r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2185
Expires: Mon, 06 Feb 2023 17:07:51 GMT
Date: Mon, 06 Feb 2023 16:31:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5254
Expires: Mon, 06 Feb 2023 17:59:00 GMT
Date: Mon, 06 Feb 2023 16:31:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12949
Expires: Mon, 06 Feb 2023 20:07:15 GMT
Date: Mon, 06 Feb 2023 16:31:26 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 15:34:05 GMT
content-type: application/json
age: 3441
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IoVooqZs6s9zzzEYg2V/tcgShlOB2Rf2GkF+yM/1lwVQUGQuA506YpMHB02suYRWBaAUCFu9Plo=
x-amz-request-id: 4F3JY8M3MSYKE2X3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 16:25:00 GMT
age: 386
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:26 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 16:07:20 GMT
age: 1447
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
dakv5.com/
301 Moved Permanently 162 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 06 Feb 2023 16:31:27 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://dakv5.com/
Strict-Transport-Security: max-age=31536000
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12095
Expires: Mon, 06 Feb 2023 19:53:02 GMT
Date: Mon, 06 Feb 2023 16:31:27 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ahldn99/ahsO/aVB9k7Knw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zAtEBoq4mLbEo8v055WWD3/W1Zs=
ocsp.sectigo.com/
200 OK 472 B IP
Hash 470b3f36fd6c69eba0474fa159ac44d3
2d433c54da4cc66923cf3ba89fee7b53d27a3055
11eee3dbaf97c1ba80caec4a9f2960665f511b302b4132a7715071e24a633a85
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 16:31:27 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 00:20:35 GMT
Expires: Sat, 11 Feb 2023 00:20:34 GMT
Etag: "2d433c54da4cc66923cf3ba89fee7b53d27a3055"
Cache-Control: max-age=373146,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795546b75c35b505-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 70d7e4cd91d9f630c160410d22c1cede
82f5d0fbb11bcde09c107b6c1cbc6e014bb08b85
b8679be6c92167c51793ca4a8774caf0a50949737a99652243208fcfda917faf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-KWN5QFV
200 OK 46 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KWN5QFV
IP
File type Unicode text, UTF-8 text, with very long lines (5199)
Hash 1be75299930e5b36db2828662e09d6b3
264e0d34f577bd7624246e2c334bd33d22639b75
e98e99172d0e5ea9642a3f351c25b95fe1c0cfa695897922bca5f1b3829dfef5
GET /gtm.js?id=GTM-KWN5QFV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 16:31:28 GMT
expires: Mon, 06 Feb 2023 16:31:28 GMT
cache-control: private, max-age=900
last-modified: Mon, 06 Feb 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46189
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9206c3ba6d5a17d62244c438fd03496e
069e8257aebe618953434b1299d065540125a512
937d395fed398e9410f75945e80f607f3146458b48cd47ba7249536ca2195817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:31:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8233
Expires: Mon, 06 Feb 2023 18:48:41 GMT
Date: Mon, 06 Feb 2023 16:31:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8233
Expires: Mon, 06 Feb 2023 18:48:41 GMT
Date: Mon, 06 Feb 2023 16:31:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8233
Expires: Mon, 06 Feb 2023 18:48:41 GMT
Date: Mon, 06 Feb 2023 16:31:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8233
Expires: Mon, 06 Feb 2023 18:48:41 GMT
Date: Mon, 06 Feb 2023 16:31:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d8c3ebd17a435401c7f9fe3b8f842be
f2106be148fea23bf961fcdb69ea4cb127aa5f3e
ee708e68414539c75ddc077e0be7b75a86fd4fc9b6c1ddd1da86d0b9aca35558
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4442
x-amzn-requestid: 1bb3d1b3-ff58-4b0d-9a2b-c25797530c5d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiQG1JoAMFRtg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-1bb478453ececa9613e7e4a2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9U-7wtL1xaLoE87hXcnrcTp-LCseI5ne10812N_9F_arqyi703w7Ng==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:10 GMT
age: 67278
etag: "f2106be148fea23bf961fcdb69ea4cb127aa5f3e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 352e4166a431e781e56cc7f169c7f8ca
866b76c34076cf2e18c6a071336fcf4f581f3c4d
75ba13b601f4b00c5b091eb29e7f6739ffee3e127bd6d3c4b35cc967bb6d354a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9779
x-amzn-requestid: 101b984b-9c04-4d07-b1fe-3d888f4bcd49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ftcNRFV_oAMF2_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dba721-72679ba0378015034e17b8ca;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 12:05:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FRZf4nkQyttwihy5BBbuHzT9lYQvBPqcOTdT5esu46vqMTvXAi5aQw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:57:24 GMT
age: 66844
etag: "866b76c34076cf2e18c6a071336fcf4f581f3c4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7dbe304b5138a360ff07a9842bcf6a7f
00572f7667e322c9ef34bc35b7998c1c172dd34c
d63c58d6c96e23c61b92272de8c2aab01f4cf85f3420cc434c05447d355b1c77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9108
x-amzn-requestid: a3bffa19-86ce-4a59-b826-551deddb3e9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fostZG2xIAMF0wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9c188-18acd7311c6190c9486e86ac;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 01:34:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oTDUyAr6LGDkH6Q8QCyx0Rc-wCE-fh5sEfjFm5jheeApNuv7VLh4Ow==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:45:42 GMT
age: 67546
etag: "00572f7667e322c9ef34bc35b7998c1c172dd34c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9046d887fd45a0940e31a74173d17798
1ff698b9cf660165e846dfc4770f29852aedce45
0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10514
x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPEIyoAMFqUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:09 GMT
age: 67279
etag: "1ff698b9cf660165e846dfc4770f29852aedce45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ccc8078cc937b7de0b299bcee1496f1b
395f04af71767acc9516387c8b07bde08968fdfe
cf959fc4a72d80dcab20c235bec6d21eadaab87efa7a8969744cd228628ba050
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9808
x-amzn-requestid: 75cc8041-19f5-4994-96b6-b14d3c90ec6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiSFZAIAMF65g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-355d272c345c8c37595b4bb2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T7YlRZ936VEDkBvo2YKrS3GbyEh1xzC8W-50KiODzFjTnQb-hvkKpw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:10:54 GMT
age: 66034
etag: "395f04af71767acc9516387c8b07bde08968fdfe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad2298793399bf73c51c7d60952065c1
816bd4c36ceea2c46489ae72fde0b4a94c7c4bef
dc540d64e5e0835c7007e89ca3b5dd620b43a87e13309f323f3843a5f908a199
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8649
x-amzn-requestid: f85f3c9d-95c1-4db6-af5f-595070fe46c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHzboAMFQCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-6eed72bf20887cac6dc1a56a;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z7HTSLYJmhfIGlCjeG2EeN3q2Cd9vKlq71nqo3iIuhwkgwlEAlRPmQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:51:02 GMT
age: 67226
etag: "816bd4c36ceea2c46489ae72fde0b4a94c7c4bef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dakv5.com/static/js/webcounter.js
200 OK 780 B URL HTTP/2 dakv5.com/static/js/webcounter.js
IP
File type Unicode text, UTF-8 text, with very long lines (332)
Hash 3d744ab25204ac8d3c9a94490c5a11e2
55bc52795bc346cd34f3815f0887a049eec26ff5
d32ef7f3e0aa05293a5dcf82b07f2f57023838635f31ca6d85921b7d2333f949
Analyzer Verdict Alert fortinet Phishing
GET /static/js/webcounter.js HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: application/javascript
content-length: 780
last-modified: Wed, 05 Oct 2022 09:53:53 GMT
etag: "633d5431-30c"
expires: Tue, 07 Feb 2023 04:31:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/js/config.js
200 OK 21 B URL HTTP/2 dakv5.com/static/js/config.js
IP
File type ASCII text, with no line terminators
Hash 00b3fe91e3d84e64cb6302d1587c1f29
0ef0adad397c848cf614e36a62e19d93bf912bc5
c2908995b5b9b5488326d58d5fbe65e47d1ce05694ac86b09071dea7c8e327ad
Analyzer Verdict Alert fortinet Phishing
GET /static/js/config.js HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: application/javascript
content-length: 21
last-modified: Wed, 05 Oct 2022 09:53:52 GMT
etag: "633d5430-15"
expires: Tue, 07 Feb 2023 04:31:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8f8f0eca3a6680b437a52845f485f17a
48ddd8bed8e889cceca09cdf0d03fed54a72618a
2990c0d6d3e3be8b24d74ebec9196c674f7882593c9d601df66c4a323d3035ad
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=151157
Date: Mon, 06 Feb 2023 16:31:29 GMT
Etag: "63e0d6d6-1d7"
Expires: Wed, 08 Feb 2023 10:30:46 GMT
Last-Modified: Mon, 06 Feb 2023 10:30:46 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6mWU2NCx6tLt1NkCnLYPL8lLSqExY8qXtxsgzEbBgF9ZDUquXWFLmQ==
dakv5.com/static/picture/znwx1.png
200 OK 14 kB URL HTTP/2 dakv5.com/static/picture/znwx1.png
IP
File type PNG image data, 112 x 118, 16-bit/color RGBA, non-interlaced\012- data
Hash 5c4502f4ba26a053d32be13687847ec2
7252129e78673ce9a1b9d78e009a6a28745c6423
a6e7cdd106c060736f6f54587e98e40e4709a27e688b7c635efcc2bc69d9584c
GET /static/picture/znwx1.png HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/png
content-length: 13859
last-modified: Wed, 05 Oct 2022 09:53:57 GMT
etag: "633d5435-3623"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/logo6.jpg
200 OK 14 kB URL HTTP/2 dakv5.com/static/picture/logo6.jpg
IP
File type PNG image data, 634 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash 4e5cbd0aba328119a26217a422f1a65a
6c17d5cbabb9ed421988929bb7dd6280752558e7
d5d85fa218aa834a9fe13a939731c56205da22b5e6a6c296486eb26b2eceed91
GET /static/picture/logo6.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 13927
last-modified: Wed, 05 Oct 2022 09:53:56 GMT
etag: "633d5434-3667"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/12088299_1047136358664501_9121132063381418917_n.jpg
200 OK 0 B URL HTTP/2 dakv5.com/static/picture/12088299_1047136358664501_9121132063381418917_n.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/picture/12088299_1047136358664501_9121132063381418917_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 0
last-modified: Wed, 05 Oct 2022 09:53:54 GMT
etag: "633d5432-0"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 8be5a0ec29ba80b116855ff0f12bf75f
3b9fc553057b7a09ad96292639942a1e9d883901
03dab46a30bceec8f3417455c81cf7809b1881c19062e7d1ef135c5074661895
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 16:31:29 GMT
Ali-Swift-Global-Savetime: 1675701089
Via: cache11.l2de2[187,187,200-0,M], cache11.l2de2[188,0], cache3.se1[209,209,200-0,M], cache3.se1[211,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 06 Feb 2023 16:31:29 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9716757010894521508e
asset.popin.cc/js/pixel.js
200 OK 24 kB URL HTTP/2 asset.popin.cc/js/pixel.js
IP
Hash 02990ccb9d61ee6fb77ff63d1d44ba39
e8280a4fe3c49c45a48f315e67ce68be3e4b7f50
9030170c5977b994b8c3ad2da21b95a7325a6809c2f020a2409637f6f6976eb8
GET /js/pixel.js HTTP/1.1
Host: asset.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 07 Dec 2022 07:16:34 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 06 Feb 2023 08:26:16 GMT
etag: W/"fcadfe78fe6c9936c45f9f39f02375f9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _66hSPCpEly7DUv6cRMV2bqf2b_2DnHG6zdWiOyALOQDaIVTMbWEkQ==
age: 53374
X-Firefox-Spdy: h2
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 8be5a0ec29ba80b116855ff0f12bf75f
3b9fc553057b7a09ad96292639942a1e9d883901
03dab46a30bceec8f3417455c81cf7809b1881c19062e7d1ef135c5074661895
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 16:31:29 GMT
Ali-Swift-Global-Savetime: 1675701089
Via: cache16.l2de2[291,291,200-0,M], cache16.l2de2[292,0], cache5.se1[313,312,200-0,M], cache5.se1[314,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 06 Feb 2023 16:31:29 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9916757010894563848e
dakv5.com/static/picture/18423978_10210643158807484_4625467277978165616_n.jpg
200 OK 2.5 kB URL HTTP/2 dakv5.com/static/picture/18423978_10210643158807484_4625467277978165616_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 682ae4afa2d80808f02890983f1c005b
636978b3538e97152dd7519933f77c8ee1c2b113
bbdf4885650a64f5a140852730b40db0db8668771519a862b8975abfdc4f1273
GET /static/picture/18423978_10210643158807484_4625467277978165616_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2533
last-modified: Wed, 05 Oct 2022 09:53:55 GMT
etag: "633d5433-9e5"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/11880513_10153182441573635_6391766102196689121_n.jpg
200 OK 1.9 kB URL HTTP/2 dakv5.com/static/picture/11880513_10153182441573635_6391766102196689121_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 2ff8515a3d14580c3b2962bbde0f427b
f407ef585e63c15c6b468590a03149eadba831f0
888655087219ab07dabd157aa916697b888ec17d4883df1a6958b6f38aad3d7a
GET /static/picture/11880513_10153182441573635_6391766102196689121_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 1931
last-modified: Wed, 05 Oct 2022 09:53:53 GMT
etag: "633d5431-78b"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/18119267_10155363709609924_958378663814436125_n.jpg
200 OK 2.1 kB URL HTTP/2 dakv5.com/static/picture/18119267_10155363709609924_958378663814436125_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 6d3b36d7ffad0c2007dd49c0c1081edf
1f1c6753063b61c8aa4af8a76154bf705e4ba13b
a50470722aff8117491b3aad81d992451ddd4cc44fd96c63ee23f1cc9e3ac8a8
GET /static/picture/18119267_10155363709609924_958378663814436125_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2148
last-modified: Wed, 05 Oct 2022 09:53:55 GMT
etag: "633d5433-864"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/17265090_10158355004655716_6815458511175803011_n.jpg
200 OK 2.5 kB URL HTTP/2 dakv5.com/static/picture/17265090_10158355004655716_6815458511175803011_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 8828ea753d82c79e9114ac07c48afd34
9dc553bd051499961a870239ba2abf1fe0a728fe
ea0186f42a5419b28d7ba87fe0a65bf085b9af3a183c38f0c37a431e5734aad8
GET /static/picture/17265090_10158355004655716_6815458511175803011_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2471
last-modified: Wed, 05 Oct 2022 09:53:55 GMT
etag: "633d5433-9a7"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 8be5a0ec29ba80b116855ff0f12bf75f
3b9fc553057b7a09ad96292639942a1e9d883901
03dab46a30bceec8f3417455c81cf7809b1881c19062e7d1ef135c5074661895
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Mon, 06 Feb 2023 16:31:29 GMT
Last-Modified: Sun, 05 Feb 2023 23:37:02 GMT
ETag: "63e03d9e-1d7"
Expires: Tue, 07 Feb 2023 23:37:02 GMT
Cache-Control: max-age=111933
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1675701089
Via: cache3.l2de2[315,314,200-0,M], cache3.l2de2[316,0], cache5.se1[336,337,200-0,M], cache5.se1[338,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 06 Feb 2023 16:31:29 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9916757010894563849e
dakv5.com/static/picture/16406523_1345882538809440_8201065904356080273_n.jpg
200 OK 2.4 kB URL HTTP/2 dakv5.com/static/picture/16406523_1345882538809440_8201065904356080273_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 3838651784ac819a2fec4660a9aa6832
ea89e077bbf3e482e0dfeee6f6df100595e55519
ce00365440d545e827a19ccf80ebaa4df45ea25bf1bb431a4579704e69894340
GET /static/picture/16406523_1345882538809440_8201065904356080273_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2394
last-modified: Wed, 05 Oct 2022 09:53:54 GMT
etag: "633d5432-95a"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/16807461_10211764664812826_5680036435541740063_n.jpg
200 OK 2.4 kB URL HTTP/2 dakv5.com/static/picture/16807461_10211764664812826_5680036435541740063_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 8688db25418afce10cca0e227d8f92d7
c33590128667dfcfd3cf24cec47bedad1b6e3fa5
49481f6fb765a66c8093086dd1ebccc35940278c9f105bc22c3def9bc30a18d3
GET /static/picture/16807461_10211764664812826_5680036435541740063_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2404
last-modified: Wed, 05 Oct 2022 09:53:55 GMT
etag: "633d5433-964"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/13631522_1146706165402703_3256702316997043506_n.jpg
200 OK 2.4 kB URL HTTP/2 dakv5.com/static/picture/13631522_1146706165402703_3256702316997043506_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 571b566b0729b286b4fc20487607401a
a38a689a73b179088b5db9bb1ff9cbb1609b9890
324f6818b1a029b8bac6712633c042cbac1b1daeec569a58fa119cfd5711704a
GET /static/picture/13631522_1146706165402703_3256702316997043506_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2407
last-modified: Wed, 05 Oct 2022 09:53:54 GMT
etag: "633d5432-967"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/14222287_1065953200155875_6514575430883754204_n.jpg
200 OK 2.4 kB URL HTTP/2 dakv5.com/static/picture/14222287_1065953200155875_6514575430883754204_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash b726406fa9bfa46fed2d4789af465058
7f7b0fa91fa5f8fc6cc3d86bce4456c0e7200be9
9f95e4a42b97376751e4783e3bcd37b9ee10d3594030941a05ba5649f31b539f
GET /static/picture/14222287_1065953200155875_6514575430883754204_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2396
last-modified: Wed, 05 Oct 2022 09:53:54 GMT
etag: "633d5432-95c"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/540562_430147157013818_32273000_n.jpg
200 OK 2.4 kB URL HTTP/2 dakv5.com/static/picture/540562_430147157013818_32273000_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 2f1e601226dde45522172bda1d922779
eb708322aa1b028e66a4afe3dd82380f024e95c3
4554a7c912f636cf1d5d6d4476d2549d7939768a3ee2fe034a5fa709d24b1f30
GET /static/picture/540562_430147157013818_32273000_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2353
last-modified: Wed, 05 Oct 2022 09:53:55 GMT
etag: "633d5433-931"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/12651359_1104018629642643_1802809274505192979_n.jpg
200 OK 1.8 kB URL HTTP/2 dakv5.com/static/picture/12651359_1104018629642643_1802809274505192979_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 5c270c23cac40410cb1f51e6e1ad52de
b8b72016213ac31ee7796eaf6fe70fbf1a813f89
e341e2df7934520bbe37fa32d8d335c7d36953b8bfe7d0c4a2c0563e95ab3df0
GET /static/picture/12651359_1104018629642643_1802809274505192979_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 1752
last-modified: Wed, 05 Oct 2022 09:53:54 GMT
etag: "633d5432-6d8"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/c11.jpg
200 OK 2.4 kB URL HTTP/2 dakv5.com/static/picture/c11.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 54db92c2ec570a8904096f2f08d39fba
3a092ef1acdca26b8fc693af6b12a7b9215e802b
748e1eb301c0197c862da477bf84e75e46fc6406601c1d71b60f618a73489098
GET /static/picture/c11.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2386
last-modified: Wed, 05 Oct 2022 09:53:56 GMT
etag: "633d5434-952"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/18222397_10156169859605550_2186676355225458227_n.jpg
200 OK 2.7 kB URL HTTP/2 dakv5.com/static/picture/18222397_10156169859605550_2186676355225458227_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash dedcc02886d0332e601eaa7524c18fc5
0346c62b61dd6394dd5a2e118e7bd82cb1e0baf4
0b829d6fea3af0cde465e4c398e41aa754109f5c90a8c9c0a3ff0e5edc4591c5
GET /static/picture/18222397_10156169859605550_2186676355225458227_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2694
last-modified: Wed, 05 Oct 2022 09:53:55 GMT
etag: "633d5433-a86"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/26254_100854763287133_3441493_n.jpg
200 OK 1.9 kB URL HTTP/2 dakv5.com/static/picture/26254_100854763287133_3441493_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 36x36, components 3\012- data
Hash bce950819452ca647b023388f84293ff
20e9086eb57ceb97171d10659a833975e4ba246e
94ae2596e2c6cd57d01268d20c9d3c69847ad4f6449f8ebffc3e070ad0e794d2
GET /static/picture/26254_100854763287133_3441493_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 1947
last-modified: Wed, 05 Oct 2022 09:53:55 GMT
etag: "633d5433-79b"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/16174412_10211484033439027_3968979027246986980_n.jpg
200 OK 2.0 kB URL HTTP/2 dakv5.com/static/picture/16174412_10211484033439027_3968979027246986980_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 95004128005c2a8f905cfeb1f8584716
f69ba45eb252f40d86a96c057caca182c4e425cf
06bbb2f4209bf6702518f4341ff0bcf491d10142b897491eaf11b01858507d8b
GET /static/picture/16174412_10211484033439027_3968979027246986980_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2031
last-modified: Wed, 05 Oct 2022 09:53:54 GMT
etag: "633d5432-7ef"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/12669670_10207353042137627_8224718532595991020_n.jpg
200 OK 2.1 kB URL HTTP/2 dakv5.com/static/picture/12669670_10207353042137627_8224718532595991020_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 3ba0a0ab7b5227288140e6b47db6bdcc
9b3c8f38248418a89ebb93c8a0fd860b86961f31
3338f17be405b9400260ab8f0e2ff40db422682bb9977053fff264020a808c91
GET /static/picture/12669670_10207353042137627_8224718532595991020_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2051
last-modified: Wed, 05 Oct 2022 09:53:54 GMT
etag: "633d5432-803"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/c9.jpg
200 OK 2.6 kB URL HTTP/2 dakv5.com/static/picture/c9.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash e915028df89c3cf4a4f8b2d6f06e9824
983d6922dc1cb414de59610200cf3bb805f47c95
bd6aaf30434d3260ab721182b5117a6e59ccecb50b9ba9e4cd373a1e97fe1ca1
GET /static/picture/c9.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2591
last-modified: Wed, 05 Oct 2022 09:53:56 GMT
etag: "633d5434-a1f"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/13417709_10156999054495156_89965319140675792_n.jpg
200 OK 2.6 kB URL HTTP/2 dakv5.com/static/picture/13417709_10156999054495156_89965319140675792_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash ab00b69ec6578702b969a9dcde39096a
a560e6e59e7c518c2d13dc9a92ef72f7e0b96228
1edeb97b7d48b08a37097f6eb53adc219bae8160cb7f2797b5f5d18ae88b1a2b
GET /static/picture/13417709_10156999054495156_89965319140675792_n.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 2566
last-modified: Wed, 05 Oct 2022 09:53:54 GMT
etag: "633d5432-a06"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 8be5a0ec29ba80b116855ff0f12bf75f
3b9fc553057b7a09ad96292639942a1e9d883901
03dab46a30bceec8f3417455c81cf7809b1881c19062e7d1ef135c5074661895
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Mon, 06 Feb 2023 16:31:29 GMT
Last-Modified: Sun, 05 Feb 2023 23:37:02 GMT
ETag: "63e03d9e-1d7"
Expires: Tue, 07 Feb 2023 23:37:02 GMT
Cache-Control: max-age=111933
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1675701089
Via: cache17.l2de2[345,345,200-0,M], cache17.l2de2[346,0], cache3.se1[369,369,200-0,M], cache3.se1[371,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 06 Feb 2023 16:31:29 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9716757010894541510e
api.popin.cc/ads/21090.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/21090.js
IP
File type ASCII text, with very long lines (946)
Hash cbef0347a65eb920c94cf88257e5e7e0
c5b0ce34a65c922b5c2fc57ed9768eb6433295b0
194a221661536144c8b10f05b4dabf5c0b341ddaa458b9febb994a7db7dd6ecb
GET /ads/21090.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:29 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Wed, 10 Aug 2022 09:45:33 GMT
ETag: "cbef0347a65eb920c94cf88257e5e7e0"
x-amz-version-id: prKAtmwbhcvCDA1GMMchV38SjEu_Lx.e
Expires: Mon, 06 Feb 2023 17:31:29 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Accept-Ranges: bytes
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 0efcfc66cc967a8c5baee7c42ce4bfa5
adb4006f3330959dd572c56cc581c5ea014cfbc0
4b07ac82b6bf9ae97b1631a5728d3c7666ae951b9f7eab3c709c61556597014e
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 16:31:29 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Fri, 10 Feb 2023 15:37:44 GMT
ETag: "adb4006f3330959dd572c56cc581c5ea014cfbc0"
Last-Modified: Mon, 06 Feb 2023 15:37:45 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 739
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 795546c42e70b4f3-OSL
dakv5.com/static/picture/t2.jpeg
200 OK 130 kB URL HTTP/2 dakv5.com/static/picture/t2.jpeg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], progressive, precision 8, 794x448, components 3\012- data
Size 130 kB (129823 bytes)
Hash b65d18e082348a53e7b65d2db57c3553
63a536c6150fb3c9c12729bff635e3731508907e
e61d30c60a0829eee59d45390d415c82ae716aa6805e1190826f6c27fc4e9e1c
Analyzer Verdict Alert fortinet Phishing
GET /static/picture/t2.jpeg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 129823
last-modified: Wed, 05 Oct 2022 09:53:56 GMT
etag: "633d5434-1fb1f"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
api.popin.cc/ads/21848.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/21848.js
IP
File type ASCII text, with very long lines (946)
Hash b961a0f7d8cd2c7367272f3f3014f47d
3aa0b59666ef40d4baa36ee054f084b312b9052d
d81b59521565fd8e9dacb8781134623dd9bec3d381b9856c246070405f1cb58f
GET /ads/21848.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:29 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Thu, 27 Oct 2022 13:38:54 GMT
ETag: "b961a0f7d8cd2c7367272f3f3014f47d"
x-amz-version-id: 1wWRKOQCGjBcx1E2Zrvtt4uG.rl3ufoc
Expires: Mon, 06 Feb 2023 17:31:29 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.26
Accept-Ranges: bytes
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 8be5a0ec29ba80b116855ff0f12bf75f
3b9fc553057b7a09ad96292639942a1e9d883901
03dab46a30bceec8f3417455c81cf7809b1881c19062e7d1ef135c5074661895
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 16:31:29 GMT
Ali-Swift-Global-Savetime: 1675701090
Via: cache6.l2de2[537,537,200-0,M], cache6.l2de2[539,0], cache7.se1[560,559,200-0,M], cache7.se1[561,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Mon, 06 Feb 2023 16:31:30 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9b16757010894575368e
dakv5.com/static/picture/1111-3.png
200 OK 74 kB URL HTTP/2 dakv5.com/static/picture/1111-3.png
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 700x643, components 3\012- data
Hash af16d33b42cb21478169a93f52a143a4
8e80c50aac1c6e97e9a5a72f54aa6f69d46290c7
fba63c7fd4826dac1099443dc8da5dd1d8d22f2576c93cf22fde2e28b08a8151
GET /static/picture/1111-3.png HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/png
content-length: 74021
last-modified: Wed, 05 Oct 2022 09:53:53 GMT
etag: "633d5431-12125"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
api.popin.cc/ads/21177.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/21177.js
IP
File type ASCII text, with very long lines (946)
Hash af0c0f70d80054e12b6350a93168f3b3
a5599a6182e3c38691360df2151c53f5ca58058c
c38c8f52a303885822a7a23ae18cd6ba85b87d0dcb4cf50349656be247de0d69
GET /ads/21177.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:29 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Sat, 20 Aug 2022 07:49:17 GMT
ETag: "af0c0f70d80054e12b6350a93168f3b3"
x-amz-version-id: 7BbFXM01K_eNq3bODl_Pt8PXTojwGGMc
Expires: Mon, 06 Feb 2023 17:31:29 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.25
Accept-Ranges: bytes
dakv5.com/static/picture/ymh.png
200 OK 111 kB URL HTTP/2 dakv5.com/static/picture/ymh.png
IP
File type PNG image data, 300 x 268, 8-bit/color RGBA, non-interlaced\012- data
Size 111 kB (111008 bytes)
Hash bc67a2daac1cffd7e98859de24cda7d0
934bd637b54eac7cb39f17e6ae421356b9d3fefa
b0f818c671956e942c486d9173e8aa5a51187b6cdc2669cac493338c054e316c
GET /static/picture/ymh.png HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/png
content-length: 111008
last-modified: Tue, 13 Dec 2022 10:26:18 GMT
etag: "6398534a-1b1a0"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/picture/1111.jpg
200 OK 155 kB URL HTTP/2 dakv5.com/static/picture/1111.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x1280, components 3\012- data
Size 155 kB (155239 bytes)
Hash a7d943352b0d8a81819fdcc712dd0498
ea7c4d7d2d7e15a9bce46e501a733c3fad9ebeb2
a3cb1099a6ef6145730ffd619a051eda4cf1334f33b557313979908bd64936f1
GET /static/picture/1111.jpg HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: image/jpeg
content-length: 155239
last-modified: Wed, 05 Oct 2022 09:55:34 GMT
etag: "633d5496-25e67"
expires: Wed, 08 Mar 2023 16:31:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
dakv5.com/static/images/znwx_icon_1.png
200 OK 0 B URL HTTP/2 dakv5.com/static/images/znwx_icon_1.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/images/znwx_icon_1.png HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/static/css/znwx.css
Cookie: dv0qai26lg6v2y6kl7yyc36brextdyfozwwh0lhr=76e0th4krkj; dv0qai26lg6v2y6kl7yyc36brextdu5i008wwwoo=bz3d8ketw1q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:29 GMT
content-type: image/png
content-length: 0
last-modified: Wed, 05 Oct 2022 09:53:52 GMT
etag: "633d5430-0"
expires: Wed, 08 Mar 2023 16:31:29 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=102&random_t=1675701135544_31
200 OK 0 B URL HTTP/2 trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=102&random_t=1675701135544_31
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=102&random_t=1675701135544_31 HTTP/1.1
Host: trace.mediago.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
set-cookie: __mguid_=ba3218cc32059727223784ed21e4cb18; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None
date: Mon, 06 Feb 2023 16:31:30 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dakv5.com/static/js/jquery-2.1.4.min.js
200 OK 33 kB URL HTTP/2 dakv5.com/static/js/jquery-2.1.4.min.js
IP
File type ASCII text, with very long lines (32025)
Hash ffcba3c52ade0655c7da2d642afd5a5a
08aa55ef7912b185ae7185304ea034e7a9581e45
6415c55ab1b9a9e213bf506a85f851f56a9dda97e8fb11138a498f916f9ba55e
Analyzer Verdict Alert fortinet Phishing
GET /static/js/jquery-2.1.4.min.js HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: application/javascript
last-modified: Wed, 05 Oct 2022 09:53:53 GMT
vary: Accept-Encoding
etag: W/"633d5431-14979"
expires: Tue, 07 Feb 2023 04:31:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=103&random_t=1675701135583_43
200 OK 0 B URL HTTP/2 trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=103&random_t=1675701135583_43
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=103&random_t=1675701135583_43 HTTP/1.1
Host: trace.mediago.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
set-cookie: __mguid_=ba3218cc32059727223784ed21e4cb18; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None
date: Mon, 06 Feb 2023 16:31:30 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dakv5.com/static/css/tidyx-v3.css
200 OK 7.9 kB URL HTTP/2 dakv5.com/static/css/tidyx-v3.css
IP
Hash 218a1ece0a456c2a6c591297f07301d7
ed87f99c907b3568398dce3c9d062348da31c831
d9b19b0ac3e927e992e1b16bb04b3bb110e4cdd0905cb6edcef2d5957a576560
GET /static/css/tidyx-v3.css HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: text/css
last-modified: Wed, 05 Oct 2022 09:53:50 GMT
vary: Accept-Encoding
etag: W/"633d542e-85ff"
expires: Tue, 07 Feb 2023 04:31:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=104&random_t=1675701135583_60
200 OK 0 B URL HTTP/2 trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=104&random_t=1675701135583_60
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=104&random_t=1675701135583_60 HTTP/1.1
Host: trace.mediago.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
set-cookie: __mguid_=ba3218cc32059727223784ed21e4cb18; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None
date: Mon, 06 Feb 2023 16:31:30 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dakv5.com/static/images/like.png
200 OK 0 B URL HTTP/2 dakv5.com/static/images/like.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/images/like.png HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/static/css/tidyx-v3.css
Cookie: dv0qai26lg6v2y6kl7yyc36brextdyfozwwh0lhr=76e0th4krkj; dv0qai26lg6v2y6kl7yyc36brextdu5i008wwwoo=bz3d8ketw1q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:29 GMT
content-type: image/png
content-length: 0
last-modified: Wed, 05 Oct 2022 09:53:52 GMT
etag: "633d5430-0"
expires: Wed, 08 Mar 2023 16:31:29 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=106&random_t=1675701135585_27
200 OK 0 B URL HTTP/2 trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=106&random_t=1675701135585_27
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=106&random_t=1675701135585_27 HTTP/1.1
Host: trace.mediago.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
set-cookie: __mguid_=ba3218cc32059727223784ed21e4cb18; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None
date: Mon, 06 Feb 2023 16:31:30 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=105&iframeAcid=undefined&trueAcid=null&configResource=undefined&random_t=1675701135584_87
200 OK 0 B URL HTTP/2 trace.mediago.io/api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=105&iframeAcid=undefined&trueAcid=null&configResource=undefined&random_t=1675701135584_87
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/log/track?tn=f9f2b1ef23fe2759c2cad0953029a94b&winloss=1&fe=2&pixel_funnel=105&iframeAcid=undefined&trueAcid=null&configResource=undefined&random_t=1675701135584_87 HTTP/1.1
Host: trace.mediago.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
set-cookie: __mguid_=ba3218cc32059727223784ed21e4cb18; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None
date: Mon, 06 Feb 2023 16:31:30 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.popin.cc/ads/21648.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/21648.js
IP
File type ASCII text, with very long lines (946)
Hash 34310cf8acd696dd5a57e3f2ed8e3402
b09abd4668d2417f9b248311f5d4abc83f966ad9
c68017992dce3290677944d95fc63d78c549cbb67fd26bcd297abc85544f0bc6
GET /ads/21648.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:29 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 05:57:54 GMT
ETag: "34310cf8acd696dd5a57e3f2ed8e3402"
x-amz-version-id: Os6M61nh.r.gG884N5oScL9oPdEL0_uW
Expires: Mon, 06 Feb 2023 17:31:29 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Accept-Ranges: bytes
api.popin.cc/ads/21318.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/21318.js
IP
File type ASCII text, with very long lines (946)
Hash 88f765756f5d8300912e6a7a5fd41993
2d7acce98d6b1a1c5b60971cf2e0cd4a6944caa2
6f2f0b1735ea3879d057917c5b1d4474f2dd28cde2d742456c7a1c4e23577a59
GET /ads/21318.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:30 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 03:27:49 GMT
ETag: "88f765756f5d8300912e6a7a5fd41993"
x-amz-version-id: HFUkBkoI2oD1P3KxBg4A1AFo6dc_mJKS
Expires: Mon, 06 Feb 2023 17:31:30 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.25
Accept-Ranges: bytes
api.popin.cc/ads/20944.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/20944.js
IP
File type ASCII text, with very long lines (946)
Hash 6f1290741c6fb9a5985d922673a9df27
756431b758fef2bf0ba23cde9d8afbd98d456397
98b375d1bbf3e169f0595a3b1a3eaf6d96d410fccb4dd8213b6542bfbe12bfef
GET /ads/20944.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:30 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Wed, 27 Jul 2022 07:44:04 GMT
ETag: "6f1290741c6fb9a5985d922673a9df27"
x-amz-version-id: ovn2qtN61l18wYpe7eboeu7GLeuYb_mA
Expires: Mon, 06 Feb 2023 17:31:30 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Accept-Ranges: bytes
api.popin.cc/ads/21917.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/21917.js
IP
File type ASCII text, with very long lines (946)
Hash 2fa7071c952e3d142757fe46dcd7b028
9ba572a9530b7574fbf8a6ccefe9d3a96bee91a4
423cd042a8162acdb820de268cff1693cca041afa919135d8e8f85aa718a7f80
GET /ads/21917.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:30 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Tue, 01 Nov 2022 12:37:05 GMT
ETag: "2fa7071c952e3d142757fe46dcd7b028"
x-amz-version-id: c8vxoUgXqDwch5zIXLGLoctlr74YfDrn
Expires: Mon, 06 Feb 2023 17:31:30 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.26
Accept-Ranges: bytes
api.popin.cc/ads/22190.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/22190.js
IP
File type ASCII text, with very long lines (946)
Hash 83ff54382c7a060ff134048307c92819
dee5728d4e5b6243a5af3b7c4988e389cad36c14
8748be6fb37321c5bcdc6ffcb96bde950ecd3b4601b8ace690f5a2596503401a
GET /ads/22190.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:30 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Wed, 23 Nov 2022 09:37:18 GMT
ETag: "83ff54382c7a060ff134048307c92819"
x-amz-version-id: nUqi2J6d7bZPoPxLc6vAxlHmkps4uFOc
Expires: Mon, 06 Feb 2023 17:31:30 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.25
Accept-Ranges: bytes
api.popin.cc/ads/22560.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/22560.js
IP
File type ASCII text, with very long lines (946)
Hash 573897880e2e34cd24783e58957c4b62
8136b10fb9a716d9645019399a75e3235a882afb
8b2d3077e249afd98d984ef357f028525ab2e47e8227db895a92c014357ab685
GET /ads/22560.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:30 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Mon, 26 Dec 2022 05:20:18 GMT
ETag: "573897880e2e34cd24783e58957c4b62"
x-amz-version-id: cz.WLdj3xlFwCSwad3GK4Jv2b2PGYF4V
Expires: Mon, 06 Feb 2023 17:31:30 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Accept-Ranges: bytes
api.popin.cc/ads/22571.js
200 OK 1.0 kB URL HTTP/1.1 api.popin.cc/ads/22571.js
IP
File type ASCII text, with very long lines (946)
Hash 5e64c0bf85b770ade23bb311250af5d9
65109b28c7d273e9562387cea2f1e63c37e44450
b29b188bacda632f05cd12503564b64f284053e9b08161e3367ba5683b315acf
GET /ads/22571.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:30 GMT
Content-Type: text/javascript
Content-Length: 1020
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2022 07:46:38 GMT
ETag: "5e64c0bf85b770ade23bb311250af5d9"
x-amz-version-id: wDwDcVb0127shPJRcDnrLa4s0baRvkd.
Expires: Mon, 06 Feb 2023 17:31:30 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.25
Accept-Ranges: bytes
ocsp.pki.goog/s/gts1d4/M6TVPIuGmA4
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/M6TVPIuGmA4
IP
Hash 8fefb2a1f30fe3429d24fe30d669121d
8f6ac4ec0e1bcad5978a59e87e257590db682888
94b326687a3400fe543d8aa98d7859d73c5e568a3da5988a32a4887975294021
POST /s/gts1d4/M6TVPIuGmA4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:31:30 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trace.popin.cc/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=&ptd=&tkd=&acd=&v=20220803_1
200 OK 0 B URL HTTP/2 trace.popin.cc/api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=&ptd=&tkd=&acd=&v=20220803_1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/bidder/track/pixel/pageview?tn=f9f2b1ef23fe2759c2cad0953029a94b&spd=&mgd=&ptd=&tkd=&acd=&v=20220803_1 HTTP/1.1
Host: trace.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
date: Mon, 06 Feb 2023 16:31:30 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.popin.cc/popin_discovery5-min.js
200 OK 43 kB URL HTTP/1.1 api.popin.cc/popin_discovery5-min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65212), with no line terminators
Hash 10985f901f1dfa538eb79c58a7696d28
e701c1293f0732ddebf0cfcf58a787fad98bc6da
49976a4ed1005aac3f0c6021d70cc0e11a78a5503759978192ec244920c79157
GET /popin_discovery5-min.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 04 Jan 2023 06:45:28 GMT
ETag: W/"dea14647ed42ad93bfc3d619993107a4"
x-amz-version-id: rMjFgUNkSodLPiS9pNV2rTlSUT0KRhgZ
Expires: Mon, 06 Feb 2023 17:31:30 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Content-Encoding: gzip
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 06 Feb 2023 15:44:08 GMT
expires: Mon, 06 Feb 2023 17:44:08 GMT
cache-control: public, max-age=7200
age: 2843
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dakv5.com/favicon.ico
404 Not Found 146 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /favicon.ico HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 06 Feb 2023 16:31:31 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
api.popin.cc/iframe/piuid.html?ac=piuid&t=15009898
200 OK 1.9 kB URL HTTP/1.1 api.popin.cc/iframe/piuid.html?ac=piuid&t=15009898
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1601)
Hash 40a32cdbd8f4d6fdcacd1d1743a847bc
4372622b955d04d0c50b836f73f0fc08e80b1323
30481476bbe8627eb7363609e58b15caaf88ef4d416b1df485dec44c55bb6f9c
GET /iframe/piuid.html?ac=piuid&t=15009898 HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 21 Nov 2019 09:08:45 GMT
ETag: W/"43676b9118e1fa3ce36d31e318eb36e9"
x-amz-version-id: null
Expires: Mon, 06 Feb 2023 17:31:31 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Content-Encoding: gzip
api.popin.cc/test/popin_send_cookie_set_fail.js?20201223
200 OK 4.1 kB URL HTTP/1.1 api.popin.cc/test/popin_send_cookie_set_fail.js?20201223
IP
File type Unicode text, UTF-8 text, with very long lines (1877)
Hash fc15eab2a6dfd4958c93a6ab0d7f06ed
e098ee5395424b62ca0200de08594cb1da222ff1
8efeb44ee0ab4ced4f4926a7e388d1ccf0b641d9bdeb251dc21cb51286a953e6
GET /test/popin_send_cookie_set_fail.js?20201223 HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Mon, 11 Oct 2021 03:29:29 GMT
ETag: W/"27aab2e5fb58e044704790074416e410"
x-amz-version-id: NVPBtcLlaQ0R5YVGUD48RBS0d2V00MrK
Expires: Mon, 06 Feb 2023 17:31:31 GMT
Cache-Control: max-age=3600
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.26
Content-Encoding: gzip
api.popin.cc/td_js_sdk_171.js
200 OK 13 kB URL HTTP/1.1 api.popin.cc/td_js_sdk_171.js
IP
File type ASCII text, with very long lines (15820)
Hash f8c04fbcd2a9a8decb5575efb7579613
25b9b4daa00ce4f2393123574211b07dfdf666d2
ca3918c559732ff63c526b8a42b4033c38a6001894d315775fe70db6d0851038
GET /td_js_sdk_171.js HTTP/1.1
Host: api.popin.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 16:31:31 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 11 Jan 2018 09:42:51 GMT
ETag: W/"17b2e8b253e693d224f7d8407e28e1ea"
Cache-Control: max-age=3600
x-amz-version-id: null
Expires: Mon, 06 Feb 2023 17:31:31 GMT
Cross-Origin-Resource-Policy: cross-origin
Timing-Allow-Origin: *
X-Cache-Status: HIT from 10.252.55.44
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9817e69228d45a70282106bda74bf8bb
cdb758451e21862eee058e94e5bea544c04f7288
360bbce271688aac4f69f1d1e15103306fc2791e62bbc3475c34f2026c001304
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "360BBCE271688AAC4F69F1D1E15103306FC2791E62BBC3475C34F2026C001304"
Last-Modified: Sat, 04 Feb 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 06 Feb 2023 22:31:33 GMT
Date: Mon, 06 Feb 2023 16:31:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b3e78aa-f2de-4a48-82bf-952d0a22f875.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b3e78aa-f2de-4a48-82bf-952d0a22f875.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f0f48a44e1aece8d271028a7b0684cac
9f7247a3bb9248cd281c568ebba6e52b38b00149
0a34b5dc66f170403e79b2315a7cacef1703ce3777a20914525f86d46c0cd637
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b3e78aa-f2de-4a48-82bf-952d0a22f875.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11481
x-amzn-requestid: b50de2d1-c23b-4908-8fc3-e84eea0382a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRFL-oAMFnSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-0254cda141886e0f39e8f8b3;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KIJ6iTpVC0gVV6Q0dd_-ZTWkwm3q0vP52N3088Rd7O9pb8D39XfnBg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:55:31 GMT
age: 66964
etag: "9f7247a3bb9248cd281c568ebba6e52b38b00149"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e526f866080aa21f04db55678cb55578
6a71b7bc74fc735736f7f16d99b7a9bdac115ddb
0745749cdcb2825a41e3a1310e1d7cc66044f6ce6ebde344505fabcafb2f6004
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 16:31:35 GMT
Last-Modified: Mon, 06 Feb 2023 14:56:14 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: J3_2VKZFGW41_FkQwtufASQWaNHF1A9P4w0odimY3SoISKzs8_a62g==
Age: 5721
dakv5.com/static/css/style-ccbae81b21.css
200 OK 0 B URL HTTP/2 dakv5.com/static/css/style-ccbae81b21.css
IP
GET /static/css/style-ccbae81b21.css HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: text/css
last-modified: Wed, 05 Oct 2022 09:53:50 GMT
vary: Accept-Encoding
etag: W/"633d542e-1606"
expires: Tue, 07 Feb 2023 04:31:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
dakv5.com/static/js/c96752cf560943c6a183ac0ce5a312ff.js
200 OK 0 B URL HTTP/2 dakv5.com/static/js/c96752cf560943c6a183ac0ce5a312ff.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /static/js/c96752cf560943c6a183ac0ce5a312ff.js HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: application/javascript
last-modified: Wed, 05 Oct 2022 09:53:52 GMT
vary: Accept-Encoding
etag: W/"633d5430-1a89d"
expires: Tue, 07 Feb 2023 04:31:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
dakv5.com/static/js/layer.js
200 OK 0 B URL HTTP/2 dakv5.com/static/js/layer.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /static/js/layer.js HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: application/javascript
last-modified: Wed, 05 Oct 2022 09:53:53 GMT
vary: Accept-Encoding
etag: W/"633d5431-cde"
expires: Tue, 07 Feb 2023 04:31:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
dakv5.com/
200 OK 0 B IP
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: text/html
last-modified: Mon, 06 Feb 2023 13:43:23 GMT
vary: Accept-Encoding
etag: W/"63e103fb-ab80"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
dakv5.com/static/css/znwx.css
200 OK 0 B URL HTTP/2 dakv5.com/static/css/znwx.css
IP
GET /static/css/znwx.css HTTP/1.1
Host: dakv5.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dakv5.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:31:28 GMT
content-type: text/css
last-modified: Wed, 05 Oct 2022 09:53:51 GMT
vary: Accept-Encoding
etag: W/"633d542f-768"
expires: Tue, 07 Feb 2023 04:31:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
198.13.59.121
35.208.249.213
47.246.44.205
104.18.20.226
23.36.76.226