Overview

URLv1claims.publicvm.com/
IP 20.189.78.99 (Hong Kong)
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-12 22:19:01 UTC
StatusLoading report..
IDS alerts0
Blocklist alert25
urlquery alerts No alerts detected
Tags None

Domain Summary (20)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-12 04:53:23 UTC 34.117.237.239
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 54.230.245.100
img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-09-12 12:46:20 UTC 34.120.237.76
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-12 04:51:47 UTC 23.33.119.27
cdnjs.cloudflare.com (1) 235 2020-10-20 10:17:36 UTC 2022-09-12 05:53:35 UTC 104.17.25.14
code.jquery.com (1) 634 2012-05-21 17:28:02 UTC 2022-09-12 04:51:47 UTC 69.16.175.10
ocsp.pki.goog (6) 175 2017-06-14 07:23:31 UTC 2022-09-12 04:51:36 UTC 142.250.74.3
ajax.googleapis.com (1) 12905 2019-10-15 17:52:08 UTC 2022-09-12 17:42:37 UTC 216.58.207.202
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-12 17:57:11 UTC 143.204.55.36
v1claims.publicvm.com (20) 0 2022-09-11 10:05:46 UTC 2022-09-12 22:07:05 UTC 20.189.78.99 Domain (publicvm.com) ranked at: 269704
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-12 16:45:27 UTC 93.184.220.29
play-lh.googleusercontent.com (1) 407 2019-10-05 17:11:35 UTC 2022-09-12 16:29:07 UTC 142.250.74.54
fonts.googleapis.com (1) 8877 2014-07-21 13:19:55 UTC 2022-09-12 17:48:33 UTC 142.250.74.10
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-12 05:38:13 UTC 143.204.55.35
cdn.jsdelivr.net (2) 439 2012-09-30 00:15:09 UTC 2022-09-12 04:52:40 UTC 151.101.85.229
ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-09-12 04:54:20 UTC 104.18.20.226
i.ibb.co (6) 13485 2018-11-25 10:13:48 UTC 2022-09-12 06:40:44 UTC 217.182.228.53
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-12 06:04:57 UTC 34.210.39.83
fonts.gstatic.com (1) 0 2014-08-29 13:43:22 UTC 2022-09-12 04:51:32 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
cdn.worldvectorlogo.com (1) 222491 2020-04-06 11:01:53 UTC 2022-09-12 01:11:56 UTC 143.204.55.82

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends
2022-09-12 2 v1claims.publicvm.com/ Mobile Legends

PhishTank
Scan Date Severity Indicator Comment
2022-09-12 2 v1claims.publicvm.com/ Other

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-12 2 v1claims.publicvm.com/ Phishing
2022-09-12 2 v1claims.publicvm.com/static/js/ryucodex.js Phishing
2022-09-12 2 v1claims.publicvm.com/static/wheelStop.mp3 Phishing
2022-09-12 2 v1claims.publicvm.com/static/wheelsong.mp3 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 20.189.78.99
Date UQ / IDS / BL URL IP
2023-03-18 12:32:04 +0000 0 - 0 - 1 www.bankbri.layananupdate.my.id/ 20.189.78.99
2023-02-25 18:36:24 +0000 0 - 0 - 1 layanannasabaindonesia.com/ 20.189.78.99
2023-02-17 07:24:11 +0000 0 - 0 - 1 ubah-tarif-transaksi-brimo.com/ 20.189.78.99
2023-02-04 01:48:56 +0000 0 - 0 - 1 duri.squaremoo.com/ 20.189.78.99
2023-01-28 19:39:26 +0000 3 - 6 - 1 cekih9.duckdns.org/ 20.189.78.99


Last 5 reports on ASN: MICROSOFT-CORP-MSN-AS-BLOCK
Date UQ / IDS / BL URL IP
2023-03-29 19:04:27 +0000 0 - 6 - 0 shrekis.life/SQ2K83 52.173.151.229
2023-03-29 18:57:42 +0000 0 - 2 - 0 packagesupportforusps.ddns.mobi/155e862b96399 (...) 20.245.77.166
2023-03-29 18:50:55 +0000 0 - 0 - 2 www.vip556622.com/ 20.239.193.208
2023-03-29 18:44:30 +0000 0 - 2 - 0 d.nymexwq.top/ 20.24.96.224
2023-03-29 18:26:14 +0000 0 - 2 - 0 www.shopeevipx.top/ 20.89.96.98


Last 5 reports on domain: publicvm.com
Date UQ / IDS / BL URL IP
2023-03-28 15:45:50 +0000 26 - 23 - 10 keystonehomieonlineup.publicvm.com/ 64.112.60.65
2023-03-28 00:44:03 +0000 3 - 4 - 0 c1ha8e.publicvm.com/takeover/over/.psfght/sle (...) 38.79.142.66
2023-03-27 15:18:23 +0000 0 - 3 - 0 myservices-gov.publicvm.com/ret/secure 38.79.142.66
2023-03-27 14:43:05 +0000 3 - 4 - 0 jkgu.publicvm.com/offlce365/login.php 38.79.142.66
2023-03-27 14:12:19 +0000 3 - 4 - 0 bakerr.publicvm.com/iks2/live/login.php 38.79.142.66


Last 2 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-22 20:16:39 +0000 0 - 0 - 24 freegiftmobilelegends.work.gd/ 20.189.78.99
2022-09-22 20:55:40 +0000 0 - 0 - 19 www.freegiftmobilelegends.work.gd/ 20.189.78.99

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (59)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 12 Sep 2022 21:24:11 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -IUPuhZj297EcAqYaLclzhvjtWLvANjg7_ZgiwDmm5hvebcfSBb8Ag==
Age: 3279


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8971
Expires: Tue, 13 Sep 2022 00:48:21 GMT
Date: Mon, 12 Sep 2022 22:18:50 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 12 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _uIMXF02c2bshrguGsLOEe1ZHa_LI3XAAD1FZRhm4b-wcWbFuSUu_A==
age: 54098
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 12 Sep 2022 22:18:50 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-length: 5319
content-encoding: gzip
vary: Accept-Encoding
date: Mon, 12 Sep 2022 22:18:50 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source text\012- exported SGML document, Unicode text, UTF-8 text
Size:   5319
Md5:    f559ffcc4b90df27325c18d84005b6ba
Sha1:   1cbfec6ed4ea0b160f74caa091c39f549eb346e8
Sha256: 6856a57fe5fc465795f20971f8b3e0773899b828264874bfedb6e3a6ddf660a6

Alerts:
  Blocklists:
    - openphish: Mobile Legends
    - phishtank: Other
    - fortinet: Phishing
                                        
                                            GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Mon, 12 Sep 2022 22:18:50 GMT
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 5176773
expires: Sat, 02 Sep 2023 22:18:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=enc3tNF6zGV%2BmD2hqahu59c5gW3fDNJrIUX2JVgGaAF7wAcnurgktOYj9LobvA7FAnQSmdZhcuAHyDJqtIVT20z%2FngwaCY5VuSNT4lub9QR1YVG7FZKC6cHOJJWEHwKe%2Bx33Cmya"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 749c057368e51c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   5845
Md5:    a7e25a22602a2b2ed35f90fd5210cff1
Sha1:   148c4f275b60e6cf6253d6b4c7bdc486515b2202
Sha256: 312d94bafa68e11e3a4a8d7c06bc25ee161d1d965afb1fa99db79815a272d0bf
                                        
                                            GET /npm/bootstrap@5.0.0-beta1/dist/css/bootstrap.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://v1claims.publicvm.com
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         151.101.85.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.0.0-beta1
x-jsd-version-type: version
etag: W/"25617-q3SIoVyTmtfFSq15BDC3uaLXfq4"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 12 Sep 2022 22:18:50 GMT
age: 13297535
x-served-by: cache-fra19161-FRA, cache-bma1633-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 22599
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65300)
Size:   22599
Md5:    60c820c6a891acd6a832740afd07eb94
Sha1:   baaeae962163b7187a6ed4aab0ea487faad6faed
Sha256: b02a69a66b397ce444f118b9e397a401f9ee45405899ad4da94c3ab273badc93
                                        
                                            GET /npm/bootstrap@5.0.0-beta1/dist/js/bootstrap.bundle.min.js HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://v1claims.publicvm.com
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         151.101.85.229
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 5.0.0-beta1
x-jsd-version-type: version
etag: W/"13bb5-zUKjci8NkL/tAMsum+NysHqoVi8"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 12 Sep 2022 22:18:50 GMT
age: 6292050
x-served-by: cache-fra19121-FRA, cache-bma1633-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
content-length: 22099
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65293)
Size:   22099
Md5:    49634814600f72c72f04517e4aa3f441
Sha1:   509a6eb14b6b68fe06223dbcdfdf022b09ee06d7
Sha256: 22ee6073ce2c845f0b4c8b3aee3cca27afc00ed78c6f5452e172bd6831d19721
                                        
                                            GET /jquery-3.6.0.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         69.16.175.10
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Mon, 12 Sep 2022 22:18:50 GMT
content-encoding: gzip
content-length: 30875
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663021130.dop224.sk1.t,1663021130.cds243.sk1.hn,1663021130.cds210.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30875
Md5:    899f0189aaf034bbba5340f724d91dfa
Sha1:   210ea9de03968edb9d839ba4a0ce2d48666a8ab8
Sha256: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 12 Sep 2022 22:18:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "BBFA2E27F6D908DE4A4C31459A628DA7A3237820"
Expires: Tue, 13 Sep 2022 09:00:00 GMT
Last-Modified: Mon, 12 Sep 2022 21:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3185
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 749c0573dc45b509-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    220f366daa0ff46a7c182d49068f6127
Sha1:   f41a6066d77e1e2bd63d9c6416813e86d74d5045
Sha256: bd1f3bd66c3e6e1321590a2a5bd5fbeed731d336ba6dc435d990b3434b58c7b6
                                        
                                            GET /nkJ6RWS/1024px-VK-com-logo-svg.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.182.228.53
HTTP/2 404 Not Found
content-type: image/png
                                        
server: nginx
date: Mon, 12 Sep 2022 22:18:50 GMT
content-length: 1031
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 4-bit colormap, non-interlaced\012- data
Size:   1031
Md5:    7325e2012a6cf941a6ea14f0061ff764
Sha1:   0d2ba63e280b979a98bc431bec8a7af985578769
Sha256: 63e3696c5e5e8b037e28e8fbef871184b0d1d60a7314c965b1426d9cce84dd69
                                        
                                            GET /4VgGksT/images-1.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.182.228.53
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 12 Sep 2022 22:18:50 GMT
content-length: 3692
last-modified: Sun, 05 Dec 2021 13:24:31 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 554 x 554, 8-bit colormap, non-interlaced\012- data
Size:   3692
Md5:    6f31145847f979dfb3860ce6785325b9
Sha1:   8f4fd501a6d5c7a2a948a64f0c2babb12c19cc64
Sha256: 217d630a5cd122308490123b058a76fbff0a10671a0a852273115db299dc27c3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 12 Sep 2022 22:18:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /cCpMZ6B/images-1.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.182.228.53
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 12 Sep 2022 22:18:50 GMT
content-length: 8459
last-modified: Mon, 06 Dec 2021 14:41:54 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 904 x 339, 8-bit colormap, non-interlaced\012- data
Size:   8459
Md5:    f29c416a7c6f18ba0c0deb4980763c9d
Sha1:   56c7bfbf2c9a7a2be2e2214b0586c11af8e852bf
Sha256: 7f37cb926c06378327ad2a753c7119291b2ead796a6f588a8374de651ec72a8c
                                        
                                            GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.202
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 10:39:21 GMT
expires: Fri, 08 Sep 2023 10:39:21 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 387569
last-modified: Fri, 08 May 2020 07:05:03 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   31021
Md5:    903bc7a7e510f87aa5d0201eb59a0832
Sha1:   ac9aa4dd94cde1bcba9037e94087138b127e41fc
Sha256: 41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
                                        
                                            GET /DDC8HmW/images-29.jpg HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.182.228.53
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Mon, 12 Sep 2022 22:18:50 GMT
content-length: 37510
last-modified: Mon, 29 Aug 2022 17:04:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, progressive, precision 8, 640x359, components 3\012- data
Size:   37510
Md5:    2e010ccfdef7462a201bda002afd1f7b
Sha1:   8f7156f33ca02d53a7188b2e5195015f6987dcb8
Sha256: 716ad23eb4d1a9f78e96153925a1d066e96f08d5d2eaf3482d066176225052b7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         54.230.245.100
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 12 Sep 2022 22:18:50 GMT
Last-Modified: Mon, 12 Sep 2022 20:33:59 GMT
Server: ECS (bsa/EB1B)
X-Cache: Miss from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PZC_-msojKLSzxYvGiAv70Q-ch-noWmBe2kZ5f6OVkASwhCFx1rFFQ==
Age: 6291

                                        
                                            GET /static/css/main.css HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:50 GMT
last-modified: Fri, 12 Aug 2022 20:01:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2488
date: Mon, 12 Sep 2022 22:18:50 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  assembler source, ASCII text
Size:   2488
Md5:    bc3de7be99300b9faa061149837f2bb3
Sha1:   25ae91cfda0a5b3985946a822b6cd5eb834560ed
Sha256: 64eeb1e9f8f9d0d588feaaaf74594b07a47ccca2e6397f8af7eddb808ff55621

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/css/facebook.css HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:50 GMT
last-modified: Fri, 17 Sep 2021 01:28:24 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 838
date: Mon, 12 Sep 2022 22:18:50 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   838
Md5:    5d5d3b069af931ebbb54cc02f4d72df0
Sha1:   5cba35d545842c97c8d293561552e5cf24ae396d
Sha256: 4c82aacde4f8b5e0cbc8d6d306c08c3d4344f8cd97ac120f9fd22c0126670248

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 12 Sep 2022 22:18:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4133
Cache-Control: 'max-age=158059'
Date: Mon, 12 Sep 2022 22:18:50 GMT
Last-Modified: Mon, 12 Sep 2022 21:09:57 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 12 Sep 2022 21:56:07 GMT
Expires: Mon, 12 Sep 2022 22:37:53 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2IfPuAFWNU9dZO1j9feXcrVQnOYzCyWLQrokTiF63T6XIdpn_v2CAA==
Age: 1363


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /B4THvK7/20220813-042954.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.182.228.53
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Mon, 12 Sep 2022 22:18:50 GMT
content-length: 840787
last-modified: Sat, 13 Aug 2022 09:34:08 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Size:   840787
Md5:    39d60e83087893e8487bff5f8da434eb
Sha1:   a510e8920e1e414fbd9e071f61815196bf6b0742
Sha256: 5ff1f1075124265320449e98a4f190f392e746bc1f60843871afe183f555bc2b
                                        
                                            GET /static/js/ryucodex.js HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Fri, 17 Sep 2021 01:20:24 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 987
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (4284), with no line terminators
Size:   987
Md5:    9d08a5d9a7319ccb3cf05a5d32f6c0f5
Sha1:   143139a849c21ae503604aa82e60291c17135cee
Sha256: 1df783bb60823a6e30fb5bce8d1185490b50c06e615b10894b9a3ed87e931dfd

Alerts:
  Blocklists:
    - openphish: Mobile Legends
    - fortinet: Phishing
                                        
                                            GET /static/css/twitter.css HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Thu, 04 Feb 2021 00:58:40 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 569
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   569
Md5:    4ccb03642f27fef41ca844e064582982
Sha1:   1554b7de40ebf6ef9c1b69e0ce9235aeea69b5d0
Sha256: 458841f2569f74928268090d50deb829a8d20c8affd02686d4d8fe3f219567cd

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: waRXzlvEWTYWjYiBjEg8zg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.210.39.83
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1POs1DcrIw1LVQiWFm7x5vyk25o=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 12 Sep 2022 22:18:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/img/reward/7.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Wed, 20 Jul 2022 13:34:54 GMT
accept-ranges: bytes
content-length: 3685
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 151x150, components 3\012- data
Size:   3685
Md5:    e7eacb03f2e3d96b1aacb439dbaf9b94
Sha1:   3675b99695f017a5d4fd25f9937778026bde10d3
Sha256: cf97a8dd9d4323790178413e79f488928edefa5caaa4bcf8311f63d082f96153

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/img/reward/3.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Wed, 20 Jul 2022 13:34:06 GMT
accept-ranges: bytes
content-length: 5299
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 215x127, components 3\012- data
Size:   5299
Md5:    d45afd02a738fab958f479f9b4cb00c7
Sha1:   d0bde999822ad1a0a73f381b2ce407b8001620be
Sha256: 94ce6081185effde5e774be3c39ffd12cafc6776eac07b685d450b61e1f897cd

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /s/teko/v15/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://v1claims.publicvm.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13324
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 20:23:38 GMT
expires: Thu, 07 Sep 2023 20:23:38 GMT
cache-control: public, max-age=31536000
age: 438913
last-modified: Wed, 27 Apr 2022 17:05:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 13324, version 1.0\012- data
Size:   13324
Md5:    b4082c888eefa2dca3fe2c9d46a87180
Sha1:   05aeb6c58175f659fe59eaca5a9d3735dd0530e3
Sha256: 352ad1513eeaeec51060f01d5bed32345862ec4d9c0802b81e0a47885951e4b6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 12 Sep 2022 22:18:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/img/reward/2.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Sat, 13 Aug 2022 09:48:20 GMT
accept-ranges: bytes
content-length: 18984
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=[*0*], datetime=2022:08:13 17:45:32, width=0], baseline, precision 8, 194x200, components 3\012- data
Size:   18984
Md5:    34303aa38ba878bc93d085251846a182
Sha1:   8756597a06858610f0cddfb28380cbc30eeef426
Sha256: eadb66acb2fd146565fbd34a6f5c3bd5af1aaf8fcf7e2dc0e914eeca87e8a528

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/img/reward/0.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Wed, 20 Jul 2022 13:35:06 GMT
accept-ranges: bytes
content-length: 6635
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 247x213, components 3\012- data
Size:   6635
Md5:    d220e4d22685851e4b6b52dda5b6b112
Sha1:   8e36233fc818d446a2cdbed1147deefb5a881689
Sha256: 69f0ef4fb350a14d424fb1079c95015885c6e375894a093cf658bb99ad26f1bd

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/img/reward/6.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Sat, 13 Aug 2022 09:49:18 GMT
accept-ranges: bytes
content-length: 11829
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=[*0*], datetime=2022:08:13 17:46:30, width=0], baseline, precision 8, 131x129, components 3\012- data
Size:   11829
Md5:    1f5e97e4523f27691294fb05ebbca303
Sha1:   a2a38794eb0ee4b91421f3c210a77635cd5b677b
Sha256: e1312cef6a9329d5eb108b23732fc754decf60ef1c4b385c82e311230c205dd5

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/img/reward/5.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Mon, 29 Aug 2022 17:07:09 GMT
accept-ranges: bytes
content-length: 65170
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=[*0*], datetime=2022:08:30 00:57:21, width=0], baseline, precision 8, 226x376, components 3\012- data
Size:   65170
Md5:    696ed59187ba381773d4489010c867c9
Sha1:   24912f17cee9784a03a2792384b3715b99dfb6ca
Sha256: de7bee49980a1bd6f55fbe498966fb6b71daeda09edaba69f2b1f5a5d67c2b96

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/img/reward/4.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Sat, 13 Aug 2022 09:49:15 GMT
accept-ranges: bytes
content-length: 51372
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=[*0*], datetime=2022:08:13 17:45:58, width=0], baseline, precision 8, 206x351, components 3\012- data
Size:   51372
Md5:    9672d57bcfe3cb3a3fd9eeb844c8e868
Sha1:   488660dea68ca76db11e486daaa3068a410b406b
Sha256: c3efe070136fb1dc25fdda02687d6ba92a464b38326cf82445a3cfca20dfcc75

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/wheelStop.mp3 HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 206 Partial Content
content-type: audio/mpeg
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
last-modified: Wed, 03 Feb 2021 20:57:04 GMT
content-range: bytes 0-20993/20994
content-length: 20994
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 48 kHz, JntStereo\012- data
Size:   20994
Md5:    da5c02d0af9c7f9db0fb0e213858ccfa
Sha1:   9f7c649258009c2c853b74349c060d9de12109b1
Sha256: 2998755f4b37c49010974e07f9aa0643b0a9c5be592d42988c733d0e3acc9ae3

Alerts:
  Blocklists:
    - openphish: Mobile Legends
    - fortinet: Phishing
                                        
                                            GET /static/img/wheel.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Fri, 12 Aug 2022 19:42:36 GMT
accept-ranges: bytes
content-length: 57039
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 397 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size:   57039
Md5:    e1b0c20d96afdd5161f835a02391604d
Sha1:   905f1d46b1c74d50ce4582e5169d845c2f99887c
Sha256: 4de118f419f4ddd6258244899754a9bc7671abc737d1e792dd96d851448fb29b

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/img/tiktok.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 404 Not Found
content-type: text/html
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-length: 1238
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   1238
Md5:    0bde7d4b3da67537eaf9188e6f8049cf
Sha1:   64300fc482d01d38b40ab20e15960b6509665e5a
Sha256: 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/img/jabes/1.jpg HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/jpeg
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Fri, 12 Aug 2022 20:07:24 GMT
accept-ranges: bytes
content-length: 88254
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x393, components 3\012- data
Size:   88254
Md5:    d1b153004e00e669e1cafdb4d35d0e48
Sha1:   3ad8b69be36a76602747e0fb3a3a377d9a0f4bcb
Sha256: d2239bf61ecf7ce8a9cb074fcf6367af8f48e43f8f27001911c7f001e07335f4

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/img/reward/1.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Sat, 13 Aug 2022 09:48:03 GMT
accept-ranges: bytes
content-length: 101576
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=0, orientation=[*0*], datetime=2022:08:13 17:44:25, width=0], baseline, precision 8, 418x448, components 3\012- data
Size:   101576
Md5:    e16a288d7ce1fe79469c24a40a0db0f3
Sha1:   31ccdfe403717fcb6522649a98ea9da4c39f2b40
Sha256: 48bca1ca1f12c87f4e14b8cd5928ed01c215cff944c85aa7eee9b06619759846

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 12 Sep 2022 22:18:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /jWN9pjF7atbqHYXAAfwvIjtzpGwTIVwX9etT0-9HiWjRjE1hInoEgJiWjwsiemu2rEb8 HTTP/1.1 
Host: play-lh.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.54
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 73303
x-xss-protection: 0
date: Mon, 12 Sep 2022 22:18:52 GMT
expires: Sun, 11 Sep 2022 10:48:06 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size:   73303
Md5:    2bafc2fba248405e93058e3c26dfa614
Sha1:   8361bf3eec4ea108953492ad3a332d48d6f7671f
Sha256: 828588fb737f1eb815949ff596fe72a7ba7a1fdb9ad6816d95aa97e88f150506
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10268
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 22:18:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10268
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 22:18:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10268
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 22:18:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10268
Expires: Tue, 13 Sep 2022 01:10:00 GMT
Date: Mon, 12 Sep 2022 22:18:52 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 12 Sep 2022 22:18:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6b50df-cdcd-4b44-9ed3-90a502ea29ad.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9815
x-amzn-requestid: 89243e57-94eb-4c6b-903f-aa01df030ecc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIxnEAjoAMF_Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54d6-199403e2695b214711f5117f;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: NKM6RRhJ5AuRF4NKSyBO6-KMkd1UGaw3DuZBkBao_8fzzpkMeDrn0w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:55:41 GMT
age: 1391
etag: "48eddcf9838e980e67cc8f9cbb05b475df2f0331"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9815
Md5:    239262b6ab17cb19414c35cd4f761092
Sha1:   48eddcf9838e980e67cc8f9cbb05b475df2f0331
Sha256: cd27cbce632d769288d9c33c5c8e887ba02df5677f10f7a6d03139b590ba24b4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae1f7987-7b92-4cec-85ab-243250e02a06.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6999
x-amzn-requestid: 61e3e817-fb62-47c7-b938-2dfc6a134622
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO1mlG3XIAMFo5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3629-37c2c8982c4ccf891875c59a;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:00:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: S2TR552YpZeEbhTSAn4vdXexYpvR4Lrr-LaJmfNd7LnO0L4QM8w-Dg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 03:38:55 GMT
age: 67197
etag: "1904722d70348235d5472c54f888d2b4b991e2aa"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6999
Md5:    b7ccc33ae0c85a906f2c17db281ec790
Sha1:   1904722d70348235d5472c54f888d2b4b991e2aa
Sha256: f48edc03624f582b05b596694b76bd784f85eb9f2ca5dd025bbea9cc2ff1f096
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a938fd0-09b1-4550-89f4-e81e9c6a8737.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4162
x-amzn-requestid: 9dc27e34-69e1-439d-8974-1297584ef4d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YSIhuHlWIAMFhOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d87a4-410e9ede524aa657609a057a;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 07:00:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: jGj2al3pBpze7UQnHild4DxKndrprY4pTG_EZScw2RukQlgFEvNMkw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 07:18:04 GMT
age: 54048
etag: "47aaf5a3af2c25820d01d613c82b7f1279a298fc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4162
Md5:    b674daf3dc6e85ed054ab34d69979b86
Sha1:   47aaf5a3af2c25820d01d613c82b7f1279a298fc
Sha256: 7b9993ef69d4b77c1533ada040c85563b9cf7b1f5d007177c005f6cd7fdba1d3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8485
x-amzn-requestid: a56c9282-2786-4ae7-9fc2-0468bcc820a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_FM1oAMFZ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-753cc4f121c9b77d22bb82b5;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2jR7F56GE_qqbRBWjNDiDBgWbCYv-Ac6kvC1LI0HciQkKGTeNDYlyw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:57:43 GMT
age: 1269
etag: "166741631fb93d109b18dde6d316b3fa3276aa8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8485
Md5:    e407da4d97d497925b1ab523fd416787
Sha1:   166741631fb93d109b18dde6d316b3fa3276aa8f
Sha256: 707460c02438da6114e35e0b6569d42c0f3fb747f8cb51002f4d52bedbcffa61
                                        
                                            GET /static/wheelsong.mp3 HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 206 Partial Content
content-type: audio/mpeg
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
last-modified: Wed, 03 Feb 2021 20:55:12 GMT
content-range: bytes 0-315325/315326
content-length: 315326
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 256 kbps, 44.1 kHz, JntStereo\012- data
Size:   55802
Md5:    c256b05f06a8b012eb4b2e9b842154b9
Sha1:   7a6828a51749188768154d1dacbb155e8e140030
Sha256: fd5f6f32fbfcd7c060484437aa04cb4cbc76e7b40e6eebd8f0a47c69fda39819

Alerts:
  Blocklists:
    - openphish: Mobile Legends
    - fortinet: Phishing
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8799
x-amzn-requestid: 1bcdf387-9ad2-449a-861e-3352b1744d23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUI-0G6vIAMFgbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e552b-42aa46af6315148106c4fdee;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:37:47 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: bTzXQvDkX23_t4vLJNWv7bg-DoRsdqiBhwNJH5B-RcXxj9RC-87LvA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:41:52 GMT
age: 2220
etag: "172b23f2ef39b6c3fdebb5441b10a95712206d0a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8799
Md5:    c14088c4ca0d576e087feed41b7f1565
Sha1:   172b23f2ef39b6c3fdebb5441b10a95712206d0a
Sha256: 2699efa811ceac5420f5bd26c35a6f48b51854e29cbce7cbb62efb613db7d6b9
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 404 Not Found
content-type: text/html
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-length: 1238
date: Mon, 12 Sep 2022 22:18:52 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   1238
Md5:    0bde7d4b3da67537eaf9188e6f8049cf
Sha1:   64300fc482d01d38b40ab20e15960b6509665e5a
Sha256: 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /static/img/reward/8.png HTTP/1.1 
Host: v1claims.publicvm.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://v1claims.publicvm.com/

search
                                         20.189.78.99
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 19 Sep 2022 22:18:51 GMT
last-modified: Sat, 13 Aug 2022 09:51:10 GMT
accept-ranges: bytes
content-length: 715230
date: Mon, 12 Sep 2022 22:18:51 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1920x1920, components 3\012- data
Size:   715230
Md5:    95b715d3ebac24a1fbee21101c04b116
Sha1:   35693d637d7d0d14f2ab8e20b60cbc03df519a32
Sha256: 76c3ee9ac050f0082f51aaea439600c7db4c329735a0df5098c7a995f2ca0688

Alerts:
  Blocklists:
    - openphish: Mobile Legends
                                        
                                            GET /logos/google-icon.svg HTTP/1.1 
Host: cdn.worldvectorlogo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.82
HTTP/2 403 Forbidden
content-type: application/xml
                                        
date: Mon, 12 Sep 2022 22:18:50 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NEWXKLFB2TXuiYTBVIuHdZ1Ey8udNEhYNq-KCEm-2rL_iIY4aZwUNg==
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css2?family=Teko&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Sep 2022 22:18:51 GMT
date: Mon, 12 Sep 2022 22:18:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /Wg7b5Dm/IMG-20220830-010244.jpg HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://v1claims.publicvm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         217.182.228.53
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Mon, 12 Sep 2022 22:18:51 GMT
content-length: 140713
last-modified: Mon, 29 Aug 2022 17:04:01 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---