firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 22:15:14 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qkyjTODFq9FGuCgLz5JcUsnXNMmNSScJEXxIMIO7Hn26dMnS1HGU7g==
Age: 2373
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7960
Expires: Mon, 26 Sep 2022 01:07:27 GMT
Date: Sun, 25 Sep 2022 22:54:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: N42sZ_XICMq2RNhZtywg14QiVCk_y5G8V7F_Voq4DPF5M_0py3CLVw==
age: 65973
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 22:54:48 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
daneves.net/waiting/Hinet.Html
200 OK 21 kB URL HTTP/1.1 daneves.net/waiting/Hinet.Html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (525)
Hash ba3348ede1d4a67f677e5b2714bf5250
080914baea7618f64d3960d087ed6f49798ecaf8
5b00f37170e39bc837d2f4ffaa887ba49110ba50290691c09f19a3cd5c3b1363
Analyzer Verdict Alert fortinet Phishing
GET /waiting/Hinet.Html HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:47 GMT
Content-Type: text/html
Content-Length: 20816
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:39:50 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/login.css
200 OK 2.9 kB URL HTTP/1.1 daneves.net/waiting/files/login.css
IP
File type ASCII text, with CRLF line terminators
Hash 3e839e81545ebfd1fce65c97ac0b8825
563bbaa16e724b36bdac0bdb618c0e840623ce04
c4c72a588422272d7639c28d865eea048f6ffa60b62aacdebc62332a9fd291d2
GET /waiting/files/login.css HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: text/css
Content-Length: 2932
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/jquery-fieldselection.js.download
200 OK 3.6 kB URL HTTP/1.1 daneves.net/waiting/files/jquery-fieldselection.js.download
IP
Hash d53301d77f78ae80b06956c72770ac78
3470b2f78cd758db1b0d267ff6414fdf5d7633db
c77cc65ae84b8566912d38b5669fdfe431d40a9894a7171131fb65c80e72cbe8
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/jquery-fieldselection.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: application/javascript
Content-Length: 3585
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/bootstrap.min.js.download
200 OK 36 kB URL HTTP/1.1 daneves.net/waiting/files/bootstrap.min.js.download
IP
File type ASCII text, with very long lines (32450)
Hash 34173d885ecfaf8b9e9795e558343255
873cb5f13f57df66a06933e1086760e9145ce834
3adbd90482dff200cae4b16103a391350ba3ef58877704b27d08d55f4b172f33
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/bootstrap.min.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: application/javascript
Content-Length: 35497
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sun, 25 Sep 2022 22:04:17 GMT
Expires: Sun, 25 Sep 2022 22:19:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ay1ZTLwTs_F243loSjdnBGKHxQDfrba6R6_8KLPeu_Qv2W_4cqsNnQ==
Age: 3031
daneves.net/waiting/files/vkeyboard.js.download
200 OK 6.3 kB URL HTTP/1.1 daneves.net/waiting/files/vkeyboard.js.download
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash de50ba363565ade4f3c5665b477ef09d
04b91cda51769cf8c92cd43063b05efcb3773c15
36c4bb08df2e7a6e3238fa19fcb8eb1f9ed9eaf02b46f467e6f59c02c2b22f43
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/vkeyboard.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: application/javascript
Content-Length: 6263
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/index.js.download
200 OK 7.0 kB URL HTTP/1.1 daneves.net/waiting/files/index.js.download
IP
File type ASCII text, with CRLF line terminators
Hash 768608727ed64c52485ad0135628b592
0cd1f80d0449cb47028e28caaf5159b556ce4568
78b268505e93b556a1f9956245b9bf3034ad3e247884254895f1ce8c77a3a84c
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/index.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: application/javascript
Content-Length: 6985
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash fd3b36dc2b620b48de491a8d9ba00fc0
be67ba7db5215dcb7c9225876e35a5e0a5005c9e
28205ee62c77b1caad6cc24c1ce98ddb92d26f67d41270f7d5278208a907c62f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5960
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:48 GMT
Last-Modified: Sun, 25 Sep 2022 21:15:28 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
daneves.net/waiting/files/replace_ad.js.download
200 OK 444 B URL HTTP/1.1 daneves.net/waiting/files/replace_ad.js.download
IP
File type HTML document text\012- exported SGML document, ASCII text
Hash d8dee2d39756443640c66cc561e7c759
7d27f054c6b242023f702728e0fc564fc4ca93f0
e00c72fe29f3860f66607a3c7a2e9b63ae5ae35c740690f626fea8b05b1e67e5
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/replace_ad.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: application/javascript
Content-Length: 444
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/bootstrap.min.css
200 OK 117 kB URL HTTP/1.1 daneves.net/waiting/files/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Size 117 kB (117150 bytes)
Hash 58a49b3689d699cb72ffda7252d99fcb
973e37a8502921d56bc02bb55321f45b072b6f71
d31bef450ee67b64f9b70bfdf41fe4e00c65438705cc1fbb48ea6026d3a5d697
GET /waiting/files/bootstrap.min.css HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: text/css
Content-Length: 117150
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:28 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/login.js.download
200 OK 20 kB URL HTTP/1.1 daneves.net/waiting/files/login.js.download
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash a95696fb54f172939b988917f3029826
ba54ec90394cd2d24387671b4842356a52dfe1c2
f60681bd957d4422218908ef75cce09874d2db5f364737f86fafe50de4f29f69
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/login.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: application/javascript
Content-Length: 19473
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/app.js.download
200 OK 21 kB URL HTTP/1.1 daneves.net/waiting/files/app.js.download
IP
Hash b1dc35af6dd2e198241e176c36a10aad
c77c7e5dca6df6ea44555862136a4b69ea21ce82
c21e69936ca050bae86c11c1415dbbe2d63571f8aececa129303125f059e9f37
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/app.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: application/javascript
Content-Length: 21089
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/jquery.min.js.download
200 OK 96 kB URL HTTP/1.1 daneves.net/waiting/files/jquery.min.js.download
IP
File type ASCII text, with very long lines (32341)
Hash 8fc25e27d42774aeae6edbc0a18b72aa
b66ed708717bf0b4a005a4d0113af8843ef3b8ff
b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/jquery.min.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: application/javascript
Content-Length: 96381
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/index.css
200 OK 2.3 kB URL HTTP/1.1 daneves.net/waiting/files/index.css
IP
Hash 8b7851b59c6033ce4747e038aae966fc
f7c7d902d1fd480afc4027cc2e4155d974f4eb7f
08c016f9519475930d00d9a63249ead7d8f574a7ff7543fd0357ed34f695f41a
GET /waiting/files/index.css HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: text/css
Content-Length: 2340
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/keyboardstyle.css
200 OK 2.7 kB URL HTTP/1.1 daneves.net/waiting/files/keyboardstyle.css
IP
Hash 88d9cec6c62ac65a69971c5df5ae82cf
c2a12468d30624289ec0493ca03100a90311700e
80358ff9be39687d4022346716126defa959bf259dc279e4fa79c5a9e5d6266b
GET /waiting/files/keyboardstyle.css HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: text/css
Content-Length: 2740
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0n8T8dBGrONwKOLtKn6unQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: W8jE8HX/Met0t9S69D0vT5D8Ibk=
daneves.net/waiting/files/jquery-ui-1.10.3.custom.min.js.download
200 OK 228 kB URL HTTP/1.1 daneves.net/waiting/files/jquery-ui-1.10.3.custom.min.js.download
IP
File type ASCII text, with very long lines (64560)
Size 228 kB (228138 bytes)
Hash af62d334c0f845dbe7ed3e8bd8830b4f
009dfbcf27663d0c72813c4b6e762e434b9639db
bd6845710f8b65925fdb00a1e448f0f7f8ac194cffd391946eb4ee561787eac4
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/jquery-ui-1.10.3.custom.min.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:48 GMT
Content-Type: application/javascript
Content-Length: 228138
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:30 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/keyboard.png
200 OK 345 B URL HTTP/1.1 daneves.net/waiting/files/keyboard.png
IP
File type PNG image data, 19 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 70926f65c731b99497597ecad91e2798
9e5d8e8c97fac06d436740a46c56e660ae1f9b00
c5cd3ae960d492688c750ca358bc69b3872e599f7ad8f505258a2f5ec4f6ae82
GET /waiting/files/keyboard.png HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: image/png
Content-Length: 345
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/himail_logo.gif
200 OK 3.2 kB URL HTTP/1.1 daneves.net/waiting/files/himail_logo.gif
IP
File type GIF image data, version 89a, 82 x 32\012- data
Hash d509bc131b17d5c377447d748d8a5e97
b99b2bd8e5f3f0fb9046ee5a49a9e933bce1acdd
10eecf80122ad437a3daa21d7f8deff99af7dd47964655b7e4ac0996362ee4cc
GET /waiting/files/himail_logo.gif HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: image/gif
Content-Length: 3236
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/w_line.gif
200 OK 52 B URL HTTP/1.1 daneves.net/waiting/files/w_line.gif
IP
File type GIF image data, version 89a, 1 x 18\012- data
Hash 33252dc20f4d8fcd47183f90b3313ab5
b3956d10e88d95896a56c6d698b3e5106fa868ff
c7615d473078bcc779a9829ef9439094a50683e13bb242affa91852adcb528d3
GET /waiting/files/w_line.gif HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: image/gif
Content-Length: 52
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/request.html
200 OK 678 B URL HTTP/1.1 daneves.net/waiting/files/request.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 73443c067f0432b7ea8a7087b3d42336
d371fbdc6f3a8d23978adaa2f3154f3b8f2cc573
91210db91223d7bac9447458233b0e90259ae5402235454085c4e029743d6fc1
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/request.html HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/html
Content-Length: 678
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:36 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/saved_resource.html
200 OK 4.0 kB URL HTTP/1.1 daneves.net/waiting/files/saved_resource.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (490)
Hash cfb96b452863e0c9a02322a668fa0c95
fec230069a1748e9de59e8b64983444b693a7bf2
69b8bfc1b4426c4118fd24535f594f301ccc367a096f88d332b89019b1c73daf
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/saved_resource.html HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/html
Content-Length: 4026
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:36 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/top.html
200 OK 2.1 kB URL HTTP/1.1 daneves.net/waiting/files/top.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ISO-8859 text
Hash 84c824e5cadfd9fa45172595e047613d
b9e55ca0c0f2d09bcb4d9409f16ff756d51edb04
be66f7999f0647d7493ada7a2cf5db4821a77224af7c1d4c926edb3301373383
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/top.html HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/html
Content-Length: 2061
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:36 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/maillogin_07-1.gif
200 OK 535 B URL HTTP/1.1 daneves.net/waiting/files/maillogin_07-1.gif
IP
File type GIF image data, version 89a, 45 x 29\012- data
Hash 4777cf387ba58444e71d9c03dd460dd4
05831c2d5958881845dccaf64b408033a7bcbb47
ac0ac943017702ca0934831adffa93cd3e0a21d253f607a0c4ddc570b679828e
GET /waiting/files/maillogin_07-1.gif HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: image/gif
Content-Length: 535
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/notify.html
200 OK 675 B URL HTTP/1.1 daneves.net/waiting/files/notify.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ISO-8859 text
Hash 37c670c81a61a7331eb9ab3c12314e94
e09604a83775f85abcbf0fae9bfacfdccde0a1cc
faa239b5e658632c1dbebb5ad0d078520f4d25d82ecf0c1d996f3e5ac759ee7e
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/notify.html HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/html
Content-Length: 675
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:36 GMT
Accept-Ranges: bytes
daneves.net/waiting/fonts/glyphicons-halflings-regular.woff2
200 OK 129 B URL HTTP/1.1 daneves.net/waiting/fonts/glyphicons-halflings-regular.woff2
IP
File type HTML document, ASCII text, with no line terminators
Hash 729f75c5f9e8bdebe5fc079ebedfbba3
2b35076f41e63e21145fe303f95411fcf43dfa82
9eb25c601834492645914f261094b48198a6befa4424de454e6c2f68f3cd9b36
Analyzer Verdict Alert fortinet Phishing
GET /waiting/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://daneves.net/waiting/files/bootstrap.min.css
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
daneves.net/waiting/files/bottom.html
200 OK 1.5 kB URL HTTP/1.1 daneves.net/waiting/files/bottom.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 9386c6c00293db1aede8aeb73da6d3b5
c32beec730dd5cd8757b5c14714c06f8098677de
6ea8d8fa741f4ba1c7754e530beba41ce66e5d2dbbb52fad1627c4c570ddd9a0
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/bottom.html HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/html
Content-Length: 1493
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/close.jpg
200 OK 923 B URL HTTP/1.1 daneves.net/waiting/files/close.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 32x32, components 3\012- data
Hash ce255e9ed54ac0f7b56cb8270a85ed65
a5ee7bcd38d8ffdaf19c829e9a1540d584334585
d09a4f2a61f63ab0012dceac0ae76a0718363bbd1439eaea4dd37d13f1df02ce
GET /waiting/files/close.jpg HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: image/jpeg
Content-Length: 923
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/pixel
200 OK 106 B URL HTTP/1.1 daneves.net/waiting/files/pixel
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash ef5bb70ce25df9e536edff87eaaef3e8
178d4abf80d0f283e03ddb00e0a4eea9e76ccbd9
c2b3bd344266b0e4a44b8add0800dcbf04237255843c23d507a924b6584f9889
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/pixel HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/request.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Length: 106
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/f(2).txt
200 OK 231 B URL HTTP/1.1 daneves.net/waiting/files/f(2).txt
IP
File type ASCII text, with no line terminators
Hash 211e5ce60d5a706b5534ec8c514647b7
0a8683c08f14befddee3a57e6a31535687042403
8455c6e4f588c6af917d7b3d28e6d85506a43282ffc10ae191dad4e258f43583
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/f(2).txt HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/plain
Content-Length: 231
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/f(3).txt
200 OK 244 B URL HTTP/1.1 daneves.net/waiting/files/f(3).txt
IP
File type ASCII text, with no line terminators
Hash 602113efdb75e88879449f476f037757
2a4e5fae04763760aea74c844b22875d6327ad9a
20be6b9726321d02c72c711f1615026a11741a9ea1b127043e875b798b76c5c0
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/f(3).txt HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/plain
Content-Length: 244
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/f(1).txt
200 OK 12 B URL HTTP/1.1 daneves.net/waiting/files/f(1).txt
IP
File type ASCII text, with no line terminators
Hash 124d3918819ab4c349a7f9fa979bef07
6ad167d76a8768130783cd19aa6d8143c0b1bf37
daa795332e5dbcf893adf2d5f3349f02b8c1cb957ff3b5f4c11b742e33c3376f
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/f(1).txt HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/plain
Content-Length: 12
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/tag.js.download
200 OK 2.8 kB URL HTTP/1.1 daneves.net/waiting/files/tag.js.download
IP
File type ASCII text, with very long lines (2829), with no line terminators
Hash e65baddc1fa906cbd6ec1a995b8f71c4
b20520e9584c4aec275da05a94942e206bbb73ba
f6cb7006008d8904332e09dfc9b63475368d52964c971ff33e01d779d62f36d4
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/tag.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: application/javascript
Content-Length: 2829
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/jquery-1.9.1.min.js.download
200 OK 93 kB URL HTTP/1.1 daneves.net/waiting/files/jquery-1.9.1.min.js.download
IP
File type ASCII text, with very long lines (32089)
Hash 397754ba49e9e0cf4e7c190da78dda05
ae49e56999d82802727455f0ba83b63acd90a22b
c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/jquery-1.9.1.min.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: application/javascript
Content-Length: 92629
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/f(4).txt
200 OK 83 kB URL HTTP/1.1 daneves.net/waiting/files/f(4).txt
IP
File type ASCII text, with very long lines (5285)
Hash 5343b235d666becc80e9d0399d65ba70
c1bbc4fdcc6f799433905919da6814ed7e4bc829
13f0a961e23af66d5ab80796d9f1fe5dd50b7e1c0aad39c2eed633dbb626d90e
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/f(4).txt HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/plain
Content-Length: 82773
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/adsbytenmax.js.download
200 OK 81 kB URL HTTP/1.1 daneves.net/waiting/files/adsbytenmax.js.download
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7b5c58a2c59f4d920e1abf963cc2bcc8
3d152ff5c56372c94554fcc26de97843a65f1043
065b7a413149f15e8d528b70c73e57b478785315f95b7f508ecd8431b96c322c
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/adsbytenmax.js.download HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: application/javascript
Content-Length: 81025
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/wm2k-style.css
200 OK 5.0 kB URL HTTP/1.1 daneves.net/waiting/files/wm2k-style.css
IP
File type assembler source, ASCII text, with CRLF line terminators
Hash 0d5b447983de6d56cfd3ddf70cedd84e
102dd2fcda1961510efb98439c57bcaf3309bcc8
775b1ab216005f574a2394fb317d725134e77567bea3c0d61915b5bab47f362f
GET /waiting/files/wm2k-style.css HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/top.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/css
Content-Length: 5031
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/fonts/glyphicons-halflings-regular.woff
200 OK 129 B URL HTTP/1.1 daneves.net/waiting/fonts/glyphicons-halflings-regular.woff
IP
File type HTML document, ASCII text, with no line terminators
Hash 729f75c5f9e8bdebe5fc079ebedfbba3
2b35076f41e63e21145fe303f95411fcf43dfa82
9eb25c601834492645914f261094b48198a6befa4424de454e6c2f68f3cd9b36
Analyzer Verdict Alert fortinet Phishing
GET /waiting/fonts/glyphicons-halflings-regular.woff HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://daneves.net/waiting/files/bootstrap.min.css
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
daneves.net/favicon.ico
200 OK 129 B IP
File type HTML document, ASCII text, with no line terminators
Hash 729f75c5f9e8bdebe5fc079ebedfbba3
2b35076f41e63e21145fe303f95411fcf43dfa82
9eb25c601834492645914f261094b48198a6befa4424de454e6c2f68f3cd9b36
GET /favicon.ico HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/Hinet.Html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
daneves.net/waiting/files/hinet-hd-t01.gif
200 OK 1.5 kB URL HTTP/1.1 daneves.net/waiting/files/hinet-hd-t01.gif
IP
File type GIF image data, version 89a, 154 x 43\012- data
Hash 8d66cd7d67a91f7e8aff3e95e95d6479
38a0a7b7dd47b2d7c9bc2842ba1e7010360df580
82cc1448d53752d24bb4d5cf39374ef114daf14c7e11bcd0c765708da9a2326f
GET /waiting/files/hinet-hd-t01.gif HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/top.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: image/gif
Content-Length: 1483
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/hinet-hd-t02.gif
200 OK 245 B URL HTTP/1.1 daneves.net/waiting/files/hinet-hd-t02.gif
IP
File type GIF image data, version 89a, 134 x 43\012- data
Hash 000e5360d7cefd2b6012c9d43006b1d0
c61460be8f90c7a7df0feb6b37146388a4c6b999
f181238f262b5cc5c4b78eb41510fb8102feac7dbcb6513b109ebe5d594c901d
GET /waiting/files/hinet-hd-t02.gif HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/top.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: image/gif
Content-Length: 245
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/hinet-logo-small.gif
200 OK 500 B URL HTTP/1.1 daneves.net/waiting/files/hinet-logo-small.gif
IP
File type GIF image data, version 89a, 39 x 20\012- data
Hash 7938c3c1d4e2c196b1734a92a7accd74
b71cb034cb6dbc688cfc0449da68361ddcdbce7f
db3d351ec3db69ac6c039d94ee05a2fecb641468759f2a6e45e00b2c1bcd8f9f
GET /waiting/files/hinet-logo-small.gif HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/bottom.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: image/gif
Content-Length: 500
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/hinet-logo.gif
200 OK 2.3 kB URL HTTP/1.1 daneves.net/waiting/files/hinet-logo.gif
IP
File type GIF image data, version 89a, 89 x 44\012- data
Hash 9c7bc7a6e10768b07d87d2a213a00fd3
55dafaf5299214fae7fd513f8b1b29759dad89cc
afb1ef623fb7cc98d5848f53cb0affeb7822e26c8ff4fe979d1f2491bfffdcc3
GET /waiting/files/hinet-logo.gif HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/top.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: image/gif
Content-Length: 2270
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
daneves.net/waiting/fonts/glyphicons-halflings-regular.ttf
200 OK 129 B URL HTTP/1.1 daneves.net/waiting/fonts/glyphicons-halflings-regular.ttf
IP
File type HTML document, ASCII text, with no line terminators
Hash 729f75c5f9e8bdebe5fc079ebedfbba3
2b35076f41e63e21145fe303f95411fcf43dfa82
9eb25c601834492645914f261094b48198a6befa4424de454e6c2f68f3cd9b36
Analyzer Verdict Alert fortinet Phishing
GET /waiting/fonts/glyphicons-halflings-regular.ttf HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/bootstrap.min.css
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
daneves.net/waiting/files/f.txt
200 OK 222 kB URL HTTP/1.1 daneves.net/waiting/files/f.txt
IP
File type ASCII text, with very long lines (1867)
Size 222 kB (221673 bytes)
Hash d1a2e5bb6f66a8057ea4978a00600ec1
1e2a3feac560fa96e10b72721897d9f172cdb860
ce5b6b750a9f285288f029691ef902975e7a9e150b5210c63753ea4f8ded0c24
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/f.txt HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:49 GMT
Content-Type: text/plain
Content-Length: 221673
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:32 GMT
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10639
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 22:54:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10639
Expires: Mon, 26 Sep 2022 01:52:09 GMT
Date: Sun, 25 Sep 2022 22:54:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c11e6fef1be62b971bd9daf378bfc95
ef9d756cbcda72cf7ef5029b7d384cd1fbaed633
b8369f83d6dddcd2355b81d8eb200791788165e56881ce21e1a1e9c8bb1bb2ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13584
x-amzn-requestid: 198bd2b4-d4ae-4f19-a500-463aee52b890
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHgFdNoAMFwEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc9-19a1f7d2102820da4b21f18b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: yl8BCwdlIePsc4gIX4IYH0L6NHipn_5fBsa9nyYy14w0m49jPUYXBw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:57:51 GMT
age: 3419
etag: "ef9d756cbcda72cf7ef5029b7d384cd1fbaed633"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1dfa0c2-ab90-410b-b036-ba20f7cfe781.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1dfa0c2-ab90-410b-b036-ba20f7cfe781.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ae396e310d1a7b5e9c4f0bcff5f0f26
1f1ab5678eb454de32e049cd3fe7e7fd0cd7447f
e6b75239519cf7d49594cd2c4ee5c9cf9d8c8c5cad2b9886465e877a0b3a0db4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1dfa0c2-ab90-410b-b036-ba20f7cfe781.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6447
x-amzn-requestid: af8b5b52-ee1a-4227-b30b-c65dbb7d6bb4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSJKHrMIAMFuJA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca3a-08bf4d8a18ccc6b277eacecf;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dU1BSSjuJbF7wUjycpWIsRPw6Sr-NcLmiT5Ka6RSerkx4fhlPWrgGw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:01:31 GMT
age: 3199
etag: "1f1ab5678eb454de32e049cd3fe7e7fd0cd7447f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a90590f26bae9ad9e95ffdfbfb7dd21d
cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3
33fe3394213e01d11c3e005cb5a678ba74511704d4132fc2bd9f7ad4e1b7dbfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10318
x-amzn-requestid: 6a205445-8a9e-4f25-b144-ba6e6934d383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhFNAIAMFmBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-61ecbf9154cd56131b940ac0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qP5-TglQAoTGc78-rIK27mKRTS_WthN0OpiiMqSF-y2rmWxVOyfNVw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:02:10 GMT
age: 3160
etag: "cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20fede81-e065-476d-b8c9-466c4d80f419.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20fede81-e065-476d-b8c9-466c4d80f419.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27d324b1fb661c318aced98468501b3c
5c4ee294c98e8fc9312a7d481b6ec165494cf852
937296b5da48df0495ebd0cb3509b7c00059725c00c5b97f475ba2382a0e5437
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20fede81-e065-476d-b8c9-466c4d80f419.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7998
x-amzn-requestid: beedf4d8-29c0-43c6-92d0-40af6b9ee9f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTibE5LoAMFXLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cc75-1be97f2a525b9a5e3146d4be;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:47:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: i8BwIohBNqfEavPXBqSWshg7G-WF9UkBBScnDcyH4qEYV9TzreLXWA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:03:29 GMT
age: 3081
etag: "5c4ee294c98e8fc9312a7d481b6ec165494cf852"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Hash b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rN_8rm10Pxb0AUKW6ECfNulcYxBaS7FgGD15gT14dX-FlsGJfqahxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:37:35 GMT
age: 4635
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 988b0c94c41a21c736b330c3256d0a3c
c16a6f018bd80c6390b7a07f4e6698db7bfd28b0
3034912f83810b3999ffa90f5eeaf0f45773c592cfd3cf2bfb794ea1b150158c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9070
x-amzn-requestid: 2aceb075-d4bc-45b8-8330-5e719c565f77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSKEEdPoAMFsNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca40-3f120e0774b1d58a08898c39;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:08 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: feNiTFDhUx-BfoiybnKj83hCq6CCoiMeOSEHyFs8b7cLIgKvnO1Cdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:04:42 GMT
age: 3008
etag: "c16a6f018bd80c6390b7a07f4e6698db7bfd28b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
daneves.net/waiting/files/viewable
200 OK 0 B URL HTTP/1.1 daneves.net/waiting/files/viewable
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/viewable HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:50 GMT
Content-Length: 0
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/b734323b-0532-40a6-8d4e-782e1c96bd3a
200 OK 43 B URL HTTP/1.1 daneves.net/waiting/files/b734323b-0532-40a6-8d4e-782e1c96bd3a
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/b734323b-0532-40a6-8d4e-782e1c96bd3a HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:50 GMT
Content-Length: 43
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
daneves.net/waiting/files/request
200 OK 0 B URL HTTP/1.1 daneves.net/waiting/files/request
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/request HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:50 GMT
Content-Length: 0
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d095ec6a56142cb2084481b06881ef4
82ff236023008fbfb871aaa7c1e976e0cf15e91a
791ac45152415413d4af27f3dde61a021c9c57dcf7ca5b0e65300ebc3cd8815d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
daneves.net/waiting/files/impression
200 OK 0 B URL HTTP/1.1 daneves.net/waiting/files/impression
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/impression HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:50 GMT
Content-Length: 0
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/html/r20200608/r20190131/zrt_lookup.html
200 OK 4.4 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20200608/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash 682bf699cccbc0ff817e1fcb7b95262a
11ad3edf0008f52b733c2d6d7199e1f052318d58
bd42f773d589f85cf6884d7893746d5d4e0c082f78e1c80511cf3aefa1c69a0f
GET /pagead/html/r20200608/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://daneves.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 25 Sep 2022 22:54:50 GMT
expires: Sun, 09 Oct 2022 22:54:50 GMT
cache-control: public, max-age=1209600
content-type: text/html; charset=UTF-8
etag: 9671129459699598864
x-content-type-options: nosniff
content-encoding: gzip
server: cafe
content-length: 4420
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=daneves.net
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=daneves.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=daneves.net HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://daneves.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 25 Sep 2022 22:54:50 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1d095ec6a56142cb2084481b06881ef4
82ff236023008fbfb871aaa7c1e976e0cf15e91a
791ac45152415413d4af27f3dde61a021c9c57dcf7ca5b0e65300ebc3cd8815d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b54e0852441591083a4e167b4c59fb7f
fd988c56c43f2e9f91179ae768b99846c7dc36e6
483478da60d8a42a359c6ae72e65df36dc68e2c1c6ef43bf6329f6c008a8f97e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.com.ng/adsid/integrator.js?domain=daneves.net
200 OK 100 B URL HTTP/2 adservice.google.com.ng/adsid/integrator.js?domain=daneves.net
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=daneves.net HTTP/1.1
Host: adservice.google.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://daneves.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 25 Sep 2022 22:54:50 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
daneves.net/waiting/files/zrt_lookup.html
200 OK 9.9 kB URL HTTP/1.1 daneves.net/waiting/files/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2808)
Hash 3a278e69a4b7c164dd95ad389b07b8bc
a7d55daa3b8eb57cbbe5792368c8b94136caafac
bacd5bbd2ab7908d7746f70d362a62179a7a2c4ea6cdcb4e16e77b1cfd538864
Analyzer Verdict Alert fortinet Phishing
GET /waiting/files/zrt_lookup.html HTTP/1.1
Host: daneves.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/waiting/files/saved_resource.html
Cookie: adid=d77ed416-6fb1-381e-f6b8-e719684b8f09; _ht_hi=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Sep 2022 22:54:50 GMT
Content-Type: text/html
Content-Length: 9946
Connection: keep-alive
Last-Modified: Fri, 12 Jun 2020 02:35:34 GMT
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b54e0852441591083a4e167b4c59fb7f
fd988c56c43f2e9f91179ae768b99846c7dc36e6
483478da60d8a42a359c6ae72e65df36dc68e2c1c6ef43bf6329f6c008a8f97e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 83ce30306f9844b38a8e5d4c9146e333
a2a8a135c949784b4d2153954593411074fd0425
939a3899d3ba41e4868adabbfe5f0c49ecaa1bce8b1cb109327dc2dd6311ad5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/r20200608/r20190131/show_ads_impl_fy2019.js
404 Not Found 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/js/r20200608/r20190131/show_ads_impl_fy2019.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/js/r20200608/r20190131/show_ads_impl_fy2019.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://daneves.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 25 Sep 2022 22:54:50 GMT
expires: Mon, 26 Sep 2022 22:54:50 GMT
cache-control: public, max-age=86400
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagservices.com/activeview/js/current/osd.js?cb=%2Fr20100101
200 OK 147 B URL HTTP/2 www.googletagservices.com/activeview/js/current/osd.js?cb=%2Fr20100101
IP
Hash bc01c9d0f5d2a958c3e0d635c64a37f7
23b6ff476729130d2e1afbccad36ab986a6d618f
01677d32bea6696dfee82715d517f43c0ec71ce52cbedb711b8ea3e5a9c72cd6
GET /activeview/js/current/osd.js?cb=%2Fr20100101 HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://daneves.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl
cross-origin-opener-policy: same-origin; report-to="active-view-scs-read-write-acl"
report-to: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]}
content-length: 147
date: Sun, 25 Sep 2022 22:54:50 GMT
expires: Sun, 25 Sep 2022 22:54:50 GMT
cache-control: private, max-age=3000
etag: "1663760188057695"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=daneves.net&callback=_gfp_s_&client=ca-pub-4338256439626145
200 OK 200 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=daneves.net&callback=_gfp_s_&client=ca-pub-4338256439626145
IP
File type ASCII text, with no line terminators
Hash 8938adfb64bd1a54413bdea773895974
d83d8b18ad871a4a5e1f1559b1aa6fc40a9a69b0
26eb27b7e8f6338ee7b4ca84476e318925885c6dd97afddf91b3387800c9a37f
GET /gampad/cookie.js?domain=daneves.net&callback=_gfp_s_&client=ca-pub-4338256439626145 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://daneves.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sun, 25 Sep 2022 22:54:50 GMT
server: cafe
cache-control: private
content-length: 200
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 83ce30306f9844b38a8e5d4c9146e333
a2a8a135c949784b4d2153954593411074fd0425
939a3899d3ba41e4868adabbfe5f0c49ecaa1bce8b1cb109327dc2dd6311ad5b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a347d1a00b963f1d6a2a1ede4a5a7922
f853fc68ad2d4adf3742b5e437fe1e74262f1f70
c156ac5fa69d56ee8d64ae91fcff3b209d11e98d28614b8b2c908a3981174af8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a347d1a00b963f1d6a2a1ede4a5a7922
f853fc68ad2d4adf3742b5e437fe1e74262f1f70
c156ac5fa69d56ee8d64ae91fcff3b209d11e98d28614b8b2c908a3981174af8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/pagead/js/r20220921/r20110914/abg_lite_fy2021.js
200 OK 9.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220921/r20110914/abg_lite_fy2021.js
IP
File type ASCII text, with very long lines (1624)
Hash f46cc3169ffbd99218f62616e2dc44ea
f44964026d2af9900a059c88967c9e8d067def45
9c82ae03291d76510460e1468338fd9303e25ccbf65e94c66e7a3e2173d7b29c
GET /pagead/js/r20220921/r20110914/abg_lite_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 9559
x-xss-protection: 0
date: Sun, 25 Sep 2022 22:10:47 GMT
expires: Sun, 09 Oct 2022 22:10:47 GMT
cache-control: public, max-age=1209600
etag: 12142024561622733046
content-type: text/javascript; charset=UTF-8
age: 2643
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/pagead/js/r20220921/r20110914/client/qs_click_protection_fy2021.js
200 OK 7.6 kB URL HTTP/2 tpc.googlesyndication.com/pagead/js/r20220921/r20110914/client/qs_click_protection_fy2021.js
IP
File type ASCII text, with very long lines (1494)
Hash d4c271459de87911060fd730756373be
9100e62d0d61513c1b489e47a6a35b84e8be4a25
b14fbcdbed0b02e9656b4d5ff183d84c25b076ac0b1087d2feb9254ee9ce8c24
GET /pagead/js/r20220921/r20110914/client/qs_click_protection_fy2021.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://googleads.g.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 7553
x-xss-protection: 0
date: Sun, 25 Sep 2022 22:24:07 GMT
expires: Sun, 09 Oct 2022 22:24:07 GMT
cache-control: public, max-age=1209600
etag: 15375136450269253166
content-type: text/javascript; charset=UTF-8
age: 1843
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc7883d0a03d9c3559288a600fecc70a
b0e538996510ec8c861264cba4bf79fa73f6f7d6
c3bdc9bb12c7c951ca2d861c95156de2c724acc82386e882864c464132e07ac3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/drt/ui
302 Found 0 B URL HTTP/2 www.google.com/pagead/drt/ui
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/drt/ui HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
cache-control: private
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 25 Sep 2022 22:54:50 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/1.1 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://daneves.net/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs"
Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
Content-Length: 6386
Date: Sun, 25 Sep 2022 22:54:50 GMT
Expires: Sun, 25 Sep 2022 22:54:50 GMT
Cache-Control: private, max-age=3000
ETag: "1637097310169751"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.publicca.hinet.net/OCSP/ocspG2
200 OK 1.8 kB URL HTTP/1.1 ocsp.publicca.hinet.net/OCSP/ocspG2
IP
ASN #3462 Data Communication Business Group
Hash 5af6d2cb3a012654d444f99e73a93686
0877d08955f0946ab2d9ba19c4ebdf4b490323bf
72e8ef7ba7162857a8f98cd329fe37d946564423b5f68a972be18b079ef94e99
POST /OCSP/ocspG2 HTTP/1.1
Host: ocsp.publicca.hinet.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Sep 2022 22:54:52 GMT
Content-Length: 1773
Content-Type: application/ocsp-response
ssp.hinet.net/api/web/third?c=2017007&s=201702000023&th=42&wc=684
200 OK 0 B URL HTTP/2 ssp.hinet.net/api/web/third?c=2017007&s=201702000023&th=42&wc=684
IP
ASN #3462 Data Communication Business Group
GET /api/web/third?c=2017007&s=201702000023&th=42&wc=684 HTTP/1.1
Host: ssp.hinet.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://daneves.net
Connection: keep-alive
Referer: http://daneves.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 22:54:55 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: http://daneves.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
X-Firefox-Spdy: h2
206.72.193.159
210.71.154.18
23.36.76.226
93.184.220.29
0.0.0.0