Report - grand-faceted-sodium.glitch.me/wqty.html#[email%C2%A0protected]

Report Overview

Submitted URL
grand-faceted-sodium.glitch.me/wqty.html#[email%C2%A0protected]
IP
18.204.240.65
ASN
#14618 AMAZON-AES
Submitted
2022-09-04 21:37:44
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ce1.uicdn.net	136303	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.8 kB	316 kB	213.165.66.58
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	68 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	6.2 kB	23.36.77.32
ocsp.sca1b.amazontrust.com	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	338 B	1.0 kB	54.230.245.100
app42.host	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.3 kB	84 kB	212.1.212.72
grand-faceted-sodium.glitch.me	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	973 B	42 kB	54.167.139.124
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	52.89.136.7
cloud.typenetwork.com	22613	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	783 B	2.4 kB	192.229.233.123
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
cdn.glitch.me	105928	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	446 B	171 kB	54.230.111.120
status.geotrust.com	3662	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	3.7 kB	93.184.220.29
cdn.glitch.com	118356	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	463 B	459 B	54.230.111.23
cloud.webtype.com	50593	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	414 B	702 B	104.21.11.219
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.36
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.35
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-04	medium	grand-faceted-sodium.glitch.me/wqty.html	Phishing
2022-09-04	medium	grand-faceted-sodium.glitch.me/robots.txt	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	app42.host/app/ionos/media/js/app.js?ver=21313	1.2 kB	2023-03-07	2023-10-26
Pretty URL app42.host/app/ionos/media/js/app.js?ver=21313 IP 212.1.212.72 ASN #47583 Hostinger International Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:33:48 Last Seen2023-10-26 18:49:15 Times Seen31 Hash 3835a331aee458ce0da1e76fa16b5a34 b8447955320444b691839a41997d04ff8675f780 4a92310d05c0276d2aaba910a3450647c6f597733b8ff7224ca2be93e78501d6 Loading...

	app42.host/app/ionos/media/js/helpers.js?ver=12839297292	12 kB	2023-03-07	2024-01-24
Pretty URL app42.host/app/ionos/media/js/helpers.js?ver=12839297292 IP 212.1.212.72 ASN #47583 Hostinger International Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:01:34 Last Seen2024-01-24 23:26:26 Times Seen60 Hash c137ec924689e5d1e258b62e9c947fed 9f4d12556ae37c393b1e53fa5c09657f5b6e8e45 8a315a59d6f6c9a70132f3c7b6b1bd8d6b684373fa0fb0f4b7d1c7db0e4bcbe3 Loading...

	grand-faceted-sodium.glitch.me/robots.txt	1.2 kB	2023-03-07	2023-03-29
Pretty URL grand-faceted-sodium.glitch.me/robots.txt IP 54.167.139.124 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:33:48 Last Seen2023-03-29 23:35:37 Times Seen9 Hash a7e4130cded554c1599b292efd5610d6 d3e5192e74b07aede47946e33d65597baefafdbd 31e2e82ffc5c2e691760d54839b7ac46839923737f540c7b7a1ecc0f06b0b2c9 Loading...

	grand-faceted-sodium.glitch.me/wqty.html#[email%C2%A0protected]	37 kB	2023-03-07	2023-03-07
Pretty URL grand-faceted-sodium.glitch.me/wqty.html#[email%C2%A0protected] IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:33:48 Last Seen2023-03-07 12:55:58 Times Seen1 Hash cb03884a73a5d681ebf9dae8a61b1381 518494d9d306bea226230d8f96d6a34e7e6f128c 12e6ed56ed698901d37b07228a2ab54554d536bae7f78e36e265a18c5eea6f98 Loading...

HTTP Transactions (46)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7463
Expires: Sun, 04 Sep 2022 23:41:56 GMT
Date: Sun, 04 Sep 2022 21:37:33 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

143.204.55.36

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 20:44:21 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: K-gkpaPt_oSlvWcsBM0H2Mx8jvNghoabL8VSn65ONt6e-Gon_7rp5g==
Age: 3192

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

143.204.55.35

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HNU-xvu2GW3OKSTq-uavXJO2LSqwoyzpmKZBgB5cGYjTEraRssiqXg==
age: 73336
X-Firefox-Spdy: h2

ocsp.sca1b.amazontrust.com/

54.230.245.100

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
54.230.245.100:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
578b71096d01f8560134f01ff5656ad1
c43538ea74f7626904d72b7f76cbb3d136e76e03
9395a1bb1ef594da4cbd5d0e8b5b8ce74bef32f8d473dbb79edcea598e07ac4b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152682
Date: Sun, 04 Sep 2022 21:37:33 GMT
Etag: "6314b3e4-1d7"
Expires: Tue, 06 Sep 2022 16:02:15 GMT
Last-Modified: Sun, 04 Sep 2022 14:19:16 GMT
Server: ECS (nyb/1D15)
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LRBcNlgOmj_VkwLVE2KI1sRl72quL-kOX4Sxm9pp5tjh5Po8LOSZng==
Age: 6179

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 21:37:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

grand-faceted-sodium.glitch.me/wqty.html

54.167.139.124

200 OK

38 kB

URL HTTP/2
grand-faceted-sodium.glitch.me/wqty.html
IP
54.167.139.124:0
ASN
#14618 AMAZON-AES

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (37820), with no line terminators
Size
38 kB (37820 bytes)
Hash
ce243a014b7e325201457a1243e81e77
7571cb05b4f19290342b13f78ea776dd89eed26f
9a2718b01edcd8f6525214d248c0f34354824d92626b285b3f58f502d0c58c29

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /wqty.html HTTP/1.1
Host: grand-faceted-sodium.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Sun, 04 Sep 2022 21:37:33 GMT
content-type: text/html; charset=utf-8
content-length: 37820
x-amz-id-2: YlGXSvewL6k9ZbhJ11PC85BiSVPJqAcT7g8OhupFRAjsmq4LrojGaf4ek8O6SaHpJU9SRTxPfsU=
x-amz-request-id: 6YB8XBANJYAPYJM3
last-modified: Wed, 31 Aug 2022 12:58:50 GMT
etag: "ce243a014b7e325201457a1243e81e77"
cache-control: no-cache
x-amz-version-id: iGCgAcny3J_wDxZakVXLY5jZZWQ5EGgX
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.36

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 04 Sep 2022 20:38:16 GMT
Expires: Sun, 04 Sep 2022 21:04:10 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ftT0knOrzBv27ur38xgTot24UbvOSWYLvFh4q_ynE771M247Kmtr_w==
Age: 3558

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
77d035f38a45e8a1ec30d5fe9611880b
01cf34de95257da64dac90edf5a86203f1160271
7dc687d6bb1679ba5567e58b4f8c1e78766e7ee36273ba7f62068c595d57f7f3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4882
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 21:37:34 GMT
Last-Modified: Sun, 04 Sep 2022 20:16:12 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0dd25f058ed0f2f95f4f48b8995215b9
0dad12d87b4b1905836aac608ea4ccb6accd2752
c2d2a25e67418679aeb09f3089006b237068fdffae49c0c9dc7649ddb4e9bd92

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2D2A25E67418679AEB09F3089006B237068FDFFAE49C0C9DC7649DDB4E9BD92"
Last-Modified: Sun, 04 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20149
Expires: Mon, 05 Sep 2022 03:13:23 GMT
Date: Sun, 04 Sep 2022 21:37:34 GMT
Connection: keep-alive

push.services.mozilla.com/

52.89.136.7

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.89.136.7:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SaOgrtqk3ljeYVO6evnFdA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: w4K3PkqpoRKSUQ+y7/FijFSQn1w=

app42.host/app/ionos/media/css/login.min.css?v=1579862045214

212.1.212.72

200 OK

6.3 kB

URL HTTP/2
app42.host/app/ionos/media/css/login.min.css?v=1579862045214
IP
212.1.212.72:0
ASN
#47583 Hostinger International Limited

File type
ASCII text, with very long lines (15571), with no line terminators
Size
6.3 kB (6308 bytes)
Hash
9829d7e1c46cd2db12e0b790421b1fb8
216db435cf28409bceecbe26d1357ed0892f865e
0bf1d0412fb80dffb16a97c13730d9357505d7fa3a641ca4fb43db81d9294fb9

HTTP Headers

GET /app/ionos/media/css/login.min.css?v=1579862045214 HTTP/1.1
Host: app42.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 21:37:34 GMT
content-type: text/css
last-modified: Tue, 01 Feb 2022 07:33:04 GMT
etag: "3cd3-61f8e230-e7944f902728107d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6308
date: Sun, 04 Sep 2022 21:37:34 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

app42.host/app/ionos/media/js/app.js?ver=21313

212.1.212.72

200 OK

410 B

URL HTTP/2
app42.host/app/ionos/media/js/app.js?ver=21313
IP
212.1.212.72:0
ASN
#47583 Hostinger International Limited

File type
ASCII text
Size
410 B (410 bytes)
Hash
bc47306778f8d56060a9b251ab70bb2a
02dd374a2028eee8e13e92230ec33967f5f73e6e
6d848c6e34218cf26c690ec03f83fdecdd9f2cb591006db18265d674f8e648bf

HTTP Headers

GET /app/ionos/media/js/app.js?ver=21313 HTTP/1.1
Host: app42.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 21:37:34 GMT
content-type: application/x-javascript
last-modified: Tue, 01 Feb 2022 07:33:04 GMT
etag: "48b-61f8e230-7a489c96446f3c8c;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 410
date: Sun, 04 Sep 2022 21:37:34 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

app42.host/app/ionos/media/css/navigation.css?v=3.17.6

212.1.212.72

200 OK

31 kB

URL HTTP/2
app42.host/app/ionos/media/css/navigation.css?v=3.17.6
IP
212.1.212.72:0
ASN
#47583 Hostinger International Limited

File type
ASCII text, with very long lines (21532)
Size
31 kB (30771 bytes)
Hash
9423466a067a2261d90c82964663e1ac
119f4bc78b49c76161af1245fc221e0ff629c9d4
01c94676021b908a2b015c22847fdb41f586f21fc7e2a934b9169907212c116f

HTTP Headers

GET /app/ionos/media/css/navigation.css?v=3.17.6 HTTP/1.1
Host: app42.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 21:37:34 GMT
content-type: text/css
last-modified: Tue, 01 Feb 2022 07:33:04 GMT
etag: "20123-61f8e230-6b6c2113fcc8a85e;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30771
date: Sun, 04 Sep 2022 21:37:34 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

app42.host/app/ionos/media/css/ionos.min.css?v=1579862045214

212.1.212.72

200 OK

23 kB

URL HTTP/2
app42.host/app/ionos/media/css/ionos.min.css?v=1579862045214
IP
212.1.212.72:0
ASN
#47583 Hostinger International Limited

File type
ASCII text, with very long lines (65474)
Size
23 kB (22608 bytes)
Hash
8763dc2e25cc70077c6dc327e7f39cad
cff126afc94c48b43203b01c54795cf88221d1ce
88900cff66d2be8843c622192502ef8310c27324b813001fd4bbc4e8a03a8b36

HTTP Headers

GET /app/ionos/media/css/ionos.min.css?v=1579862045214 HTTP/1.1
Host: app42.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 21:37:34 GMT
content-type: text/css
last-modified: Tue, 01 Feb 2022 07:33:04 GMT
etag: "29bf6-61f8e230-ebd53554a56e2b64;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 22608
date: Sun, 04 Sep 2022 21:37:34 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

app42.host/app/ionos/media/css/inpagelayer.css?v=3.17.6

212.1.212.72

200 OK

4.3 kB

URL HTTP/2
app42.host/app/ionos/media/css/inpagelayer.css?v=3.17.6
IP
212.1.212.72:0
ASN
#47583 Hostinger International Limited

File type
ASCII text, with very long lines (367)
Size
4.3 kB (4270 bytes)
Hash
e31dadcbd8e38d1fdad84300c35d5511
bc1b24f46a490373d98d832622bab0eec6fd290f
c7f61d819fedb1c1317155d9192692f8cd613a9ffb8167e409d418722feaba52

HTTP Headers

GET /app/ionos/media/css/inpagelayer.css?v=3.17.6 HTTP/1.1
Host: app42.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 21:37:34 GMT
content-type: text/css
last-modified: Tue, 01 Feb 2022 07:33:04 GMT
etag: "64e3-61f8e230-fc343dda9623583d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4270
date: Sun, 04 Sep 2022 21:37:34 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

app42.host/app/ionos/media/css/statuspage.css?v=3.17.6

212.1.212.72

200 OK

1.1 kB

URL HTTP/2
app42.host/app/ionos/media/css/statuspage.css?v=3.17.6
IP
212.1.212.72:0
ASN
#47583 Hostinger International Limited

File type
ASCII text
Size
1.1 kB (1076 bytes)
Hash
6e6b8e199ce89a92fd161455b3a9a741
e4fdb151a5312a063cf0b026537da06758010725
5e9371674eb60da1b9cdad4402531dc516d631b68e6a6b96653c54505eb60fc2

HTTP Headers

GET /app/ionos/media/css/statuspage.css?v=3.17.6 HTTP/1.1
Host: app42.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 21:37:34 GMT
content-type: text/css
last-modified: Tue, 01 Feb 2022 07:33:04 GMT
etag: "1599-61f8e230-c9b204123edfc8af;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1076
date: Sun, 04 Sep 2022 21:37:34 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

app42.host/app/ionos/media/js/helpers.js?ver=12839297292

212.1.212.72

200 OK

2.6 kB

URL HTTP/2
app42.host/app/ionos/media/js/helpers.js?ver=12839297292
IP
212.1.212.72:0
ASN
#47583 Hostinger International Limited

File type
ASCII text
Size
2.6 kB (2633 bytes)
Hash
ca1817507bfba1de5259ef9b906e3b18
0324dfb293c40238265cc4b2513be9a794483aa6
c3099ab68bd68e93ed711e8f49197ab1d00b58883f5b47758ce626a1b34db6c2

HTTP Headers

GET /app/ionos/media/js/helpers.js?ver=12839297292 HTTP/1.1
Host: app42.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 21:37:34 GMT
content-type: application/x-javascript
last-modified: Tue, 01 Feb 2022 07:33:04 GMT
etag: "2e3b-61f8e230-ac38a5d2bea79385;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2633
date: Sun, 04 Sep 2022 21:37:34 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

app42.host/app/ionos/media/images/favicon.ico

212.1.212.72

200 OK

12 kB

URL HTTP/2
app42.host/app/ionos/media/images/favicon.ico
IP
212.1.212.72:0
ASN
#47583 Hostinger International Limited

File type
MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 24 bits/pixel, 64x64, 24 bits/pixel\012- data
Size
12 kB (12213 bytes)
Hash
739fe7ce50289416744a5fb0cbb0d241
baee0f8bae58b14e002dbb17a2304e713f08981c
b62d94416ed328a44e76a46dbd3aa2193163cfb0a1f1c5715c13df2b55203dfb

HTTP Headers

GET /app/ionos/media/images/favicon.ico HTTP/1.1
Host: app42.host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 11 Sep 2022 21:37:34 GMT
content-type: image/x-icon
last-modified: Tue, 01 Feb 2022 07:33:04 GMT
etag: "8f1c-61f8e230-363773d4ba201e60;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12213
date: Sun, 04 Sep 2022 21:37:34 GMT
server: LiteSpeed
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0dd25f058ed0f2f95f4f48b8995215b9
0dad12d87b4b1905836aac608ea4ccb6accd2752
c2d2a25e67418679aeb09f3089006b237068fdffae49c0c9dc7649ddb4e9bd92

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2D2A25E67418679AEB09F3089006B237068FDFFAE49C0C9DC7649DDB4E9BD92"
Last-Modified: Sun, 04 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20149
Expires: Mon, 05 Sep 2022 03:13:23 GMT
Date: Sun, 04 Sep 2022 21:37:34 GMT
Connection: keep-alive

grand-faceted-sodium.glitch.me/robots.txt

54.167.139.124

404 Not Found

3.7 kB

URL HTTP/2
grand-faceted-sodium.glitch.me/robots.txt
IP
54.167.139.124:0
ASN
#14618 AMAZON-AES

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
3.7 kB (3672 bytes)
Hash
cb7041c1a55eafb11d1cd3803a1d6ece
ca77adb188cc5841de7c4da8ea09d4f31e6b6210
39636ae7f7de3deacfe55d573d85d1bb5c349440065b16e573e5e3c62a0e3fb6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /robots.txt HTTP/1.1
Host: grand-faceted-sodium.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/wqty.html
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Sun, 04 Sep 2022 21:37:34 GMT
content-length: 3672
cache-control: max-age=0
X-Firefox-Spdy: h2

status.geotrust.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
status.geotrust.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
78aba94bd97e750b5c19335e7b043f91
be0c5b52bc246864579e61010695aca98a4b8a9f
c1233f24c5332c369b99a2a16b8b6611f950ec000142444760116b0219689f3f

HTTP Headers

POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6151
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 21:37:35 GMT
Last-Modified: Sun, 04 Sep 2022 19:55:04 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471

status.geotrust.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
status.geotrust.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
78aba94bd97e750b5c19335e7b043f91
be0c5b52bc246864579e61010695aca98a4b8a9f
c1233f24c5332c369b99a2a16b8b6611f950ec000142444760116b0219689f3f

HTTP Headers

POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1544
Cache-Control: max-age=103052
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 21:37:35 GMT
Etag: "63140423-1d7"
Expires: Tue, 06 Sep 2022 02:15:07 GMT
Last-Modified: Sun, 04 Sep 2022 01:49:23 GMT
Server: ECS (amb/6B79)
X-Cache: HIT
Content-Length: 471

status.geotrust.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
status.geotrust.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
78aba94bd97e750b5c19335e7b043f91
be0c5b52bc246864579e61010695aca98a4b8a9f
c1233f24c5332c369b99a2a16b8b6611f950ec000142444760116b0219689f3f

HTTP Headers

POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6047
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 21:37:35 GMT
Last-Modified: Sun, 04 Sep 2022 19:56:49 GMT
Server: ECS (amb/6B72)
X-Cache: HIT
Content-Length: 471

status.geotrust.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
status.geotrust.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
78aba94bd97e750b5c19335e7b043f91
be0c5b52bc246864579e61010695aca98a4b8a9f
c1233f24c5332c369b99a2a16b8b6611f950ec000142444760116b0219689f3f

HTTP Headers

POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5869
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 21:37:35 GMT
Last-Modified: Sun, 04 Sep 2022 19:59:46 GMT
Server: ECS (amb/6BAC)
X-Cache: HIT
Content-Length: 471

status.geotrust.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
status.geotrust.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
78aba94bd97e750b5c19335e7b043f91
be0c5b52bc246864579e61010695aca98a4b8a9f
c1233f24c5332c369b99a2a16b8b6611f950ec000142444760116b0219689f3f

HTTP Headers

POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6181
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 21:37:35 GMT
Last-Modified: Sun, 04 Sep 2022 19:54:34 GMT
Server: ECS (amb/6BAB)
X-Cache: HIT
Content-Length: 471

ce1.uicdn.net/exos/fonts/overpass/overpass-bold.woff

213.165.66.58

200 OK

42 kB

URL HTTP/2
ce1.uicdn.net/exos/fonts/overpass/overpass-bold.woff
IP
213.165.66.58:0
ASN
#8560 IONOS SE

File type
Web Open Font Format, TrueType, length 42092, version 0.0\012- data
Size
42 kB (42092 bytes)
Hash
998074293ec8cdc0e43e3d3add3b523e
c6b7b07672e36062a9d647295d85644b170ba5b2
7afccd9150b0fcbf1a1056e6cc6051c9b6d85a55da7bf1a7fb0f475c0b22facc

HTTP Headers

GET /exos/fonts/overpass/overpass-bold.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grand-faceted-sodium.glitch.me
Connection: keep-alive
Referer: https://app42.host/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sun, 04 Sep 2022 21:37:35 GMT
content-type: application/font-woff
content-length: 42092
set-cookie: DPX=v1:eZZ6WPh6Ey:PkudciRq:631528b4:gb; Path=/; Expires=Sun, 04-Sep-22 22:37:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:06 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:18:57 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/fonts/open-sans/opensans-bold.woff

213.165.66.58

200 OK

64 kB

URL HTTP/2
ce1.uicdn.net/exos/fonts/open-sans/opensans-bold.woff
IP
213.165.66.58:0
ASN
#8560 IONOS SE

File type
Web Open Font Format, TrueType, length 63564, version 1.0\012- data
Size
64 kB (63564 bytes)
Hash
892667349c5cff6fcf7e40439596b97c
7956fd048338c3c6253aa58f65442441866d4b4e
7d7a1a8ec55f31a6674fd2e2c41bcc6421a9aeb5cf161c6e93363f31347160f9

HTTP Headers

GET /exos/fonts/open-sans/opensans-bold.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grand-faceted-sodium.glitch.me
Connection: keep-alive
Referer: https://app42.host/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sun, 04 Sep 2022 21:37:35 GMT
content-type: application/font-woff
content-length: 63564
set-cookie: DPX=v1:ijxlrz97UO:66giHXZ5:631528b4:gb; Path=/; Expires=Sun, 04-Sep-22 22:37:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:07 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:18:57 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=5

213.165.66.58

200 OK

51 kB

URL HTTP/2
ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=5
IP
213.165.66.58:0
ASN
#8560 IONOS SE

File type
Web Open Font Format, TrueType, length 50688, version 1.0\012- data
Size
51 kB (50688 bytes)
Hash
f405f04cc9fd00b2b8f12d3657cd1b9d
a9eedef1924db8622319c87d4c436d47bba67398
35538b399f40d6db114f64b970fb8a612d88d833906f95f4cb8675c0277ecfb3

HTTP Headers

GET /exos/icons/exos-icon-font.woff?v=5 HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grand-faceted-sodium.glitch.me
Connection: keep-alive
Referer: https://app42.host/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sun, 04 Sep 2022 21:37:35 GMT
content-type: application/font-woff
content-length: 50688
set-cookie: DPX=v1:Tiq2K5cN0o:b2Qm8AUv:631528b4:gb; Path=/; Expires=Sun, 04-Sep-22 22:37:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Fri, 05 Aug 2022 04:39:12 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:23:34 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/fonts/open-sans/opensans-regular.woff

213.165.66.58

200 OK

64 kB

URL HTTP/2
ce1.uicdn.net/exos/fonts/open-sans/opensans-regular.woff
IP
213.165.66.58:0
ASN
#8560 IONOS SE

File type
Web Open Font Format, TrueType, length 63712, version 1.0\012- data
Size
64 kB (63712 bytes)
Hash
ac327c4db6284ef64ebe872b6308f5da
7dd17593d3947f4ea10be937634ef8f553443e5a
2e1587380141daff4e10a8e3db8f7ae5887102ab7576bff43049590f637ac20b

HTTP Headers

GET /exos/fonts/open-sans/opensans-regular.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grand-faceted-sodium.glitch.me
Connection: keep-alive
Referer: https://app42.host/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sun, 04 Sep 2022 21:37:35 GMT
content-type: application/font-woff
content-length: 63712
set-cookie: DPX=v1:4xTxgllA1L:9Kdpwq1C:631528b4:gb; Path=/; Expires=Sun, 04-Sep-22 22:37:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:07 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:18:56 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

cloud.typenetwork.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css

192.229.233.123

301 Moved Permanently

0 B

URL HTTP/2
cloud.typenetwork.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css
IP
192.229.233.123:0
ASN
#15133 EDGECAST

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css HTTP/1.1
Host: cloud.typenetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://grand-faceted-sodium.glitch.me/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 301 Moved Permanently
accept-ranges: bytes
access-control-allow-origin: *
age: 524642
cache-control: max-age=220752000
cf-cache-status: HIT
cf-ray: 7427e3eb78fabe53-CPH
content-type: text/html; charset=utf-8
date: Sun, 04 Sep 2022 21:37:35 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
expires: Sun, 02 Sep 2029 21:37:35 GMT
last-modified: Mon, 29 Aug 2022 20:03:29 GMT
location: ../projects/5027/fontface.css/
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
referrer-policy: same-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ppUXIjD7gerNhrSpbDecr7Fv10wWBC%2FJRfaUnAgbBQLiz0EmNWAneFY%2BVf%2FXe5sWhEHCAExecBNfnQi0WP5A3%2FHS9oqQVW3PRtUgWqce7fBtNIQw%2FDvtd%2FtzyfREIloTyNqQGGc%3D"}],"group":"cf-nel","max_age":604800}
server: ECS (ska/F70A)
x-cache: 301-HIT
x-content-type-options: nosniff
x-frame-options: DENY
content-length: 0
X-Firefox-Spdy: h2

cdn.glitch.com/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png?v=1595481653593

54.230.111.23

301 Moved Permanently

0 B

URL HTTP/1.1
cdn.glitch.com/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png?v=1595481653593
IP
54.230.111.23:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png?v=1595481653593 HTTP/1.1
Host: cdn.glitch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Sun, 04 Sep 2022 02:45:26 GMT
Location: https://cdn.glitch.me/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png
Server: AmazonS3
Vary: Origin
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: r_gu1cqfc1NUlTgP1bqv1umHANDGFWde7lRdZonacCGd_ZIzcRtFGA==
Age: 67930

cloud.typenetwork.com/projects/5027/fontface.css/

192.229.233.123

200 OK

342 B

URL HTTP/2
cloud.typenetwork.com/projects/5027/fontface.css/
IP
192.229.233.123:0
ASN
#15133 EDGECAST

File type
ASCII text
Size
342 B (342 bytes)
Hash
caa7b59ea17f2c10f2b9b191f66ba2fe
142edcc40f26d0e057023ec94c9b21c733914367
9d2bdf8cad918f51e603ad495d1440a26738f7d1da4b2fb88c37934b62e5eab1

HTTP Headers

GET /projects/5027/fontface.css/ HTTP/1.1
Host: cloud.typenetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
age: 402144
allow: GET, HEAD, OPTIONS
cache-control: max-age=10800
cf-cache-status: DYNAMIC
cf-ray: 7433840cae94737b-CPH
content-type: text/css; charset=utf-8
date: Sun, 04 Sep 2022 21:37:35 GMT
etag: "c1f564683671e119787de2d62eaa0be6+gzip"
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
expires: Mon, 05 Sep 2022 00:37:35 GMT
last-modified: Wed, 31 Aug 2022 05:29:12 GMT
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
referrer-policy: same-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BhAS3wNSr8rcMb0jZkyHumhtFODUc0%2FgJj3U6Kmc6XRVPU5VAcsszSAQAcL62%2BOdSlv2eg2vGg%2Fogp8WHHzwpRKH%2BkUYVdMnpG5Ri0rPVyTxq9M5TqRSHEHTTB902ZXtSQggfg4%3D"}],"group":"cf-nel","max_age":604800}
server: ECS (ska/F718)
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-frame-options: DENY
content-length: 342
X-Firefox-Spdy: h2

cdn.glitch.me/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png

54.230.111.120

200 OK

170 kB

URL HTTP/1.1
cdn.glitch.me/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png
IP
54.230.111.120:0
ASN
#16509 AMAZON-02

File type
PNG image data, 2064 x 1247, 8-bit/color RGB, non-interlaced\012- data
Size
170 kB (170377 bytes)
Hash
a002b1fa4cf220520bebb230b1b68a80
54498b85a95b9c3e118234471c390e7ba8d92f8e
22906a0f005949f275550013b9308673372a120f6c5e49145ac520658114f158

HTTP Headers

GET /d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png HTTP/1.1
Host: cdn.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://grand-faceted-sodium.glitch.me/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 170377
Connection: keep-alive
Date: Sun, 22 May 2022 04:00:56 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD, POST
Access-Control-Max-Age: 86400
Cache-Control: max-age=31536000
Last-Modified: Thu, 23 Jul 2020 05:20:52 GMT
ETag: "a002b1fa4cf220520bebb230b1b68a80"
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ULrEuLOYYcnDyIaZ5loI5j5OHD9v2SfGFD4TD1Nd0vCZBh2x0LpBJQ==
Age: 9135400

ce1.uicdn.net/exos/fonts/overpass/overpass-regular.woff

213.165.66.58

200 OK

43 kB

URL HTTP/2
ce1.uicdn.net/exos/fonts/overpass/overpass-regular.woff
IP
213.165.66.58:0
ASN
#8560 IONOS SE

File type
Web Open Font Format, TrueType, length 42580, version 0.0\012- data
Size
43 kB (42580 bytes)
Hash
ff37bc2bf376202dde890cc12b0fd0f9
f30c16ece8af43a25a46d7bd4e3ec95199fa6a55
d78e7ad4838a9fb4db11451b1db78ccd0b0c7b28f5787684ce2870918ce27bb5

HTTP Headers

GET /exos/fonts/overpass/overpass-regular.woff HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grand-faceted-sodium.glitch.me
Connection: keep-alive
Referer: https://app42.host/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sun, 04 Sep 2022 21:37:35 GMT
content-type: application/font-woff
content-length: 42580
set-cookie: DPX=v1:fuBj6E8PAf:PzcSeRj4:631528b4:gb; Path=/; Expires=Sun, 04-Sep-22 22:37:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:06 GMT
cache-control: max-age=31536000
expires: Fri, 25 Aug 2023 11:18:57 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=2

213.165.66.58

200 OK

51 kB

URL HTTP/2
ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=2
IP
213.165.66.58:0
ASN
#8560 IONOS SE

File type
Web Open Font Format, TrueType, length 50688, version 1.0\012- data
Size
51 kB (50688 bytes)
Hash
f405f04cc9fd00b2b8f12d3657cd1b9d
a9eedef1924db8622319c87d4c436d47bba67398
35538b399f40d6db114f64b970fb8a612d88d833906f95f4cb8675c0277ecfb3

HTTP Headers

GET /exos/icons/exos-icon-font.woff?v=2 HTTP/1.1
Host: ce1.uicdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://grand-faceted-sodium.glitch.me
Connection: keep-alive
Referer: https://app42.host/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sun, 04 Sep 2022 21:37:35 GMT
content-type: application/font-woff
content-length: 50688
set-cookie: DPX=v1:jotZTLdN8D:AgladRtK:631528b4:gb; Path=/; Expires=Sun, 04-Sep-22 22:37:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Fri, 05 Aug 2022 04:39:12 GMT
cache-control: max-age=31536000
expires: Sun, 03 Sep 2023 10:35:09 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16502
Expires: Mon, 05 Sep 2022 02:12:37 GMT
Date: Sun, 04 Sep 2022 21:37:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16502
Expires: Mon, 05 Sep 2022 02:12:37 GMT
Date: Sun, 04 Sep 2022 21:37:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16502
Expires: Mon, 05 Sep 2022 02:12:37 GMT
Date: Sun, 04 Sep 2022 21:37:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16502
Expires: Mon, 05 Sep 2022 02:12:37 GMT
Date: Sun, 04 Sep 2022 21:37:35 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11380 bytes)
Hash
fc4ceb10dd9fcaab21ae58dcf10c401f
6ce530af682094dc5413db9de02565691fab4da7
84ad58e126cce2ab6b1568ffe89a116bc1de0310bb72d4530eead2fb8191572c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11380
x-amzn-requestid: 61f37e21-33a8-49e6-b384-4ca1fcfbffa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8TLFA3oAMFQjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117414-42de5c4128eb9e011d848356;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sywGj-wLtW091vZYhx1AbRAgljYQWe6LuffDjwTDhEebqVzxpQuzEQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:48:58 GMT
age: 64117
etag: "6ce530af682094dc5413db9de02565691fab4da7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa79c31ef-8277-4472-8ef6-9ea1d733084d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.2 kB (8228 bytes)
Hash
5958d2ad91c698c62988bdb9256a4543
97f2c77f55f38ff6825fa7fc2ff3198bdef02517
578729554c47a75c74fb3f2d45865592291a35511e0b490b6b8cd4e72e917b73

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa79c31ef-8277-4472-8ef6-9ea1d733084d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8228
x-amzn-requestid: b107192f-7526-4c2e-8978-e4eceb93e09c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wxsE9OIAMFhqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80a-20ca9d565d4a04126e3b41b9;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:58 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7Lr8qT0rNXnIgRW__zB9HPkSRByNH1uHM19xDns4TLjQrC4N-3-ldA==
via: 1.1 7256fedee68a59a508800e0dda035348.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:00:58 GMT
age: 84997
etag: "97f2c77f55f38ff6825fa7fc2ff3198bdef02517"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8688 bytes)
Hash
6bb4b1d74f1443bc3328301ab3ae6464
2768253dacaaad6cb498c6b2eb7694208b0ce0a6
07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8688
x-amzn-requestid: e408351e-ba6c-4e55-815d-449af808282f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5yMEFBLoAMFtqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313ca4d-13831d8572a3b3cf54a0e747;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:42:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: GFM9jerDkTPdhlUTm99E7Lpksw2ZGnV81bNVaZLvWSAiRNDNtkZi4g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:48:07 GMT
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
content-type: image/jpeg
age: 85768
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09148d75-a4a3-47e6-8d91-01e8dfad4bc7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8931 bytes)
Hash
0eecb70391b63b662d13355e32d95ea1
5d5c724e26af57967b9a132a77d3986ba8d6ed9c
2c7f2aa1c725a5d39daf44ee746bb24b5c15aab41c67cf160814f7f87d1aacdf

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09148d75-a4a3-47e6-8d91-01e8dfad4bc7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8931
x-amzn-requestid: cfc0940f-ad6a-4535-91b7-70b200af68d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwGEVEoAMFriw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-5b6e6e5e3401eba533fb63df;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -ASFa6a22qh9wxe5u-hQxXe9R7JSyBVFLZb6291gbrUeftSsYDXAJA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:31:42 GMT
etag: "5d5c724e26af57967b9a132a77d3986ba8d6ed9c"
content-type: image/jpeg
age: 83153
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9690 bytes)
Hash
1bdfdf7e36f78f2f0e4d7ede9fdb76a8
babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5_jCLvdAC-XR-ax3RUbbx9275KPwACOPtAMxSbmv-aP-Lra4sC5zvw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:51:26 GMT
age: 85569
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

15 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
15 kB (14855 bytes)
Hash
ca50f9c56ff869b0b63ca71b1a9f8170
13b16ca74113dfd52ccf23e6bb39307fc713f984
76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: M9Y8U9vqVs1ATiPP9jLPybTJ-xwC--5oiRUpj9-imTWfh6_rmtL5Kw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:58:42 GMT
age: 85133
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

cloud.webtype.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css

104.21.11.219

301 Moved Permanently

0 B

URL HTTP/2
cloud.webtype.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css
IP
104.21.11.219:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css HTTP/1.1
Host: cloud.webtype.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://grand-faceted-sodium.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 301 Moved Permanently
date: Sun, 04 Sep 2022 21:37:35 GMT
location: https://cloud.typenetwork.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css
cache-control: max-age=3600
expires: Sun, 04 Sep 2022 22:37:35 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cpTTzqFsntJ4r23OHzipqSWjLh1IKaNi6%2F4ciXaxSekzqfEjQEK9YY9%2F3GK51kZquWJl%2FlFizUeaC7ZG3aDTdGKvrA2OmWVrBDQhIlj52XyZ13wN378FFQScp9CE9udkvgb%2Bog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7459de026f9cb503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (46)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size