3d9c8f1e0c4332e2db42764012d12
2fb9718dc9aec95c22adf8617a8276088b79a2b97980c4fe82ea05854fe81b2f
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/manage_booking.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 892
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/manage_booking.css
200 OK 4.7 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/manage_booking.css
IP
ASN #7506 GMO Internet,Inc
File type troff or preprocessor input, ASCII text, with very long lines (11002), with CRLF line terminators
Hash a113007ff56c838e717ee3c7eb8d4f4e
b55f8da96b138383f6382f2f645e0e256c33febb
6232d31061310c2dab580dd4010612099f822031739d234eb5b9ebd586771073
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/manage_booking.css HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: text/css
Content-Length: 4733
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/tealeaf.js.download
200 OK 35 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/tealeaf.js.download
IP
ASN #7506 GMO Internet,Inc
File type Unicode text, UTF-8 text, with very long lines (32003), with CRLF, LF line terminators
Hash b68d82f885bacd8b010b4fbcdaf6883e
b20a465a54f58440859724643e021533510e8de0
4b6ba3c7333a2d55c0ea8f58d6c758d62955f363a899ebaebf4231d96b79a87a
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/tealeaf.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 34934
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/uvbuilder.latest.min.js.download
200 OK 3.2 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/uvbuilder.latest.min.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (11379)
Hash 12fdc0e1da2ffb9380460b02ec629555
dab92c8d8c7d846ee159b30992317efa48588e2d
f69422fa94d63ba91d3e8cc568715db203f3541afe0ace1d0f568c87ba35d460
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/uvbuilder.latest.min.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 3172
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/52260000.js.download
200 OK 118 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/52260000.js.download
IP
ASN #7506 GMO Internet,Inc
File type core file (Xenix)\012- , ASCII text
Hash 8c4e3a70f133a38fa6bd5e6c86ebab03
ef2b21d945dc0899e134155b3c3f25a069aa2eb2
5442f5ba1ef9467c8cbffca444e379d796dc36fc6e2fdd239404d8950fbc459a
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/52260000.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 118
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/dispatcher-v3.js.download
200 OK 1.1 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/dispatcher-v3.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (2299)
Hash bec23e1d60340f102bc57e4c443c2117
c7f3212dbd97117a80b25855b7cebd0e18323507
e2d82c2ca504510b18e57da720e89f1452ad012c9ae2bca0aa55d796e6d03dbd
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/dispatcher-v3.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 1057
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/yahoo-min.js.download
200 OK 3.0 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/yahoo-min.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (6013)
Hash a5b2c161a424aeaf067d6246176d64ee
7293cb47259c7065ac91d48096c2a227bc812cbc
36c712dcb454d4b23a4e63d24a6adc9e503f0cf9a8faf3c4a94457fdd25d102f
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/yahoo-min.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 3005
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/cp-v3.js.download
200 OK 12 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/cp-v3.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with no line terminators
Hash bc6573647ae421e4cd14dcdf34c877ce
a567ddefcd1cfc1bbbaf5323bdadba5795c95478
7fd90f2ec178b50f6924b27d80085370abdb66f52947d3a63d7f8e7a8f56512b
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/cp-v3.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 12
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/json-min.js.download
200 OK 2.2 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/json-min.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (4764)
Hash 73caddd8ca193f8bbe1008199439f379
bb864f4af973871e416dc2cc2da18bba495f4606
204207a80c315adee6290dfbf2e00e7b96c153621b9d5cc2a732f1859f451705
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/json-min.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Content-Length: 2204
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/event
200 OK 22 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/event
IP
ASN #7506 GMO Internet,Inc
File type exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash d26c7b4c29aec3335ba6bf155b9e73a3
36427cdc63ad3210946b0bd94567513eaa891237
411b38a4e86389e7b9ca3176e87a168e3ba1ab58b9b543ab4ea0959c87fc5cba
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/event HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Length: 22
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/bat.js.download
200 OK 7.2 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/bat.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (23542), with no line terminators
Hash e52da2e9d56550ac8da2a1b3b4ee3a00
af46b84a3708e125b6a62b98494eea86e0af0962
ef6323328f49366485f5524ecc52605d331e2bff7ee264a2e4be3557c4055442
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/bat.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: application/javascript
Content-Length: 7158
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/smartserve-3335.js.download
200 OK 222 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/smartserve-3335.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (65239)
Size 222 kB (222446 bytes)
Hash dd7d56aefb9888e3fdc27f0064bcfee6
0fc0a746432eabd7d2151ac9ab05edbba5e1ca09
a927226b96da35ea689606ae87fc4e29d1432d6cd02b94433c700fc3bc859b75
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/smartserve-3335.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/fbevents.js.download
200 OK 28 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/fbevents.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (32091)
Hash e54eebc9510c4ef546fdaadf72e7d299
66372f0b7736fbecc5a870e76e1c472be7591788
e80df0cf7582e11cd8f8e9d6f60a8d59debbb5d7e24bd16d43b762edfda5acd8
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/fbevents.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: application/javascript
Content-Length: 27468
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/saved_resource
200 OK 708 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/saved_resource
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (2044), with CRLF line terminators
Hash 833739d0c535d2d2c7b9cce330db85ba
01ee7658421110a220341354a844157935262c1d
9a598df4431884bd81c57709a9e5201f6c50af7dd6a57035e5c61d5b00e283df
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/saved_resource HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Length: 708
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/analytics.js.download
200 OK 503 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/analytics.js.download
IP
ASN #7506 GMO Internet,Inc
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/analytics.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:44 GMT
Content-Type: application/javascript
Content-Length: 17834
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3799
Expires: Sat, 03 Sep 2022 13:31:05 GMT
Date: Sat, 03 Sep 2022 12:27:46 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c199f7fc2a2857dec134bfdb2673e28c
af3989072b658e2de119d006ae4ca1703468913d
e57411ba0221f6ffa7baf7c374ec790959a66d6a683fad40883ef01cf67e35c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6976
x-amzn-requestid: da379546-9525-4e13-b9f0-a6446839df66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X2eNeG7kIAMF4-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63127722-37399f67565b06e7111095cd;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 21:35:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5SORUPJgJ_gKKs4hSa4EzCCQA6B1dmyO1EC-gCBvFKl2R2hV0mYTeA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:39:01 GMT
age: 49725
etag: "af3989072b658e2de119d006ae4ca1703468913d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd91ab4da-b2c8-4694-8888-dbef16ff0822.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd91ab4da-b2c8-4694-8888-dbef16ff0822.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ac5cedb16d42137f0da53ffa29c68640
f5b2ed7f99ce2149cdc7ca905bead01cb12fe8ab
9ceae944314eae39f0af8fa5abd17515b9fd32771cececb0c7321a7bfbf4645f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd91ab4da-b2c8-4694-8888-dbef16ff0822.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9468
x-amzn-requestid: 326b8125-dc3d-4ca8-bdda-50464d1cfc61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0DjwHbqIAMFeww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117fb1-2a1151c94cf19ba05c4b47ee;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:59:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Z4GlrY5n1_Kg3lQ2aRf3-BmbSu0Z89by_oXrzDwlvEQ5HVS2vIer0Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:02:30 GMT
age: 61092
etag: "f5b2ed7f99ce2149cdc7ca905bead01cb12fe8ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc564d2b6-daa1-414e-bb63-5116a4d51382.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc564d2b6-daa1-414e-bb63-5116a4d51382.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06ffb5110d8bf50e601e91531f179e62
bb41e58777f4c3ed776a29e0e074f5fbcea5b814
59947d967e6f441c28fd42be2a834b7ba3eb52ab4a01579dab17c9e6fa5d8ed9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc564d2b6-daa1-414e-bb63-5116a4d51382.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8613
x-amzn-requestid: dd547bf7-66c9-4fc7-b7e1-6359a2f1bafb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XmVnJGnPIAMF7xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c02fa-4dc5215816867ff9014224df;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 00:06:18 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8fkgjKSOcEnmABAEoueMrgEIaQ-lFUZrLmZZj1B60mTEgbMk3ots7g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 03:43:30 GMT
age: 31456
etag: "bb41e58777f4c3ed776a29e0e074f5fbcea5b814"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e53e5b7-d429-4f33-bd77-ce946421df55.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e53e5b7-d429-4f33-bd77-ce946421df55.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 60769237af4f32c663d494d91a672d08
31305131f340191799484f212e15513bd1204e88
6df36e459f3a2d0271732b645009b116e6671363f6c3050d22bbfe2d911a77bd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e53e5b7-d429-4f33-bd77-ce946421df55.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4994
x-amzn-requestid: de39357f-d378-4bb8-b4d9-7dd4f82fbb58
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xgj-kEHvoAMFyBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6309b390-119fa01e254e89cb39a1b794;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 06:02:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1yjBt3dqEztIRHo4yR3ZzI67J4lWUMS8R44-PpkeDJ4KNdCTPkmh-w==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 04:45:35 GMT
age: 27731
etag: "31305131f340191799484f212e15513bd1204e88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6f5d90-39e2-4288-8685-adf2348d38e8.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6f5d90-39e2-4288-8685-adf2348d38e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d78cbff83c152b84864606781a29563d
8bdbc6e135be6e582d0e23754399422e3792777b
3c385de9ade05e1652ccc386e73aaccc4c223a07b81af4c5fdf3f73a166909f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6f5d90-39e2-4288-8685-adf2348d38e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14061
x-amzn-requestid: 43535b37-15c9-4a28-a7c0-f43482948382
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XqlhGFX4IAMF9oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630db606-77bd935d4364050f230ba5da;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 07:02:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: y_-knSwUodyBxS8I8PAoUexT6Z4o0Aq7m62v7HrRjm7vV-jP0VuCpw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 06:26:07 GMT
age: 21699
etag: "8bdbc6e135be6e582d0e23754399422e3792777b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7d7b349-4711-4e66-bc42-888934e385a2.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7d7b349-4711-4e66-bc42-888934e385a2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 23b580e2b673257d24b9c2e80c4c48ce
f3a3d835a37f9b23e7458f9b7bc721bc415b61cc
c0e3559fde3dd08cdbd360f39dddcc98dd7c1b3aebd0861cc07105872a116d11
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7d7b349-4711-4e66-bc42-888934e385a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7501
x-amzn-requestid: bf297fc4-9164-45ee-bfab-06761a52e3ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X2eMJEP1IAMFdpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312771a-6b3e6416133d67a83d8a1469;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: datd5eYK6nOAUdEpy_y4gcqsVmCqjP4qhzTnlJ9pSrquoYk2PPugTA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:02:34 GMT
age: 51912
etag: "f3a3d835a37f9b23e7458f9b7bc721bc415b61cc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-NVKM49
302 Found 250 B URL HTTP/1.1 www.googletagmanager.com/gtm.js?id=GTM-NVKM49
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 60355524907f74c4bfa9bb144a159cfe
37400e30e8f3cbf7892ea1bce8840ae06671455c
bbf23e211505ae51b70ce5d450bcbbdfce6204f74d4e5b8e6ae976700c374fa6
GET /gtm.js?id=GTM-NVKM49 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/
HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtm.js?id=GTM-NVKM49
Cross-Origin-Resource-Policy: cross-origin
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 250
X-XSS-Protection: 0
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/1521558538161128
200 OK 87 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/1521558538161128
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (64471)
Hash b850f71e5e3b1de60531d405c7146998
f5c630563490e21904bf7746a140378694cd2b5d
5e60f05ca016c24016b48df5f7d49e4fb80fad35b31791fd5bdb02fe5cb4b6f6
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/1521558538161128 HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/responsive-footer.js.download
200 OK 46 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/responsive-footer.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (18622), with CRLF, LF line terminators
Hash 6d06bb929eac136b34e3fa671a75a1ff
40a7141b9ac95505e78a14e7a1a2b7a4763fcbb8
047238b65e930d8d100eda45e47b79f3c91fb2bf52d0153456f18f8ae1453dac
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/responsive-footer.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: application/javascript
Content-Length: 46182
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/botdetectcaptcha.ashx
200 OK 5.5 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/botdetectcaptcha.ashx
IP
ASN #7506 GMO Internet,Inc
File type Unicode text, UTF-8 (with BOM) text, with very long lines (505), with CRLF line terminators
Hash 2652662925195e053a03bb353bfb5421
f5a36bfa30eaf72cc4bb968d5b611a8c906dc5af
de2d618cc8cc4e4a4301864e66eb03fa1072f86a283b97137e6fe52c8df13327
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/botdetectcaptcha.ashx HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Length: 5492
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash e04585bacf2352aac7e2765ab3eb6194
77dd3d5b429417356939db9efbf7b3b2b5625cca
5ad97cf78c4389a920822e4a73a38b60deed902ee240ebc6b2f10c11e2a7ffe8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6584
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:46 GMT
Last-Modified: Sat, 03 Sep 2022 10:38:03 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash e04585bacf2352aac7e2765ab3eb6194
77dd3d5b429417356939db9efbf7b3b2b5625cca
5ad97cf78c4389a920822e4a73a38b60deed902ee240ebc6b2f10c11e2a7ffe8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2037
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:46 GMT
Last-Modified: Sat, 03 Sep 2022 11:53:49 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash e04585bacf2352aac7e2765ab3eb6194
77dd3d5b429417356939db9efbf7b3b2b5625cca
5ad97cf78c4389a920822e4a73a38b60deed902ee240ebc6b2f10c11e2a7ffe8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6584
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:46 GMT
Last-Modified: Sat, 03 Sep 2022 10:38:03 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/b65b7e9def1619f2665ade3d0c6e96
200 OK 16 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/b65b7e9def1619f2665ade3d0c6e96
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (62628), with no line terminators
Hash db7cacd3ff620b768c6313f3bc103399
e79a0719d66c50cd073096392f5ec3b3d063197d
0c03eaa2bd5d28298e9c54e0f29cc53b8ebb2e0e12006baff888478fe702d768
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/b65b7e9def1619f2665ade3d0c6e96 HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Length: 15776
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
cdn.ek.aero/shared/fonts/emirates/emirates-bold.woff2
200 OK 72 kB URL HTTP/2 cdn.ek.aero/shared/fonts/emirates/emirates-bold.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 72048, version 1.-5899\012- data
Hash cae68f40d0af09f13f342c4a566a4a7f
c4da9e33167be264184112a8d1ce1c7241ee794d
69e1dd4be80beaf33ef8979e6211c5b5ff8ecea7d8f68c7f01637c97c7e41c21
GET /shared/fonts/emirates/emirates-bold.woff2 HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
etag: "cae68f40d0af09f13f342c4a566a4a7f:1527755987"
last-modified: Thu, 31 May 2018 08:39:47 GMT
server: AkamaiNetStorage
content-length: 72048
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: font/woff2
cache-control: public, max-age=604800
X-Firefox-Spdy: h2
cdn.ek.aero/shared/fonts/emirates/emirates-medium.woff2
200 OK 73 kB URL HTTP/2 cdn.ek.aero/shared/fonts/emirates/emirates-medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 72576, version 1.-5899\012- data
Hash 82011c27c0bff714ca8f09ff9c16dcb3
dc70699635410f7d503de260b88406a98e568cc5
9d3db58bc71d36080aadcafb0895ad490ba31e93f8640ec134e398b5bc6d3458
GET /shared/fonts/emirates/emirates-medium.woff2 HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
etag: "82011c27c0bff714ca8f09ff9c16dcb3:1527755987"
last-modified: Thu, 31 May 2018 08:39:47 GMT
server: AkamaiNetStorage
content-length: 72576
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: font/woff2
cache-control: public, max-age=604800
X-Firefox-Spdy: h2
cdn.ek.aero/shared/fonts/ek-icons/ek-font-icons.woff
200 OK 36 kB URL HTTP/2 cdn.ek.aero/shared/fonts/ek-icons/ek-font-icons.woff
IP
File type Web Open Font Format, TrueType, length 36016, version 1.0\012- data
Hash dda2003260b4caa0b6ca28ba7f83fec5
dfd6019642ef5f5f99c723fc04928cd2b1956524
29785f207fa97d323919a7035b99d88b319eee28eae50b3857252c38183f7023
GET /shared/fonts/ek-icons/ek-font-icons.woff HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
etag: "dda2003260b4caa0b6ca28ba7f83fec5:1493200273"
last-modified: Wed, 26 Apr 2017 09:51:13 GMT
server: AkamaiNetStorage
content-length: 36016
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: application/font-woff
cache-control: public, max-age=604800
X-Firefox-Spdy: h2
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/adrum-4.5.0.773.js.download
200 OK 20 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/adrum-4.5.0.773.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (646)
Hash 7eaa762b70ea5a9b37ffa7a69b9693df
c150b0d9c45ec96fe924d74bee2a40bbe9edd4e3
c23296dba6b68287e31f4fd3f840c5b759233f41a3d2dbf90abecb73beb665a7
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/adrum-4.5.0.773.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: application/javascript
Content-Length: 20241
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
fly10.emirates.com/Images/my-trips/login/Cloud_top.png
200 OK 4.2 kB URL HTTP/2 fly10.emirates.com/Images/my-trips/login/Cloud_top.png
IP
File type PNG image data, 2880 x 134, 8-bit colormap, non-interlaced\012- data
Hash fb25518e716fb2b4ff56736d5a366ff5
ef34df2c0e87690a6766dc02754c47cd66e29ee8
80645cbf0de0a807e3e929e958c911df21113928e6be8c81b124210a664a644e
GET /Images/my-trips/login/Cloud_top.png HTTP/1.1
Host: fly10.emirates.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
last-modified: Sun, 26 Feb 2017 11:45:00 GMT
accept-ranges: bytes
etag: "41aec22590d21:0"
x-frame-options: SAMEORIGIN
content-length: 4173
date: Sat, 03 Sep 2022 12:27:46 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=15768000 ; preload
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
fly10.emirates.com/Images/my-trips/login/bg_clouds.png
200 OK 303 kB URL HTTP/2 fly10.emirates.com/Images/my-trips/login/bg_clouds.png
IP
File type PNG image data, 2880 x 630, 8-bit colormap, non-interlaced\012- data
Size 303 kB (303383 bytes)
Hash a77c170410c93f639cb7f078da1564f3
ed6d935d7f14b34c06271a8d27b4c9eb4465a7aa
1fe02bdff5ebf42b33f270a833cd72d7aa81b10affffe107a494eb4dd6d3ac28
GET /Images/my-trips/login/bg_clouds.png HTTP/1.1
Host: fly10.emirates.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
last-modified: Sun, 26 Feb 2017 11:45:00 GMT
accept-ranges: bytes
etag: "41aec22590d21:0"
x-frame-options: SAMEORIGIN
content-length: 303383
date: Sat, 03 Sep 2022 12:27:46 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=15768000 ; preload
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
cdn.ek.aero/shared/fonts/emirates/emirates-bold.woff
200 OK 104 kB URL HTTP/2 cdn.ek.aero/shared/fonts/emirates/emirates-bold.woff
IP
File type Web Open Font Format, TrueType, length 103456, version 0.0\012- data
Size 104 kB (103456 bytes)
Hash a480d8f386bd2aaeb7089aaa6de8bc31
4420aedcab9ebb461dbad80b5ccf24e216ec9633
d6d9758ef474eaa268be9742e810589b00838ef513d27c6134f7507bad43ef88
GET /shared/fonts/emirates/emirates-bold.woff HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "a480d8f386bd2aaeb7089aaa6de8bc31:1527755987"
last-modified: Thu, 31 May 2018 08:39:47 GMT
server: AkamaiNetStorage
content-length: 103456
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: application/font-woff
cache-control: public, max-age=604800
X-Firefox-Spdy: h2
cdn.ek.aero/shared/fonts/emirates/emirates-medium.woff
200 OK 103 kB URL HTTP/2 cdn.ek.aero/shared/fonts/emirates/emirates-medium.woff
IP
File type Web Open Font Format, TrueType, length 103420, version 0.0\012- data
Size 103 kB (103420 bytes)
Hash 40bab6c98e581bd41a21b97b95fe1e92
0baa2259ae9d09a757d30d82d37c96004233f15f
5a20938d0a85fb4d4a46e079f10d3c31ed76f3a79795831febf0dc1638ab0def
GET /shared/fonts/emirates/emirates-medium.woff HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "40bab6c98e581bd41a21b97b95fe1e92:1527755987"
last-modified: Thu, 31 May 2018 08:39:47 GMT
server: AkamaiNetStorage
content-length: 103420
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: application/font-woff
cache-control: public, max-age=604800
X-Firefox-Spdy: h2
cdn.ek.aero/shared/fonts/ek-icons/ek-font-icons.ttf
200 OK 64 kB URL HTTP/2 cdn.ek.aero/shared/fonts/ek-icons/ek-font-icons.ttf
IP
File type TrueType Font data, 13 tables, 1st "OS/2", 16 names, Macintosh, Copyright 2016 Adobe Systems Incorporated. All rights reserved.ekRegular1.000;PfEd;ek-font-icons\012- data
Hash 6214acfb60bbdcef8516adbc1a02118b
08a58a6df31dfafec9a9d749d9e50849240e2b24
47a9b27c8c63006bf144b687932ec23e5b6d2ab3f5afc0434cb0d8046fb44a26
GET /shared/fonts/ek-icons/ek-font-icons.ttf HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "6214acfb60bbdcef8516adbc1a02118b:1493200273"
last-modified: Wed, 26 Apr 2017 09:51:13 GMT
server: AkamaiNetStorage
content-length: 63512
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: font/ttf
cache-control: public, max-age=604800
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e04585bacf2352aac7e2765ab3eb6194
77dd3d5b429417356939db9efbf7b3b2b5625cca
5ad97cf78c4389a920822e4a73a38b60deed902ee240ebc6b2f10c11e2a7ffe8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:46 GMT
Server: ECS (amb/6B7F)
Content-Length: 471
cdn.ek.aero/shared/fonts/emirates/emirates-bold.ttf
200 OK 250 kB URL HTTP/2 cdn.ek.aero/shared/fonts/emirates/emirates-bold.ttf
IP
File type TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 28 names, Macintosh, Copyright (c) Emirates, 2003 - 2016.EmiratesBold1.910;Emirates-BoldEmirates BoldVersion 1.910Emi\012- data
Size 250 kB (249496 bytes)
Hash a6ed6fbb9c13c0b0af1ba17fdaf9a9d1
1e2993c2f5e393c766fc38034aa609ff183890e6
e63514b72f6aa5247a7dddcf476834e1ac213b211cfe040c3d1e3c9ed1f1379a
GET /shared/fonts/emirates/emirates-bold.ttf HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "a6ed6fbb9c13c0b0af1ba17fdaf9a9d1:1527755988"
last-modified: Thu, 31 May 2018 08:39:48 GMT
server: AkamaiNetStorage
content-length: 249496
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: font/ttf
cache-control: public, max-age=604800
X-Firefox-Spdy: h2
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/global-navigation-v3.js.download
200 OK 45 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/global-navigation-v3.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (32037), with CRLF, LF line terminators
Hash a45e4aaee21a596b3e6596f0974e246e
31ff8ddae0eb8cc66a2986e9daa45329caee14ea
b72d5c1b952df372fa07f5d0590008aba0e4b43dd8cb49abb517fdbf5ce8b5cc
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/global-navigation-v3.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: application/javascript
Content-Length: 45381
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
cdn.ek.aero/shared/fonts/emirates/emirates-medium.ttf
200 OK 249 kB URL HTTP/2 cdn.ek.aero/shared/fonts/emirates/emirates-medium.ttf
IP
File type TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 28 names, Macintosh, Copyright (c) Emirates, 2003 - 2016.EmiratesMedium1.910;Emirates-MediumEmirates MediumVersion 1.\012- data
Size 249 kB (248940 bytes)
Hash 42361e0ce8dcced0798dc9b31c8033c4
d47896bfc7b88ba7b3e9013e5f2fd40d5489848b
480369e2a7a789158124bc5b93ce5a219103260f59e15b5c029d048d6445f097
GET /shared/fonts/emirates/emirates-medium.ttf HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "42361e0ce8dcced0798dc9b31c8033c4:1527755988"
last-modified: Thu, 31 May 2018 08:39:48 GMT
server: AkamaiNetStorage
content-length: 248940
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: font/ttf
cache-control: public, max-age=604800
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b69e4ee589f24deef7c8a3004daae9d1
e96ab184083a5084569b86b8846a6fa0c3b6af9a
7560417294eeb0f5c955d68bcc9b9eae40d69d1ff4b717a115ca1c614b1f4a17
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/eluminate.js.download
200 OK 44 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/eluminate.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (65268), with CRLF line terminators
Hash b7cfbe176ca7a16a7cc6de2795ba4d07
b2c9b391aedaff707894563d26e27f660344e22e
4eb5b90104d859cfc08ac836f021bdfe075103c8a6537b1fee1f98a6472b6ce2
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/eluminate.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: application/javascript
Content-Length: 44307
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/segment-index-3335.js.download
200 OK 23 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/segment-index-3335.js.download
IP
ASN #7506 GMO Internet,Inc
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4ee49787cea612b666e0ab473a6921cb
7fdd8f4a988e8b0a7896c875ea0f6c64a1b1050c
ad3a69257fc986b8eaa1d7bc686daa7003f2cd199a3a7ac3b57048f2585d5946
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/segment-index-3335.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: application/javascript
Content-Length: 22766
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
www.googletagmanager.com/gtm.js?id=GTM-NVKM49
200 OK 108 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NVKM49
IP
File type ASCII text, with very long lines (65324)
Size 108 kB (107630 bytes)
Hash 3ff786e75323205c73c93dfa82069c82
8a429e67bcc4547b71d5e0a1b20c3480e4f67777
fe93184b48af826812a22c8b8d4421567427f830d868600b041b617d6635cb9a
GET /gtm.js?id=GTM-NVKM49 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://macst.cc/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Sep 2022 12:27:46 GMT
expires: Sat, 03 Sep 2022 12:27:46 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Sep 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 107630
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/ld.js.download
200 OK 9.1 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/ld.js.download
IP
ASN #7506 GMO Internet,Inc
File type C source, ASCII text, with very long lines (30338), with no line terminators
Hash 02e7bf38d192eb7d6fdd9d90e627acc6
ec4900b0b97a4ff12ac86548e7419d8e0daab01d
1239f4163d486affc7b9886a74bef9af598498348d0b4c857619716e10182a47
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/ld.js.download HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: application/javascript
Content-Length: 9089
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/iconography.woff
404 Not Found 19 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/iconography.woff
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11315)
Hash 445d3af6844c2f665d720d259eae018b
a620414ae1b949396fd3f9ccefa11cca910c4eef
cdaf289919b2096b4c936a3e249bba227791b88ae4417467fa54585c799394b4
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/iconography.woff HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/platinum-stretch.css
Cookie: _qst_s=1; _qsst_s=1662208063026
HTTP/1.1 404 Not Found
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: text/html
Content-Length: 19268
Connection: keep-alive
Server: Apache
Last-Modified: Tue, 25 Jan 2022 06:58:09 GMT
Accept-Ranges: bytes
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Inline_Logo_global_tcm233-4096794.svg
200 OK 2.1 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Inline_Logo_global_tcm233-4096794.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 06f083c7c7112e528e4d690a4dad92ac
b393f84f7e770a518b8d3f479ff90fb57bcfdff9
a5bf2fd7005dcbd3fbfe889735b53f679657b150c55cab3b605ad9a26ef20e4c
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Inline_Logo_global_tcm233-4096794.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: image/svg+xml
Content-Length: 2070
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/s3_ligne.png
200 OK 172 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/s3_ligne.png
IP
ASN #7506 GMO Internet,Inc
File type PNG image data, 749 x 5, 8-bit/color RGB, non-interlaced\012- data
Hash f4b2a9d72b89784cb7c733543419cac6
64f03102a25d1be75f351ceb3e3c37b82c966104
b9bb03d909ae2a1f0c0a4991654c3d964f46c687f4fa06138002264ebbca089e
GET /ue/retailresearch.emirates.claim.gift-cards/s3_ligne.png HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: image/png
Content-Length: 172
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 15 Jul 2018 18:48:00 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
api.boxever.com/v1.2/boxever-min.js?client_key=ekb7q5q7htudvxjat3zmeuv2qjus0z6w
401 Unauthorized 0 B URL HTTP/1.1 api.boxever.com/v1.2/boxever-min.js?client_key=ekb7q5q7htudvxjat3zmeuv2qjus0z6w
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1.2/boxever-min.js?client_key=ekb7q5q7htudvxjat3zmeuv2qjus0z6w HTTP/1.1
Host: api.boxever.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 401 Unauthorized
Cache-Control: no-cache
Content-Type: text/plain; charset=utf-8
X-Robots-Tag: noindex
Content-Length: 0
Connection: keep-alive
macst.cc/ue/retailresearch.emirates.claim.gift-cards/s3_ligne_0000.png
200 OK 172 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/s3_ligne_0000.png
IP
ASN #7506 GMO Internet,Inc
File type PNG image data, 749 x 5, 8-bit/color RGB, non-interlaced\012- data
Hash f4b2a9d72b89784cb7c733543419cac6
64f03102a25d1be75f351ceb3e3c37b82c966104
b9bb03d909ae2a1f0c0a4991654c3d964f46c687f4fa06138002264ebbca089e
GET /ue/retailresearch.emirates.claim.gift-cards/s3_ligne_0000.png HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: image/png
Content-Length: 172
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 15 Jul 2018 18:48:00 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/transparent_white_1X1.png
200 OK 68 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/transparent_white_1X1.png
IP
ASN #7506 GMO Internet,Inc
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash aaaf049e1f1c0e455850ca51aab70485
5f8e845ffced12819513762ad5fbc834284290f6
4443eccbe460b086b56483fdbfdaafca2c11c369a796a56c097997b15c160660
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/transparent_white_1X1.png HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: image/png
Content-Length: 68
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range
macst.cc/system/shared/Images/globalnavigation/icons/external_link.svg
404 Not Found 19 kB URL HTTP/1.1 macst.cc/system/shared/Images/globalnavigation/icons/external_link.svg
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11315)
Hash 445d3af6844c2f665d720d259eae018b
a620414ae1b949396fd3f9ccefa11cca910c4eef
cdaf289919b2096b4c936a3e249bba227791b88ae4417467fa54585c799394b4
Analyzer Verdict Alert fortinet Phishing
GET /system/shared/Images/globalnavigation/icons/external_link.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/global-navigation-v3.css
Cookie: _qst_s=1; _qsst_s=1662208063026
HTTP/1.1 404 Not Found
Date: Sat, 03 Sep 2022 12:27:46 GMT
Content-Type: text/html
Content-Length: 19268
Connection: keep-alive
Server: Apache
Last-Modified: Tue, 25 Jan 2022 06:58:09 GMT
Accept-Ranges: bytes
cdn.ek.aero/downloads/ek/icons/fonts/iconography.woff
200 OK 80 kB URL HTTP/2 cdn.ek.aero/downloads/ek/icons/fonts/iconography.woff
IP
File type Web Open Font Format, CFF, length 80048, version 1.0\012- data
Hash c1be60cd52efa4c71e556f11de10d82d
233da46f4d999dcec9d7e45a3c3bb7092902dfb6
f0f1b77f3209d0ca046bea09fd2678f97a4209da270d1424f882614ce3cea3ac
GET /downloads/ek/icons/fonts/iconography.woff HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "c1be60cd52efa4c71e556f11de10d82d:1513234538"
last-modified: Thu, 14 Dec 2017 06:55:38 GMT
server: AkamaiNetStorage
content-length: 80048
date: Sat, 03 Sep 2022 12:27:47 GMT
content-type: application/font-woff
X-Firefox-Spdy: h2
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Apple_EN_tcm233-4143604.svg
200 OK 4.6 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Apple_EN_tcm233-4143604.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash e3b52d4e2ff30361422e637ff90599e5
73b98bb880bf9bfb5918ee9f1ca275907dda1cd1
5b6833b867ba36a2e9e902a130d791e3d5343dc50bb1e9c77a404af65c5107bc
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Apple_EN_tcm233-4143604.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 4647
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
cdn.ek.aero/downloads/ek/icons/fonts/iconography.ttf
200 OK 112 kB URL HTTP/2 cdn.ek.aero/downloads/ek/icons/fonts/iconography.ttf
IP
File type TrueType Font data, 13 tables, 1st "FFTM", 12 names, Macintosh, type 1 string\012- data
Size 112 kB (111748 bytes)
Hash 239480ff57a54b6a50464b70e4754d66
124a87b6641e8e4eb2e04b017eacda6c9e48e80e
6e0d938bcd2e5b57c5deb7b699c05786dd10573b53999eba5df940a4f68f90f8
GET /downloads/ek/icons/fonts/iconography.ttf HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
etag: "239480ff57a54b6a50464b70e4754d66:1513234538"
last-modified: Thu, 14 Dec 2017 06:55:38 GMT
server: AkamaiNetStorage
content-length: 111748
date: Sat, 03 Sep 2022 12:27:47 GMT
content-type: font/ttf
X-Firefox-Spdy: h2
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Google_EN_tcm233-4143606.svg
200 OK 3.5 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Google_EN_tcm233-4143606.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 0ab13026eb1e57d453e515161065dc47
515d40d28e7498f5a97d44352823a5e4af9eff99
47bedbe11b80b799f175bac0e4c55ffe2af6ca15166ae17e7191da9c81276b63
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Google_EN_tcm233-4143606.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 3523
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/emirates-logo-badge_tcm233-4139304.svg
200 OK 1.5 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/emirates-logo-badge_tcm233-4139304.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3539), with no line terminators
Hash e7ab2b9a5f4ced04740f2caa735a5e61
6b819f5194de7a2a16c2ed7e1211eb07ffcf0671
e69ba6d6ba3e305dfb021533c56f3535bc069ecc4210d112d8851817e7f937f4
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/emirates-logo-badge_tcm233-4139304.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 1513
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/emirates-logo-badge_tcm233-4139303.svg
200 OK 1.5 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/emirates-logo-badge_tcm233-4139303.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3539), with no line terminators
Hash e7ab2b9a5f4ced04740f2caa735a5e61
6b819f5194de7a2a16c2ed7e1211eb07ffcf0671
e69ba6d6ba3e305dfb021533c56f3535bc069ecc4210d112d8851817e7f937f4
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/emirates-logo-badge_tcm233-4139303.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 1513
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/light-1021_tcm233-4341670.png
200 OK 151 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/light-1021_tcm233-4341670.png
IP
ASN #7506 GMO Internet,Inc
File type PNG image data, 1020 x 497, 8-bit gray+alpha, non-interlaced\012- data
Size 151 kB (150927 bytes)
Hash 6a184729e671dfdbf36296ecc1171c83
f51907a03f997fe62f496c2ff60b39f4f250f0ac
1628ddd94630dcd5b1ca4085c3ee4efcefed8436c5ae07883e4d05aa142b85ff
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/light-1021_tcm233-4341670.png HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/saved_resource.html
200 OK 351 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/saved_resource.html
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (468)
Hash 7f2a0c699e43ddb0c1bfdd4a0f7f8789
7acddcdbfffd3a3c33a1f7ddc80c5fe989e74fb2
8126b65c23a63afef48ef1d09486f2d39e6f561ae996f2a77fabf363137e3ca4
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/saved_resource.html HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
Cookie: _qst_s=1; _qsst_s=1662208063026
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: text/html
Content-Length: 351
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/CoinsOnair_WIFI_355x184_tcm233-4137221.png
200 OK 99 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/CoinsOnair_WIFI_355x184_tcm233-4137221.png
IP
ASN #7506 GMO Internet,Inc
File type PNG image data, 355 x 184, 8-bit/color RGBA, non-interlaced\012- data
Hash 26c4e2d181cd7a1cb179575d2b1add67
3ade379000adcfada0f0672bd8f8a9ed83079683
c9db5be6eb59d90b9b9de1bb3c553fe7e301b257d1df9939bc48e2a5a4c8533f
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/CoinsOnair_WIFI_355x184_tcm233-4137221.png HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 312 B IP
Hash 746ea7afe0d6e99107f4c77c64f48b16
97cbcc6200b9e035b9e6a0496a9a05714acc68bd
c4765207f1fb36c31f998f005f171d00aac8a722226eaa13f4f86ee73a2f1449
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6185
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:47 GMT
Last-Modified: Sat, 03 Sep 2022 10:44:42 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 312
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/facebook.svg
200 OK 573 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/facebook.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 1eb3f3470cedf13312432e9a04ac88c1
a6df7331db89c5648806d9290c0d81c3bd6b8a03
026160728588df0cdeea6861b7ee64b9a9676cd17217404cf10dedffde644df8
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/facebook.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 573
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 9141ba26ef2c0c456e220fed6dcef447
0baa89ae4ca780a6bdf5055a333e41889f64a4bf
16f8446192cf6d8e38e587b59c55df722efb2b870683486917da287295241c89
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6414
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:47 GMT
Last-Modified: Sat, 03 Sep 2022 10:40:53 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/twitter.svg
200 OK 884 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/twitter.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash a25ee01a7539412952042024a185c4ec
afa8809a33e095fe3620d24c973d29f43bdb8873
b64b6ec0640a39df2854dc252f278295759c8ec1feeaea9255d9317022b79402
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/twitter.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 884
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_GLOBAL&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_EN
302 Found 0 B URL HTTP/2 creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_GLOBAL&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_EN
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_GLOBAL&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_EN HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 03 Sep 2022 12:27:47 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-max-age: 3600
vary: Origin
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: u=H0q0LsXeyN0YWDknQIXU;Path=/;Domain=.creativecdn.com;Expires=Sun, 03-Sep-2023 12:27:47 GMT;Max-Age=31536000;Secure;SameSite=None
ts=1662208067;Path=/;Domain=.creativecdn.com;Expires=Sun, 03-Sep-2023 12:27:47 GMT;Max-Age=31536000;Secure;SameSite=None
location: https://creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_GLOBAL&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_EN&tc=1
content-length: 0
X-Firefox-Spdy: h2
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/youtube.svg
200 OK 720 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/youtube.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash d1ae7e44eb89646e7469c5f7795e9f3f
9617b8d8fb13da36d15ab792e5982f5201f735d6
53b3f114675207adc5b8dd09348f21307edfbb51fd198f87f74dd20a35b924ae
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/youtube.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 720
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_GLOBAL&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_EN&tc=1
204 No Content 0 B URL HTTP/2 creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_GLOBAL&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_EN&tc=1
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_GLOBAL&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_EN&tc=1 HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://macst.cc/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfebef69e5fabc951f14402956205010
9fa643ba807b452fbe04f75fb19cca233b697846
fc7cfca89177fb88ac42f71cbfcbcc98480f55f7673b431f3754c44842c92f99
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC7CFCA89177FB88AC42F71CBFCBCC98480F55F7673B431F3754C44842C92F99"
Last-Modified: Fri, 02 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21597
Expires: Sat, 03 Sep 2022 18:27:44 GMT
Date: Sat, 03 Sep 2022 12:27:47 GMT
Connection: keep-alive
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/linkedin.svg
200 OK 669 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/linkedin.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 4181512f68adc949d8ee576bc6f8a3e7
7d591bc9eed848a57e7d6d364d39e7a37988e90e
9e3c0e528d4ef8643aa086ea62d9098dd38ea8038d1f9170df3e7413104a30b1
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/linkedin.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 669
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 314 B IP
Hash e2bfb90e98c2cc52fbc918232b675509
81504b856c749f8f6b0961f7934730d12a02b859
4aefe3b9cc2ed5c5298c53fa4a74307beb7d58d1a768dfa82bed4922f92e0a91
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6323
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:47 GMT
Last-Modified: Sat, 03 Sep 2022 10:42:24 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 314
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/instagram.svg
200 OK 1.5 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/instagram.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash bb9841719a26b4ee71ed3293f29ebb10
27e4b3b21caf4cd0caa23b5affc3ce15ac7eab92
670281f76677cca08b38f0e6bf33ba5cfa7dec6d61904caa20e6099f96a75487
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/instagram.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 1509
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:22 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 12:27:47 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=wjmffF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czJSRnlEJTJCNkZWREx2ejBvM0lwN29DYmx0NiUyRmdwNzA4bmhVVWVaSWVnalZ1; expires=Thu, 28 Sep 2023 12:27:47 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 245735
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Apex_Badge_EN_tcm233-5456919.svg
200 OK 4.8 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Apex_Badge_EN_tcm233-5456919.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 5b4c26ad84145ad10f708816c4728f69
cb4e75205194040fb0c631491817d59092b8a24e
87bae0d13fd9bdd53b2e0fedae81160ac2b9ff55bce167687c2051c673f8751d
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/Apex_Badge_EN_tcm233-5456919.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 4787
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 313 B IP
Hash 588f803eb3ec2b3213cc6a2d132615f0
3656f5e8a109223ebaf6b9dfd0bb7c81a19d88d7
5c00757b1158e2c99bd7a6f5ff033a109f7e06f7aa8bffc6562003ad354c8363
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4228
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:47 GMT
Last-Modified: Sat, 03 Sep 2022 11:17:19 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
200 OK 313 B IP
Hash 588f803eb3ec2b3213cc6a2d132615f0
3656f5e8a109223ebaf6b9dfd0bb7c81a19d88d7
5c00757b1158e2c99bd7a6f5ff033a109f7e06f7aa8bffc6562003ad354c8363
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4185
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:47 GMT
Last-Modified: Sat, 03 Sep 2022 11:18:02 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 313
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/tripadvisor-badge_tcm233-4231455.svg
200 OK 8.0 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/tripadvisor-badge_tcm233-4231455.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d86188adb3e3ef2198709067087176ee
b14f31acd818b752d3696b0bd46d56580245334c
9ce29f24cef1b70644139e825cd2d2488bf0e96840c182175286e287c3526979
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/tripadvisor-badge_tcm233-4231455.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 8047
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/skytrax_badge_2019_tcm233-4231454.svg
200 OK 7.4 kB URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/skytrax_badge_2019_tcm233-4231454.svg
IP
ASN #7506 GMO Internet,Inc
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (985)
Hash 1b560346f100a9f987dae8c380b9a777
01b34709633bd812581de9ab9500405722e55915
906af30488dedb4bf44a5d60485a6be6db14d4e3daa516630ef26d2319b40606
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/skytrax_badge_2019_tcm233-4231454.svg HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: image/svg+xml
Content-Length: 7361
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range,Accept-Encoding
Content-Encoding: gzip
macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/0
200 OK 0 B URL HTTP/1.1 macst.cc/ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/0
IP
ASN #7506 GMO Internet,Inc
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /ue/retailresearch.emirates.claim.gift-cards/Manage%20your%20booking%20_%20Emirates_files/0 HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 12:27:47 GMT
Content-Type: text/plain
Content-Length: 0
Connection: keep-alive
Server: Apache
Last-Modified: Sun, 17 Nov 2019 05:03:24 GMT
Accept-Ranges: none
Vary: Range
macst.cc/resources/b65b7e9def1619f2665ade3d0c6e96
404 Not Found 19 kB URL HTTP/2 macst.cc/resources/b65b7e9def1619f2665ade3d0c6e96
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11315)
Hash 445d3af6844c2f665d720d259eae018b
a620414ae1b949396fd3f9ccefa11cca910c4eef
cdaf289919b2096b4c936a3e249bba227791b88ae4417467fa54585c799394b4
Analyzer Verdict Alert fortinet Phishing
POST /resources/b65b7e9def1619f2665ade3d0c6e96 HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 967
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Sat, 03 Sep 2022 12:27:47 GMT
content-type: text/html
content-length: 19268
server: Apache
last-modified: Tue, 25 Jan 2022 06:58:09 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 11 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (38826), with no line terminators
Hash 293ae3e0fc8b0d5c143fdf9d8490228d
3976c659b908e70818a3a1ac71860b497fe2d1a9
04a840d967ae836e14179bde574cabf14a1fc871182ca0f8193e7a0b06c727ab
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/
HTTP/1.1 200 OK
Cache-Control: private,max-age=1800
Content-Length: 11367
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 28 Jul 2022 17:32:37 GMT
Accept-Ranges: bytes
ETag: "80a8697a8a2d81:0"
Vary: Accept-Encoding
Set-Cookie: MUID=3FD63F91260F65DB0CA52D8527FA64C6; domain=.bing.com; expires=Thu, 28-Sep-2023 12:27:48 GMT; path=/; SameSite=None; Secure; Priority=High;
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Access-Control-Allow-Origin: *
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: F107C4ED56B9413694E23B8279F37B3C Ref B: OSL30EDGE0122 Ref C: 2022-09-03T12:27:48Z
Date: Sat, 03 Sep 2022 12:27:47 GMT
ag.gbc.criteo.com/newidsd
200 OK 3.4 kB URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
Hash 4deffa7713b550bb6e156b6c1b61467a
1ccbcbaef359b721e31602832f8573597bfeff48
749df99b8eef0e8eba1f4df2e9bed24513f6e50ea337793a038fa7d87906e5e1
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 104224
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.emirates.com/favicon.ico
200 OK 8.4 kB URL HTTP/2 www.emirates.com/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash 557da9e1bd991e23ad225bd74c0d11c3
9dbc8d290989f0dc86b483f316788c08f4fd47ca
985829e36de39448697d796f80d4ce99eb492f16f7afb2ce84a5a3d171105213
GET /favicon.ico HTTP/1.1
Host: www.emirates.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
content-length: 8380
last-modified: Sun, 14 Mar 2021 02:01:40 GMT
accept-ranges: bytes
etag: "5eed8cf97518d71:0"
server: Microsoft-IIS/10.0
x-frame-options: SAMEORIGIN
cache-control: public, max-age=604800
date: Sat, 03 Sep 2022 12:27:48 GMT
x-ek-edgecache: true
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
d1m54pdnjzjnhe.cloudfront.net/emirates/uvbuilder/uvbuilder.latest.min.js
200 OK 3.2 kB URL HTTP/1.1 d1m54pdnjzjnhe.cloudfront.net/emirates/uvbuilder/uvbuilder.latest.min.js
IP
File type ASCII text, with very long lines (11379)
Hash 12fdc0e1da2ffb9380460b02ec629555
dab92c8d8c7d846ee159b30992317efa48588e2d
f69422fa94d63ba91d3e8cc568715db203f3541afe0ace1d0f568c87ba35d460
GET /emirates/uvbuilder/uvbuilder.latest.min.js HTTP/1.1
Host: d1m54pdnjzjnhe.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 3172
Connection: keep-alive
Last-Modified: Wed, 12 Apr 2017 15:58:42 GMT
Content-Encoding: gzip
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
Date: Sat, 03 Sep 2022 12:27:49 GMT
ETag: "12fdc0e1da2ffb9380460b02ec629555"
X-Cache: RefreshHit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6QA6IpuIQNF9n1guyIkufEHpPPuQCCbGnYw5d2bg07rP58qb0X9-QA==
bat.bing.com/action/0?ti=5711176&Ver=2&mid=6323fcc1-7e76-4ebd-b628-4f13f8a53b1e&sid=d08f9cc02b8311ed9d38593c40bb68f0&vid=d08fa6002b8311ed8a834f140cc4ec86&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Customer%20Satisfaction%20Survey%7C%20Emirates&p=http%3A%2F%2Fmacst.cc%2Fue%2Fretailresearch.emirates.claim.gift-cards%2Fs5.html&r=<=3293&evt=pageLoad&sv=1&rn=296299
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=5711176&Ver=2&mid=6323fcc1-7e76-4ebd-b628-4f13f8a53b1e&sid=d08f9cc02b8311ed9d38593c40bb68f0&vid=d08fa6002b8311ed8a834f140cc4ec86&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Customer%20Satisfaction%20Survey%7C%20Emirates&p=http%3A%2F%2Fmacst.cc%2Fue%2Fretailresearch.emirates.claim.gift-cards%2Fs5.html&r=<=3293&evt=pageLoad&sv=1&rn=296299
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5711176&Ver=2&mid=6323fcc1-7e76-4ebd-b628-4f13f8a53b1e&sid=d08f9cc02b8311ed9d38593c40bb68f0&vid=d08fa6002b8311ed8a834f140cc4ec86&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Customer%20Satisfaction%20Survey%7C%20Emirates&p=http%3A%2F%2Fmacst.cc%2Fue%2Fretailresearch.emirates.claim.gift-cards%2Fs5.html&r=<=3293&evt=pageLoad&sv=1&rn=296299 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3759290C40CB67070E813B18413E666B; domain=.bing.com; expires=Thu, 28-Sep-2023 12:27:48 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 74E129D75C224BB88BA1B3BA80350952 Ref B: OSL30EDGE0521 Ref C: 2022-09-03T12:27:48Z
date: Sat, 03 Sep 2022 12:27:47 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/5711176.js
200 OK 666 B URL HTTP/2 bat.bing.com/p/action/5711176.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with CRLF line terminators
Hash dcaf27cad31faf135a0bdad92937fd65
a12934ab7d20d4de784b1e8900964e61174b62b3
69026f869ad02a8cbf2c9ae6283675a0cd73f984f88dfbad4c16dd6bdca1bbcf
GET /p/action/5711176.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=60
content-length: 666
content-type: application/javascript; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
set-cookie: MUID=117E6A43F2D06DEE376A7857F3256C5E; domain=.bing.com; expires=Thu, 28-Sep-2023 12:27:48 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-powered-by: ARR/3.0
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: E90F4D9979B844EA97556861D1ED5701 Ref B: OSL30EDGE0521 Ref C: 2022-09-03T12:27:48Z
date: Sat, 03 Sep 2022 12:27:47 GMT
X-Firefox-Spdy: h2
www.clarity.ms/tag/uet/5711176
200 OK 1.0 kB URL HTTP/2 www.clarity.ms/tag/uet/5711176
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (1038), with no line terminators
Hash 2d2bc965d9a4b9d7414bcef95d2c31ab
6487626ddef8a43842ff42dde4b58c0b9000a7ae
e8c5d244f024b93623ca8cb3819185e74a80f4d60972399ec8c3d530d4567871
GET /tag/uet/5711176 HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-length: 1038
content-type: application/x-javascript
expires: -1
set-cookie: CLID=ea7b3345f7b741aa8da24b477e052f5c.20220903.20230903; expires=Sun, 03 Sep 2023 12:27:48 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:b1d896b3-bec7-448b-b764-240152e813e8
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0REgTYwAAAACaNeRPZ8KIQaltBX8yGKUjUk9NMzBFREdFMDUxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Sat, 03 Sep 2022 12:27:47 GMT
X-Firefox-Spdy: h2
creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_NotSet
302 Found 0 B URL HTTP/2 creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_NotSet
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_NotSet HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 03 Sep 2022 12:27:48 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST
access-control-max-age: 3600
vary: Origin
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: u=CmmZ0sS06LV4bOvYfGhU;Path=/;Domain=.creativecdn.com;Expires=Sun, 03-Sep-2023 12:27:48 GMT;Max-Age=31536000;Secure;SameSite=None
ts=1662208068;Path=/;Domain=.creativecdn.com;Expires=Sun, 03-Sep-2023 12:27:48 GMT;Max-Age=31536000;Secure;SameSite=None
location: https://creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_NotSet&tc=1
content-length: 0
X-Firefox-Spdy: h2
cdn.appdynamics.com/adrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js
200 OK 20 kB URL HTTP/1.1 cdn.appdynamics.com/adrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js
IP
File type ASCII text, with very long lines (563)
Hash 308d623529f926fea898b8ff10b7fffb
9012e2d607412d91477e7fc9f119478497c12756
085c219edce91818fa1f48899cb8389ae020850bda9d3fe680e4b163dc90f570
GET /adrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js HTTP/1.1
Host: cdn.appdynamics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macst.cc/
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.16.1
Last-Modified: Mon, 14 May 2018 17:55:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
timing-allow-origin: *
Content-Encoding: gzip
Date: Mon, 22 Aug 2022 06:39:26 GMT
Cache-Control: public, max-age=2678400, s-max-age=14400
ETag: W/"5af9cd79-c81b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sAhjhCfJfOc7TRm3OtWx0VBONb7VPLt8L6YCOyvtcVi9kfdh5y8bjw==
Age: 1057702
creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_NotSet&tc=1
204 No Content 0 B URL HTTP/2 creativecdn.com/tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_NotSet&tc=1
IP
ASN #204995 Rtb House S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?id=pr_9gxVkOMUoh87gMDR0mZb&ncm=1&id=pr_9gxVkOMUoh87gMDR0mZb_custom_market_&id=pr_9gxVkOMUoh87gMDR0mZb_custom_lang_NotSet&tc=1 HTTP/1.1
Host: creativecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://macst.cc/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
X-Firefox-Spdy: h2
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=B205E6EEAAC7495D965E968523B5B094&RedC=c.clarity.ms&MXFR=23899DEA646967152E598FFE60696984
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=23899DEA646967152E598FFE60696984; domain=.clarity.ms; expires=Thu, 28-Sep-2023 12:27:48 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Sat, 03 Sep 2022 12:27:48 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 45a84d1ef373ad25f81ff13adae0a259
f112a87df1b6dd6fc9fdcae73cd4bc17bee6a1b0
bdf99df20402914b16d530717c93520764b26aef8692bb5237cbb5204926413f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6435
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 12:27:48 GMT
Last-Modified: Sat, 03 Sep 2022 10:40:33 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
fra-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=EC-AAB-BFE&msg=M126&stack=b.prototype.uj%40http%3A%2F%2Fcdn.appdynamics.com%2Fadrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js%3A48%3A104%0Ab%2F%3C%40http%3A%2F%2Fcdn.appdynamics.com%2Fadrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js%3A48%3A25%0Ae%40http%3A%2F%2Fmacst.cc%2Fue%2Fretailresearch.emirates.claim.gift-cards%2FManage%2520your%2520booking%2520_%2520Emirates_files%2Fadrum-4.5.0.773.js.download%3A7%3A107%0A
200 OK 26 B URL HTTP/1.1 fra-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=EC-AAB-BFE&msg=M126&stack=b.prototype.uj%40http%3A%2F%2Fcdn.appdynamics.com%2Fadrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js%3A48%3A104%0Ab%2F%3C%40http%3A%2F%2Fcdn.appdynamics.com%2Fadrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js%3A48%3A25%0Ae%40http%3A%2F%2Fmacst.cc%2Fue%2Fretailresearch.emirates.claim.gift-cards%2FManage%2520your%2520booking%2520_%2520Emirates_files%2Fadrum-4.5.0.773.js.download%3A7%3A107%0A
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6a43099d5c8fe991a7aa7ebaca53069d
5bce2f0d57305c58c7b05bfce29ebb39a18f5570
3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
GET /eumcollector/error.gif?version=1&appKey=EC-AAB-BFE&msg=M126&stack=b.prototype.uj%40http%3A%2F%2Fcdn.appdynamics.com%2Fadrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js%3A48%3A104%0Ab%2F%3C%40http%3A%2F%2Fcdn.appdynamics.com%2Fadrum-ext.f1b9622831c5f758b69f8c4fafbe9659.js%3A48%3A25%0Ae%40http%3A%2F%2Fmacst.cc%2Fue%2Fretailresearch.emirates.claim.gift-cards%2FManage%2520your%2520booking%2520_%2520Emirates_files%2Fadrum-4.5.0.773.js.download%3A7%3A107%0A HTTP/1.1
Host: fra-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
content-type: image/gif
date: Sat, 03 Sep 2022 12:27:48 GMT
expires: 0
pragma: no-cache
server: envoy
vary: *
x-content-type-options: nosniff
x-envoy-upstream-service-time: 0
Content-Length: 26
Connection: keep-alive
c.bing.com/c.gif?CtsSyncId=B205E6EEAAC7495D965E968523B5B094&RedC=c.clarity.ms&MXFR=23899DEA646967152E598FFE60696984
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=B205E6EEAAC7495D965E968523B5B094&RedC=c.clarity.ms&MXFR=23899DEA646967152E598FFE60696984
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=B205E6EEAAC7495D965E968523B5B094&RedC=c.clarity.ms&MXFR=23899DEA646967152E598FFE60696984 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://macst.cc/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=B205E6EEAAC7495D965E968523B5B094&MUID=22E5E214F4A2603D18B4F000F55761E5
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=22E5E214F4A2603D18B4F000F55761E5; domain=c.bing.com; expires=Thu, 28-Sep-2023 12:27:49 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CE6034DA499945CD9FD2971B28353236 Ref B: OSL30EDGE0521 Ref C: 2022-09-03T12:27:49Z
date: Sat, 03 Sep 2022 12:27:48 GMT
content-length: 0
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=B205E6EEAAC7495D965E968523B5B094&MUID=22E5E214F4A2603D18B4F000F55761E5
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=B205E6EEAAC7495D965E968523B5B094&MUID=22E5E214F4A2603D18B4F000F55761E5
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=B205E6EEAAC7495D965E968523B5B094&MUID=22E5E214F4A2603D18B4F000F55761E5 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://macst.cc/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Wed, 17 Aug 2022 23:56:46 GMT
accept-ranges: bytes
etag: "de363c295b2d81:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Sat, 03-Sep-2022 12:37:49 GMT; path=/; SameSite=None; Secure;
date: Sat, 03 Sep 2022 12:27:49 GMT
content-length: 42
X-Firefox-Spdy: h2
b.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: b.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1072
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
access-control-allow-origin: http://macst.cc
access-control-allow-credentials: true
x-powered-by: ASP.NET
date: Sat, 03 Sep 2022 12:27:48 GMT
X-Firefox-Spdy: h2
bat.bing.com/actionp/0?ti=5711176&Ver=2&mid=6323fcc1-7e76-4ebd-b628-4f13f8a53b1e&sid=d08f9cc02b8311ed9d38593c40bb68f0&vid=d08fa6002b8311ed8a834f140cc4ec86&vids=1&msclkid=N&evt=dedup
204 No Content 0 B URL HTTP/2 bat.bing.com/actionp/0?ti=5711176&Ver=2&mid=6323fcc1-7e76-4ebd-b628-4f13f8a53b1e&sid=d08f9cc02b8311ed9d38593c40bb68f0&vid=d08fa6002b8311ed8a834f140cc4ec86&vids=1&msclkid=N&evt=dedup
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /actionp/0?ti=5711176&Ver=2&mid=6323fcc1-7e76-4ebd-b628-4f13f8a53b1e&sid=d08f9cc02b8311ed9d38593c40bb68f0&vid=d08fa6002b8311ed8a834f140cc4ec86&vids=1&msclkid=N&evt=dedup HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=278404301FFA6CA116CD16241E0F6D3D; domain=.bing.com; expires=Thu, 28-Sep-2023 12:27:49 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CF62A9373C0546F9BBA2AEA7FEF42F32 Ref B: OSL30EDGE0521 Ref C: 2022-09-03T12:27:49Z
date: Sat, 03 Sep 2022 12:27:49 GMT
X-Firefox-Spdy: h2
fra-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/EC-AAB-BFE/adrum
200 OK 0 B URL HTTP/1.1 fra-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/EC-AAB-BFE/adrum
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /eumcollector/beacons/browser/v1/EC-AAB-BFE/adrum HTTP/1.1
Host: fra-col.eum-appdynamics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 18267
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-headers: origin, content-type, accept
access-control-allow-origin: *
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0
content-type: text/html
date: Sat, 03 Sep 2022 12:27:49 GMT
expires: 0
pragma: no-cache
server: envoy
vary: *
x-content-type-options: nosniff
x-envoy-upstream-service-time: 0
Content-Length: 0
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2e13cf1-38c2-4f82-a50c-b409a24f3af6.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2e13cf1-38c2-4f82-a50c-b409a24f3af6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4cb62c7c522b71c62a97630d8330ef5
950611314b81428b3d80ff8659272cc800cf48b6
3fd0bbf8a1fe8776136d611d6b99b909b71e6af3a13f8794338af2f0026b59ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2e13cf1-38c2-4f82-a50c-b409a24f3af6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7975
x-amzn-requestid: d4695cb0-76ed-495c-b548-d7819edd6d90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XwqDSGuDIAMF6kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631023ae-7ba42ae9407c626a02d10e7f;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 03:14:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: paxjtCjggGuEMbpwW1HmCdQOemdktodVUl-grweVuYke_NynMIHMlg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 03:54:34 GMT
age: 30799
etag: "950611314b81428b3d80ff8659272cc800cf48b6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
macst.cc/TealeafTarget.aspx
404 Not Found 19 kB URL HTTP/1.1 macst.cc/TealeafTarget.aspx
IP
ASN #7506 GMO Internet,Inc
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11315)
Hash 445d3af6844c2f665d720d259eae018b
a620414ae1b949396fd3f9ccefa11cca910c4eef
cdaf289919b2096b4c936a3e249bba227791b88ae4417467fa54585c799394b4
Analyzer Verdict Alert fortinet Phishing
POST /TealeafTarget.aspx HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Content-Type: application/json
X-Tealeaf: device (UIC) Lib/5.1.0.1731
X-TealeafType: GUI
X-TeaLeaf-Page-Url: /ue/retailresearch.emirates.claim.gift-cards/s5.html
X-Tealeaf-MessageTypes: 1,2,7
ADRUM: isAjax:true
Content-Length: 1891
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/ue/retailresearch.emirates.claim.gift-cards/s5.html
Cookie: _qst_s=1; _qsst_s=1662208063026; cto_lwid=84edc977-d061-40a9-9aa7-4ba372ecbff1; _uetsid=d08f9cc02b8311ed9d38593c40bb68f0; _uetvid=d08fa6002b8311ed8a834f140cc4ec86; _clck=o671k6|1|f4k|0; cto_bundle=k2nzsV8wcGpKRktoV0QzNTFkcU9JREExdjBRbGoxT1JuNGd4RjdONHNZQ2tiUkdoU09vaDFEbTVnYXptSUIxckRxejdoZEJNZzRkRUtxTnhtVkhKZFVHdyUyQnNPVWJqMWRSS0Z4OFpQVHU1WmxoY21nSzlNZ2JUekZjMzhVdTdtamkzc2ox; _clsk=1gq3w2s|1662208066967|1|0|b.clarity.ms/collect
HTTP/1.1 404 Not Found
Date: Sat, 03 Sep 2022 12:27:53 GMT
Content-Type: text/html
Content-Length: 19268
Connection: keep-alive
Server: Apache
Last-Modified: Tue, 25 Jan 2022 06:58:09 GMT
Accept-Ranges: bytes
fonts.googleapis.com/css?family=Roboto+Condensed&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Condensed&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese
IP
GET /css?family=Roboto+Condensed&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 03 Sep 2022 12:27:45 GMT
date: Sat, 03 Sep 2022 12:27:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.clarity.ms/eus2/s/0.6.40/clarity.js
200 OK 0 B URL HTTP/2 www.clarity.ms/eus2/s/0.6.40/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus2/s/0.6.40/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d8bd4806fdad30"
vary: Accept-Encoding
request-context: appId=cid-v1:2f7711a9-b21e-4abe-a9d6-5b0ce5d18b64
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
x-azure-ref: 0REgTYwAAAABJd+gM/xovRqdFvz1JHgn7Uk9NMzBFREdFMDUxMgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Sat, 03 Sep 2022 12:27:47 GMT
X-Firefox-Spdy: h2
cdn.ek.aero/system/shared/css/images/flags.svg
200 OK 0 B URL HTTP/2 cdn.ek.aero/system/shared/css/images/flags.svg
IP
GET /system/shared/css/images/flags.svg HTTP/1.1
Host: cdn.ek.aero
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
etag: "01a17f97518d71:0"
last-modified: Mon, 15 Aug 2022 06:06:41 GMT
server: Akamai Resource Optimizer
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-length: 55394
cache-control: public, max-age=480858
date: Sat, 03 Sep 2022 12:27:46 GMT
content-type: image/svg+xml
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?topUrl=macst.cc
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?topUrl=macst.cc
IP
GET /syncframe?topUrl=macst.cc HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 12:27:47 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=608ffc87-0050-4f14-bff5-110c4d43f427; expires=Thu, 28 Sep 2023 12:27:47 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 381165
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 12:27:47 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 116935
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
macst.cc/resources/b65b7e9def1619f2665ade3d0c6e96
404 Not Found 0 B URL HTTP/2 macst.cc/resources/b65b7e9def1619f2665ade3d0c6e96
IP
ASN #7506 GMO Internet,Inc
Analyzer Verdict Alert fortinet Phishing
POST /resources/b65b7e9def1619f2665ade3d0c6e96 HTTP/1.1
Host: macst.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1037
Origin: http://macst.cc
Connection: keep-alive
Referer: http://macst.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sat, 03 Sep 2022 12:27:47 GMT
content-type: text/html
content-length: 19268
server: Apache
last-modified: Tue, 25 Jan 2022 06:58:09 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=wjmffF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czJSRnlEJTJCNkZWREx2ejBvM0lwN29DYmx0NiUyRmdwNzA4bmhVVWVaSWVnalZ1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 12:27:48 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=tPzrUV80M0RITmhlJTJCZkMwOUJGQlhaMUN2czJSRnlEJTJCNkZWREx2ejBvM0lwN29DYSUyRms1aHhucVQlMkZ1Y2FMaUtYSG5oaUg; expires=Thu, 28 Sep 2023 12:27:48 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 349429
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
cdn.appdynamics.com/adrum-xd.f1b9622831c5f758b69f8c4fafbe9659.html
200 OK 0 B URL HTTP/2 cdn.appdynamics.com/adrum-xd.f1b9622831c5f758b69f8c4fafbe9659.html
IP
GET /adrum-xd.f1b9622831c5f758b69f8c4fafbe9659.html HTTP/1.1
Host: cdn.appdynamics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macst.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
date: Wed, 24 Aug 2022 00:43:04 GMT
server: nginx/1.16.1
last-modified: Mon, 14 May 2018 17:55:19 GMT
etag: W/"5af9cd87-7e2"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: public, max-age=2678400, s-max-age=14400
timing-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3pMO5Em7RvMHCluQY3mdJLvn8azMKK2eY3labbPZ0dSHZgjbHVElzg==
age: 906284
X-Firefox-Spdy: h2
157.7.107.140
93.184.220.29
142.250.74.3
23.36.76.226
178.250.0.157
18.193.198.247
54.155.244.120
185.184.8.90
0.0.0.0