Overview

URLpubgspin88.duckdns.org/
IP 20.9.70.76 (United States)
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-26 12:39:58 UTC
StatusLoading report..
IDS alerts0
Blocklist alert13
urlquery alerts
30
DynDNS domain detected
Tags None

Domain Summary (19)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.pubgmobile.com (6) 21653 2018-06-16 09:24:41 UTC 2020-04-27 13:38:40 UTC 23.36.76.227
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-26 05:33:16 UTC 34.117.237.239
cdnjs.cloudflare.com (1) 235 2015-04-17 20:46:33 UTC 2022-11-26 09:48:30 UTC 104.17.25.14
i.ibb.co (2) 13485 2018-11-25 10:13:48 UTC 2022-11-26 10:19:40 UTC 162.19.58.156
i.postimg.cc (1) 23840 2018-04-11 10:01:12 UTC 2022-11-26 07:57:17 UTC 162.19.88.69
fonts.gstatic.com (1) 0 2014-09-09 00:40:21 UTC 2022-11-26 10:10:14 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
l.top4top.io (1) 926491 2020-01-14 23:19:40 UTC 2022-11-26 09:27:48 UTC 65.21.235.194
a.top4top.io (1) 588496 2019-12-05 18:36:40 UTC 2022-11-26 09:27:48 UTC 51.159.64.45
pubgspin88.duckdns.org (29) 0 2022-11-26 10:52:34 UTC 2022-11-26 10:52:34 UTC 20.9.70.76 Unknown ranking
ocsp.pki.goog (5) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.3
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 35.167.231.108
g.top4top.io (1) 907555 2020-03-09 21:07:31 UTC 2022-11-26 09:27:48 UTC 163.172.24.234
fonts.googleapis.com (2) 8877 2013-06-10 20:14:26 UTC 2022-11-26 07:22:52 UTC 142.250.74.10
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
firefox.settings.services.mozilla.com (1) 867 2020-06-04 20:08:41 UTC 2022-11-26 05:33:20 UTC 34.102.187.140
stackpath.bootstrapcdn.com (1) 2467 2018-06-15 20:36:43 UTC 2022-11-26 10:35:31 UTC 104.18.11.207
img-getpocket.cdn.mozilla.net (5) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
r3.o.lencr.org (7) 344 No data No data 23.36.76.226

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-26 2 pubgspin88.duckdns.org/ Phishing
2022-11-26 2 pubgspin88.duckdns.org/js-zone/main-zone.js Phishing
2022-11-26 2 pubgspin88.duckdns.org/js-zone/showHide.js Phishing
2022-11-26 2 pubgspin88.duckdns.org/index_files/gift-zone.js Phishing
2022-11-26 2 pubgspin88.duckdns.org/js-zone/slider.js Phishing
2022-11-26 2 pubgspin88.duckdns.org/index_files/css Phishing
2022-11-26 2 pubgspin88.duckdns.org/js-zone/jquery.js Phishing
2022-11-26 2 pubgspin88.duckdns.org/index_files/jquery.min.js.download Phishing
2022-11-26 2 pubgspin88.duckdns.org/js-zone/alert-zone.js Phishing
2022-11-26 2 pubgspin88.duckdns.org/fonts/selow.woff2 Phishing
2022-11-26 2 l.top4top.io/m_1725u5z7i1.mp3 Malware
2022-11-26 2 a.top4top.io/m_1725zobal2.mp3 Malware
2022-11-26 2 g.top4top.io/m_2246xtcs10.mp3 Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 20.9.70.76
Date UQ / IDS / BL URL IP
2023-03-09 11:33:10 +0000 0 - 2 - 0 www.iinstagram-fotoseeingpicturess.b0tnet.com/ 20.9.70.76
2023-01-13 19:19:50 +0000 0 - 12 - 18 freeclub402.16-b.it/ 20.9.70.76
2023-01-13 18:39:30 +0000 0 - 5 - 4 freeclub402.16-b.it/login.php 20.9.70.76
2023-01-13 15:36:07 +0000 0 - 5 - 4 freeclub402.16-b.it/login.php 20.9.70.76
2023-01-13 10:42:38 +0000 0 - 5 - 4 freeclub402.16-b.it/login.php 20.9.70.76


Last 5 reports on ASN: MICROSOFT-CORP-MSN-AS-BLOCK
Date UQ / IDS / BL URL IP
2023-03-25 23:12:20 +0000 0 - 4 - 0 thisdomainislong.lol/U66Y4R.exe 52.173.151.229
2023-03-25 23:09:56 +0000 0 - 84 - 0 app.temu.com/m/8cpIXJrhaPceA 20.124.49.175
2023-03-25 23:08:55 +0000 0 - 6 - 0 opndrdev.se/CmZgRRx1p 13.107.237.53
2023-03-25 22:56:29 +0000 4 - 1 - 1 firstappad.me/15GBdn 20.113.187.208
2023-03-25 22:44:42 +0000 0 - 1 - 0 rvbwtbeitwjeitv.com/ 204.95.99.221


Last 1 reports on domain: pubgspin88.duckdns.org
Date UQ / IDS / BL URL IP
2022-11-26 12:39:58 +0000 30 - 0 - 13 pubgspin88.duckdns.org/ 20.9.70.76


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-04 17:57:12 +0000 21 - 0 - 31 pubgspin125.duckdns.org/ 20.9.70.76
2022-12-04 17:56:48 +0000 31 - 0 - 44 mail.pubgspin125.duckdns.org/ 20.9.70.76
2022-12-04 15:10:32 +0000 21 - 0 - 31 pubgspin125.duckdns.org/ 20.9.70.76
2022-12-04 15:10:07 +0000 31 - 0 - 44 mail.pubgspin125.duckdns.org/ 20.9.70.76
2022-12-03 11:58:07 +0000 31 - 0 - 3 mail.pubgspin120.duckdns.org/ 20.9.70.76

JavaScript

Executed Scripts (16)

Executed Evals (0)

Executed Writes (2)
#1 JavaScript::Write (size: 171) - SHA256: 06d287bc821986c6d2cea4631dc0329b9cd9e15ca19737eb1479e118526bc3e9
< script src = "js-zone/alert-zone.js" > < /script><script type="text/javascript
" src="
js - zone / zero - zone.js "></script><script language="
JavaScript ">document.write(ls())</script>
#2 JavaScript::Write (size: 140) - SHA256: 69db51683da9aaff997d8865c60e37445e2bc99d451ec64029183b375779df4d
< link rel = "stylesheet"
type = "text/css"
href = "css-zone/style-zone.css" / > < link type = "text/css"
rel = "stylesheet"
href = "css-zone/zero-zone.css" >


HTTP Transactions (71)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-length: 12108
content-encoding: gzip
vary: Accept-Encoding
date: Sat, 26 Nov 2022 12:39:46 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source, Unicode text, UTF-8 text, with very long lines (6242), with CRLF line terminators
Size:   12108
Md5:    5f0331d8eb3cc055f565b9b965e9b30a
Sha1:   af9484ea811c33827993d8d63bdbf37e92361785
Sha256: 47620350603efbc0f22764b81185fda58dd696d419ae4cfaad6894b9c5aaf41b

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16060
Expires: Sat, 26 Nov 2022 17:07:26 GMT
Date: Sat, 26 Nov 2022 12:39:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4440
Cache-Control: max-age=169522
Date: Sat, 26 Nov 2022 12:39:46 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:45:08 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2209
Expires: Sat, 26 Nov 2022 13:16:35 GMT
Date: Sat, 26 Nov 2022 12:39:46 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 12:17:32 GMT
cache-control: public,max-age=3600
age: 1334
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4d7e4eed097b9c4e5d509419f1cfc85a
Sha1:   290bb3d428a7c6330e2e3d73a952b16f820896c8
Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: BQB40y3ip/Tt1agGlSbVYq3fRFSCsG0VrUBksMXpObyiwplu2+VozOFRhLqOKEV0V/vxK7KQJGw=
x-amz-request-id: VK0DQZ5XM3DP6MK0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 11:44:13 GMT
age: 3333
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 26 Nov 2022 12:39:46 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Sat, 26 Nov 2022 12:39:46 GMT
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 214574
expires: Thu, 16 Nov 2023 12:39:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G1IeE%2BNYJ8KxNLVP%2FM7OBHwxrN4L6zRyHgOWdQkwotBCFRrm3vDHATdFolOeEW2ThV1%2Brk2DUSfcXRGeG%2FEqxX5fX6fRVHUCb0stCORzjAfUlKqJIOV4B0T9P3TH4dJ%2FEpZWfyJG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7702b0552cb2b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   5845
Md5:    a7e25a22602a2b2ed35f90fd5210cff1
Sha1:   148c4f275b60e6cf6253d6b4c7bdc486515b2202
Sha256: 312d94bafa68e11e3a4a8d7c06bc25ee161d1d965afb1fa99db79815a272d0bf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6502
Cache-Control: max-age=158992
Date: Sat, 26 Nov 2022 12:39:46 GMT
Etag: "6381b9bc-117"
Expires: Mon, 28 Nov 2022 08:49:38 GMT
Last-Modified: Sat, 26 Nov 2022 07:01:16 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 12:39:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css-zone/facebook.css HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:46 GMT
last-modified: Fri, 24 Jun 2022 17:52:08 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 850
date: Sat, 26 Nov 2022 12:39:46 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text
Size:   850
Md5:    2d514a4b745a237240c334af5d66c846
Sha1:   35f84353379a2b91aedb5284d08e0fbec9d82d05
Sha256: 1a3cfb254a31d2b73bc64a6d835be89277cb40d8984db11020da58fd5ea10e29

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 12:39:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 12:39:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6502
Cache-Control: max-age=158992
Date: Sat, 26 Nov 2022 12:39:46 GMT
Etag: "6381b9bc-117"
Expires: Mon, 28 Nov 2022 08:49:38 GMT
Last-Modified: Sat, 26 Nov 2022 07:01:16 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /Wg8qQxh/facebook-text.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         162.19.58.156
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sat, 26 Nov 2022 12:39:46 GMT
content-length: 28789
last-modified: Mon, 18 Oct 2021 19:35:50 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced\012- data
Size:   28789
Md5:    74190b93fc4f5d88f0c8e6411ba20bd8
Sha1:   89ce2ecb660a90b8e6ed1b335443d7767c59f28a
Sha256: 092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401
                                        
                                            GET /V9rgBqw/twitter-text.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         162.19.58.156
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sat, 26 Nov 2022 12:39:46 GMT
content-length: 4298
last-modified: Mon, 18 Oct 2021 19:35:41 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size:   4298
Md5:    fef946b8bba756359e2a1e87ccd915ea
Sha1:   acc364946077b0e32b2343474ce4066ad3ee524c
Sha256: 1be5d05ce6faad469f7f9c5a5879f2d9f8d267b60eb394e92c19217268bcea8f
                                        
                                            GET /js-zone/main-zone.js HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:46 GMT
last-modified: Fri, 22 Apr 2022 11:48:20 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 345
date: Sat, 26 Nov 2022 12:39:46 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (316)
Size:   345
Md5:    bbae78527e745cb146a632161f3012f4
Sha1:   c882ece393db1074d14ce6f7a31bbd1a75b063f2
Sha256: c14640cd35d53dc1c450da2a35643dbcaf9877fc7818bc796580801c80c64922

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /js-zone/showHide.js HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:46 GMT
last-modified: Thu, 04 Aug 2022 07:48:42 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 272
date: Sat, 26 Nov 2022 12:39:46 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   272
Md5:    6d977127a16ed01d9383bb873fb500dd
Sha1:   b636c90c342e1d9b55ad1f854ce731c14ceb55cb
Sha256: 0e18086f49c35381b1d6a0bbc479fa009d75ed5f1d4dbb48f821ac2095715ba3

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /index_files/gift-zone.js HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:46 GMT
last-modified: Fri, 12 Aug 2022 21:19:52 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 624
date: Sat, 26 Nov 2022 12:39:46 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text
Size:   624
Md5:    1617d635d53511e37613a68229dbd60e
Sha1:   fa73d19b415c855b07fd5e3362f4556afdfa4227
Sha256: 2305e4de38b1a07a81015d5850c0907c686c31c7c56944206da543d310054a4e

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /js-zone/slider.js HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:46 GMT
last-modified: Wed, 12 Jan 2022 17:59:22 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 293
date: Sat, 26 Nov 2022 12:39:46 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   293
Md5:    e7c0f0b1dbf949ebfd06432d8b529b86
Sha1:   dd839b1001170efc745d2943b05d7f82bbcd16c0
Sha256: 6294b1a0ee498d07aa784f77d325e696d13f01759a5715532b7928d38d662261

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /css-zone/twitter.css HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:46 GMT
last-modified: Thu, 04 Aug 2022 07:46:08 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 720
date: Sat, 26 Nov 2022 12:39:46 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text
Size:   720
Md5:    4219a9d09f7f440715f61bcca970a87d
Sha1:   ae827841a11fa2814ffca55908c20d89dd34892d
Sha256: d0705558f7cec85dbcf810fad6d9a81f3d12449c9ff690340e1f0e03918e725b

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /index_files/css HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
last-modified: Fri, 22 Apr 2022 11:48:20 GMT
accept-ranges: bytes
content-length: 62268
date: Sat, 26 Nov 2022 12:39:46 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (1116)
Size:   62268
Md5:    755df17a408beddb747e36f27ae4dedc
Sha1:   53daa61ef477c0badec68fa8942cb5ffce0c38b0
Sha256: a2db023c6c27693f044211498c952a94f002c75b80926bde95c24d5dbab187f4

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /css-zone/animate.css HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:46 GMT
last-modified: Sat, 28 May 2022 13:12:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4775
date: Sat, 26 Nov 2022 12:39:46 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text
Size:   4775
Md5:    28a4d6d57d6e015573f4aff35132beba
Sha1:   9fe7b240d8ad129b7386346d6b9670e7edf6f886
Sha256: 8f4720196ecc8f4f3e0b557e828210a5f18adca51c0a7d3b9e3d1c83f02cbcb7

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /js-zone/jquery.js HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Fri, 22 Apr 2022 11:48:20 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 451
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (1757)
Size:   451
Md5:    1abe5c025a16893ec52beb616bed7b16
Sha1:   9d69e05eeeecfb6f358bfa69e460168a7617f585
Sha256: 1dfae3417846d2cfbd7957679b81e8021a51949912e10b3101c71ca2f9d5dcb3

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 
Host: stackpath.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pubgspin88.duckdns.org
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.18.11.207
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Sat, 26 Nov 2022 12:39:46 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/18/2022 06:18:29
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: bc8cd3aa872fec4f027a979c3b2a2974
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7702b0557f55b4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   7306
Md5:    762524b6225a89ad08c5688e497cff55
Sha1:   1017f63dec9931cec380bc0f07eb26390d482115
Sha256: 78a2260537066a84bc0f1ff8324f1138fe46f3d5f03fb04aee3ba81e0df28850
                                        
                                            GET /SxQ04Qn4/navbar-logo.png HTTP/1.1 
Host: i.postimg.cc
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         162.19.88.69
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sat, 26 Nov 2022 12:39:47 GMT
content-length: 158577
last-modified: Tue, 22 Mar 2022 04:46:34 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1074 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size:   158577
Md5:    386d5af4a1126e03333b3a043f9efa73
Sha1:   3a71b66fbd920ea27595e9c958336da8b3d05606
Sha256: 8b877d99b1124d17bb2e21c71cc8838f80c9c0945e1c140714588e73d50c3473
                                        
                                            GET /img/draw.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 21 Sep 2022 08:35:08 GMT
accept-ranges: bytes
content-length: 71339
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 480 x 480, 8-bit colormap, non-interlaced\012- data
Size:   71339
Md5:    af0f2202278fcbd08ba21fb51e677f02
Sha1:   cb5c45c98375a7459e5c9f7c732ed0bb41912151
Sha256: c3f13a69b23cfb5590a79aa76a6b77b34afc0f936f5314914ee012a2953de4e3

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /index_files/jquery.min.js.download HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: application/octet-stream
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
last-modified: Fri, 22 Apr 2022 11:48:20 GMT
accept-ranges: bytes
content-length: 86927
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   86927
Md5:    a09e13ee94d51c524b7e2a728c7d4039
Sha1:   0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
Sha256: 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3891
Cache-Control: max-age=163915
Date: Sat, 26 Nov 2022 12:39:47 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:11:42 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /img/header.jpg HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/jpeg
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 21 Sep 2022 08:35:40 GMT
accept-ranges: bytes
content-length: 90987
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size:   90987
Md5:    70acb7b497bb2efe5b18ab4460df2581
Sha1:   2a46289fccb2cb4f65c91e4ca2749cbd6a32106a
Sha256: c51cef8e49563c3aa0e24daae486eed784c67a39f8792c1e5c8ad28ec8127a83

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /js-zone/alert-zone.js HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Fri, 22 Apr 2022 11:48:20 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 16998
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (64301)
Size:   16998
Md5:    5fc670873cc9844660062270f2fd1c5f
Sha1:   8f5a5f5c6d59675e6b9222e819464d3c509ec80d
Sha256: 272630f94545b1e2aa126c0ee68b70fbb9fd540f4cc2b2b3a9f6dd0471d90752

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /img/reward/6.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 20 Jul 2022 22:57:48 GMT
accept-ranges: bytes
content-length: 78957
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced\012- data
Size:   78957
Md5:    c424b4ac7ed1349c87a845d67efcd674
Sha1:   3f1fefb863601567edb7d21d90d2d0caea809e59
Sha256: 66be07fd89d814f3d03d51907fac742a4e93644cc64acb9b1708a998219ee081

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /en/images/nav_menu.svg HTTP/1.1 
Host: www.pubgmobile.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.227
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-374"
accept-ranges: bytes
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 26 Nov 2022 12:39:47 GMT
content-length: 426
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (876), with no line terminators
Size:   426
Md5:    76f5753e4fe160785df31ef342ada1c1
Sha1:   a78cc3e318b79b7fe5e7eb8df11683706b518e8f
Sha256: 52c48564638e7f165f23fae7f76b72d07905f2179ff659b939bfab7ec8b82a26
                                        
                                            GET /en/images/nav_language.svg HTTP/1.1 
Host: www.pubgmobile.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.227
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-45b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 26 Nov 2022 12:39:47 GMT
content-length: 675
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (1107), with no line terminators
Size:   675
Md5:    77e7b8dcd13159c59219706782b1a897
Sha1:   a3c73409a8e9841a00b771d96ce6cb0ce76d222e
Sha256: 4f61e0a210a58bdf43f8a93bf658275291e6a16979f8090c0731f06b6fb3c5a4
                                        
                                            GET /en/images/nav_shop.svg HTTP/1.1 
Host: www.pubgmobile.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.227
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-3e1"
accept-ranges: bytes
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 26 Nov 2022 12:39:47 GMT
content-length: 526
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (985), with no line terminators
Size:   526
Md5:    ad0548f5478991acc360e6464247e82a
Sha1:   40e3e327eebfc39a8e45b1aa46b725d65390cdcc
Sha256: 6654577abe5f4be7b3f9089fa76e5f746c8d0f5c7eae1cc8202a94fae1193fe3
                                        
                                            GET /img/reward/5.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 20 Jul 2022 22:57:46 GMT
accept-ranges: bytes
content-length: 116865
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced\012- data
Size:   116865
Md5:    ff1056a3e3589ffcec53760fb4cbd80d
Sha1:   34085f1d154e93836382bd3c78d1c0f0f572e3bc
Sha256: 2938b8bbed35a807e0a2bd3319a2b974120e973f1dbfc2ce16c1a6ae36da7394

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /img/reward/2.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Sun, 21 Aug 2022 06:54:04 GMT
accept-ranges: bytes
content-length: 47344
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 480 x 480, 8-bit colormap, non-interlaced\012- data
Size:   47344
Md5:    9385fac5777cc426942bbcf93955b1c7
Sha1:   399a43083150bdaa583bade22ead426883a9abd3
Sha256: e4deef8dd005291e6593e7adda03c5b9b86ed5527f934017f0efe7c4f796093c

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /img/footer.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Thu, 15 Sep 2022 04:09:46 GMT
accept-ranges: bytes
content-length: 22718
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 1280 x 189, 8-bit colormap, non-interlaced\012- data
Size:   22718
Md5:    c6b56cf1fbbb63620e8558afde759e96
Sha1:   4d50888d8a17c2dcdbd05e6068ca4b4b587c7f29
Sha256: 34f7601064bb7cc3cce9ba942dd92d7f53889c703daea37bf34e1e71a1de03f8

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /img/reward/3.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Sun, 21 Aug 2022 09:17:12 GMT
accept-ranges: bytes
content-length: 66216
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced\012- data
Size:   66216
Md5:    29be8a2dfc0fa8091b5786473744194b
Sha1:   786ced3ec3d3475dd065611cf8b2060e1a739ac0
Sha256: 4975634a46fddfa2d395b3e00ab65eed0d60d6e4e2dff79301352967c58d267a

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3t5JbpORdzpeJTqETOI+9w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.167.231.108
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8DCPP1KZqh/08034//yLkw6diE8=

                                        
                                            GET /img/reward/1.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Mon, 01 Aug 2022 19:15:18 GMT
accept-ranges: bytes
content-length: 237894
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced\012- data
Size:   237894
Md5:    9d88babf9343331887d6396bb396ebf3
Sha1:   75820f78180c57eb4c9418ae0b6537e666e2bc1c
Sha256: a2e2e5ed6b92c7f43a7f1b1fb443095e34b6964db37d43fc9a011079086ef4f7

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /css-zone/style-zone.css HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 21 Sep 2022 12:50:46 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 5319
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text, with very long lines (411), with CRLF line terminators
Size:   5319
Md5:    07a799f800fceec8f191806f400f23a7
Sha1:   466505bd5b3596e8958daf36e8a27860876bd2f7
Sha256: 0e7601c1118d7369221c24d0fbf31b69f1388f9818bced61579590f0bdefd024

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /css-zone/zero-zone.css HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Fri, 12 Aug 2022 22:53:02 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 987
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  ASCII text
Size:   987
Md5:    84f3c094ef8f98332569cabbd7692399
Sha1:   c068313bfcb8325eb585131818fb15ca7295df58
Sha256: f64bdc9eaf43860312d695d02b83b927a6e46cb23eb7461fe110c9f1f4f901e3

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /img/reward/4.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 20 Jul 2022 22:57:44 GMT
accept-ranges: bytes
content-length: 79393
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced\012- data
Size:   79393
Md5:    5c98f8cde43636fcb8f51874ebf8b9a3
Sha1:   8eab0cc80d02d13756eeca3448af2271e63cb5f8
Sha256: 61df3b8b3ad27f88e7ceca3172530c8da0ea4fd385b1f040a854c6280553ad6d

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 12:39:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/teko/v15/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pubgspin88.duckdns.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13324
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 21:50:27 GMT
expires: Thu, 23 Nov 2023 21:50:27 GMT
cache-control: public, max-age=31536000
age: 226160
last-modified: Wed, 27 Apr 2022 17:05:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 13324, version 1.0\012- data
Size:   13324
Md5:    b4082c888eefa2dca3fe2c9d46a87180
Sha1:   05aeb6c58175f659fe59eaca5a9d3735dd0530e3
Sha256: 352ad1513eeaeec51060f01d5bed32345862ec4d9c0802b81e0a47885951e4b6
                                        
                                            GET /img/subheader1.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/css-zone/style-zone.css

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 21 Sep 2022 12:06:08 GMT
accept-ranges: bytes
content-length: 45614
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x256, components 3\012- data
Size:   45614
Md5:    58ec0ec4a20b402781ef3f3821bc2009
Sha1:   0e00f3917060d32058d9b04985f13f11e727cf1a
Sha256: 5a629e4b175eeef758c9e19dd7d35d34bc32f3aef2980558993ce4d84bb8c297

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /img/container.jpg HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/css-zone/style-zone.css

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/jpeg
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 21 Sep 2022 08:19:12 GMT
accept-ranges: bytes
content-length: 170790
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x960, components 3\012- data
Size:   170790
Md5:    f2c08d5ca8f7c7ed29c6b02f83229e1b
Sha1:   348897a81818948600f556e4ed302c26e3a122a0
Sha256: 0a2a38fc3746578de8547fc9b0f37dd1636233a3c959835159eeae737e533f3d

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /img/alert.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 21 Sep 2022 12:53:12 GMT
accept-ranges: bytes
content-length: 15550
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  PNG image data, 480 x 78, 8-bit colormap, non-interlaced\012- data
Size:   15550
Md5:    d57d9de93e2f0844b61bd1e125d2e63d
Sha1:   9da0d854a1130b28f989614fd515a5d33b621b95
Sha256: d0c2bd676057ac0eb484c4327993d41d92cf2a32e78d9f9a2492831ccb49481d

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /img/item.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/css-zone/zero-zone.css

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 21 Sep 2022 12:15:28 GMT
accept-ranges: bytes
content-length: 53803
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x464, components 3\012- data
Size:   53803
Md5:    6a2542a4110d44f69a5a44a2807e6a45
Sha1:   a77ddad90a96d4000ef34b4d8df1adcbe6409dd7
Sha256: 4e65443562e219644454fff1c6d5ee2b2a980e193b19ff1b734532b48afb7773

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            GET /img/bg.png HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/css-zone/style-zone.css

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Wed, 21 Sep 2022 14:15:12 GMT
accept-ranges: bytes
content-length: 36383
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 802x1280, components 3\012- data
Size:   36383
Md5:    50893ea3291df042c44c5eaa39fd2284
Sha1:   e93aa88f115679ff5f19923c28f5bd507e3e4885
Sha256: 317377560c9e57979b33b375f8f963a8605184618b8555cfc187e5cc44c73c91

Alerts:
  urlquery:
    - DynDNS domain detected
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 26 Nov 2022 12:39:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "54FDB56B03F9D4B730677A5634ACC80677E90AEF9F25E123A713DB4775C7C504"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1890
Expires: Sat, 26 Nov 2022 13:11:17 GMT
Date: Sat, 26 Nov 2022 12:39:47 GMT
Connection: keep-alive

                                        
                                            GET /fonts/selow.woff2 HTTP/1.1 
Host: pubgspin88.duckdns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/

search
                                         20.9.70.76
HTTP/1.1 200 OK
content-type: font/woff2
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sat, 03 Dec 2022 12:39:47 GMT
last-modified: Thu, 29 Apr 2021 14:48:04 GMT
accept-ranges: bytes
content-length: 22220
date: Sat, 26 Nov 2022 12:39:47 GMT
server: LiteSpeed


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22220, version 1.0\012- data
Size:   22220
Md5:    345579e8566a3dd6dc9feb5362fbe7e1
Sha1:   df075dd0c26e72fd7df19948f07904c1eaa72ded
Sha256: 1d0dfcc32b3be2bf3b3dbc371e9b7c5ce205f4bc6f7c8ce0226256cc7064c3e4

Alerts:
  urlquery:
    - DynDNS domain detected
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /m_1725u5z7i1.mp3 HTTP/1.1 
Host: l.top4top.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         65.21.235.194
HTTP/2 206 Partial Content
content-type: audio/mpeg
                                        
server: nginx
date: Sat, 26 Nov 2022 12:39:47 GMT
content-length: 19781
set-cookie: klj_40d147_downloads=kh51z; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sun, 27 Nov 2022 12:16:27 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="open_reward_tab.mp3"
etag: "5f685351-4d45"
expires: Sat, 26 Nov 2022 14:39:47 GMT
cache-control: max-age=7200
x-file-id: x34392023x
content-range: bytes 0-19780/19781
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo\012- data
Size:   19781
Md5:    ee5b5d12064ae26f839b882edb33da62
Sha1:   6fa93ef00f294eec4ef05276e81813db1e95e346
Sha256: 4bc5852e5cec62ceab9260f712961f59609868151e01b63e7b7cae2b00efed54

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /m_1725zobal2.mp3 HTTP/1.1 
Host: a.top4top.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         51.159.64.45
HTTP/2 206 Partial Content
content-type: audio/mpeg
                                        
server: nginx
date: Sat, 26 Nov 2022 12:39:48 GMT
content-length: 17691
set-cookie: klj_40d147_downloads=kh520; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sun, 27 Nov 2022 12:16:28 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="close_reward_popup.mp3"
etag: "5f685351-451b"
expires: Sat, 26 Nov 2022 14:39:48 GMT
cache-control: max-age=7200
x-file-id: x34392024x
content-range: bytes 0-17690/17691
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo\012- data
Size:   17691
Md5:    70ded6b0b406f9710307bc35e221629f
Sha1:   7034ec2ff72c936255b04c0890ce8976599380cc
Sha256: 22e1575a06426f427b46598d6599c565e80ed3e937b1872b0d5d928bfe5b2d65

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /id/event/royalepass10/images/icon_logo.jpg HTTP/1.1 
Host: www.pubgmobile.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.227
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 75149
last-modified: Wed, 15 Sep 2021 06:46:59 GMT
etag: "614196e3-1258d"
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=286
expires: Sat, 26 Nov 2022 12:44:34 GMT
date: Sat, 26 Nov 2022 12:39:48 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3\012- data
Size:   75149
Md5:    92c19dc5bd77186e5bb8ed35ce668979
Sha1:   646bf70d1c669c7d7388f95a0a33755e4721289c
Sha256: 0d9cf7eb8fb12be77685134e63f7dae9a95fbf9306ae0529bd0347582d18a8ef
                                        
                                            GET /en/images/nav_download.svg HTTP/1.1 
Host: www.pubgmobile.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.227
HTTP/2 200 OK
content-type: image/svg+xml
                                        
server: nginx
last-modified: Mon, 21 Mar 2022 13:24:17 GMT
etag: "62387c81-3ef"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Sat, 26 Nov 2022 12:39:48 GMT
content-length: 485
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (999), with no line terminators
Size:   485
Md5:    105955f14143a23be57cadef8e91950e
Sha1:   98cc1e76113b4b2a2a77805bb1f1d6b364344d88
Sha256: b85bdfd2887c4fe7681cae97896e604e74d27f150feb49598e1e7efebd3c6fc2
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18936
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 12:39:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18936
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 12:39:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18936
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 12:39:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18936
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 12:39:48 GMT
Connection: keep-alive

                                        
                                            GET /m_2246xtcs10.mp3 HTTP/1.1 
Host: g.top4top.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         163.172.24.234
HTTP/2 206 Partial Content
content-type: audio/mpeg
                                        
server: nginx
date: Sat, 26 Nov 2022 12:39:48 GMT
content-length: 132739
set-cookie: klj_40d147_downloads=qnriu; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sun, 27 Nov 2022 12:16:28 GMT
last-modified: Thu, 24 Feb 2022 14:21:08 GMT
content-disposition: inline; filename="nizam.mp3"
etag: "62179454-20683"
expires: Sat, 26 Nov 2022 14:39:48 GMT
cache-control: max-age=7200
x-file-id: x44778774x
content-range: bytes 0-132738/132739
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo\012- data
Size:   101770
Md5:    ba0fb53cdc13a7cb911ef860a9a87e81
Sha1:   296f926b933358706538152df517c1f2df59df8c
Sha256: 3244dcda2fde95af6293735315eb77492bb7251ef309ce1a7faa61075f595311

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7c216e6-fb54-4285-8656-a1e15990a37a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8078
x-amzn-requestid: e199b062-09f2-46b8-a8ee-6d7b782f7359
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVC7GT2oAMF5XA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813545-485ea8fd3e785be748834efd;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yJdSAEHw1AFVsBFBSX5G6rqED3Kpi_P69vtTrVVE1vFDtl3XMsyJ4g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:31:51 GMT
age: 50877
etag: "bd3027af47f20f4bb9ac36cd9e4493e28e6b041c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8078
Md5:    70fae9ac56bb7676177d4252757f0180
Sha1:   bd3027af47f20f4bb9ac36cd9e4493e28e6b041c
Sha256: 1378749f1b28b6c56b8e76418fc5dd59cf608a4e64c1e1067b4f19df10233afc
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TI0cacek54dPUYW7fYy0xm-1CKdRXZGqBH1vGURakUsBbm-WGcW-vA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:17:55 GMT
age: 51713
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15818
Md5:    17ebe470d040a6ea8c57e9b9d4f4e828
Sha1:   1ac7a410cd4f3709f476c776dd5646dd982dcfa8
Sha256: d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffad04f54-f199-4bc1-a785-cf5c76640147.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11150
x-amzn-requestid: 0b773c28-feda-41a2-9de6-8b559bd773eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVC5EukoAMFxfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813545-3bfe118939abc352072c5af1;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TpEr70sCNigNhVg7rDFIUG12AVpzC0BUW6-xW3QTvjLcBUrpehjJbQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
age: 53622
etag: "845842c789e6e97fd1687e668d446bbb8309ffc7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11150
Md5:    d0f860248042a8499ffb1701a880b2ba
Sha1:   845842c789e6e97fd1687e668d446bbb8309ffc7
Sha256: 9eca5258c7b6e4e145ca6576a3f3791f1324714404ffd7a56a61961f81e7bd44
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6789
x-amzn-requestid: eede6332-5376-4f9c-83fc-f894430c1f4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWYFFgoAMFhaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-66d7ffc70f7d901420a503da;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yM8EHyxy6pUHVZhGUOHuFOU-Z4eTyL2N3Ooa6QMrPlIfp6X5I_JBRw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
age: 53622
etag: "c47a3884465fc02b5c57faa5ffbd986ba29c64c2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6789
Md5:    926df9839ec3d924b563b55d8bccace8
Sha1:   c47a3884465fc02b5c57faa5ffbd986ba29c64c2
Sha256: a97cd625959aa81bc516024628315b2c6e2ce94f76cd579751a686a6611cc4d2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7799
x-amzn-requestid: 4b3bf619-fb69-4cfe-b8e7-7de4ea127853
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXADFOvoAMFXQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813866-77f561ae3496d84c75541300;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:49:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lt_7H9W9LVUS5gKPrBF_vGiXg-anP_bGV5izsxPiGhiasy2eBnltuw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:39 GMT
age: 50769
etag: "3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7799
Md5:    96437d0cb1ceaffa77124f0dcfeb38cf
Sha1:   3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50
Sha256: 89244601b0a4bc150033e52dc56cf0fbe2846ebba7532c477146258a70783e05
                                        
                                            GET /common/images/icon_logo.jpg HTTP/1.1 
Host: www.pubgmobile.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.76.227
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 982437
last-modified: Mon, 30 Nov 2020 12:10:45 GMT
etag: "5fc4e145-efda5"
accept-ranges: bytes
unused62: 8096267
cache-control: max-age=300
expires: Sat, 26 Nov 2022 12:44:49 GMT
date: Sat, 26 Nov 2022 12:39:49 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 1024x1024, components 3\012- data
Size:   982437
Md5:    b83d8d3e9beecfac081f4e742d27661c
Sha1:   448330670bef8c2ee17baf6d2410ca974341cb88
Sha256: 5899c82b2f0563679a9c1ee79b5b28f2545864d95c7627c1a70e36a2f034497d
                                        
                                            GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 12:39:46 GMT
date: Sat, 26 Nov 2022 12:39:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css2?family=Teko&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pubgspin88.duckdns.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 12:39:46 GMT
date: Sat, 26 Nov 2022 12:39:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---