Overview

URLmcaffeeantivlrusonlineservice.ml/
IP 104.21.57.178 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-02 19:59:37 UTC
StatusLoading report..
IDS alerts0
Blocklist alert12
urlquery alerts
3
Scam / Fake AntiVirus
Tags None

Domain Summary (17)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.gstatic.com (2) 0 2016-07-26 09:37:06 UTC 2022-09-02 16:12:36 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-02 04:27:28 UTC 34.117.237.239
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-02 16:02:14 UTC 93.184.220.29
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-02 04:26:06 UTC 23.36.76.226
cdnjs.cloudflare.com (1) 235 2020-10-20 10:17:36 UTC 2022-09-02 04:39:12 UTC 104.17.25.14
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-02 04:36:08 UTC 52.39.57.61
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-02 13:31:11 UTC 142.250.74.174
translate-pa.googleapis.com (1) 1620 2021-11-04 06:37:42 UTC 2022-09-02 13:44:54 UTC 142.250.74.10
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-02 09:29:12 UTC 34.120.237.76
www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-09-02 04:27:16 UTC 142.250.74.72
translate.googleapis.com (1) 1005 2013-06-10 20:17:07 UTC 2022-09-02 15:28:57 UTC 142.250.74.74
mcaffeeantivlrusonlineservice.ml (33) 0 2022-04-02 13:06:55 UTC 2022-07-30 13:07:21 UTC 172.67.165.68 Unknown ranking
ocsp.pki.goog (10) 175 2017-06-14 07:23:31 UTC 2022-09-02 04:25:33 UTC 142.250.74.3
region1.google-analytics.com (1) 0 2022-03-17 11:26:33 UTC 2022-09-02 05:08:56 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
translate.google.com (1) 1156 2012-05-30 01:30:32 UTC 2022-09-02 04:59:14 UTC 142.250.74.46
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-02 18:07:59 UTC 143.204.55.35
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-02 04:47:06 UTC 143.204.55.25

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/ Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/e75b3003b83c4c77c5543c09747f7d14.static.js Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/1aad1fc323565eb03a9aeb41caab6029.static.js Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/386fb79720480e3cb9aceea5a6ef2efb.static.js Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/bdf182ea4297c0ae8eeb3784d2a6e54d.static.js Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/cedc7e22fcd66cb856cf2af71d53a011.statica0d (...) Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/aea6d5a799760b586d5035c0940a5678.static.js Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/8192a7d58aa76b274b5f8a609e67c040.static.js Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/2ca1a3d46dfea28e31d1992c47823de2.static.js Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/cd43b3f1c5d33504bb302fe8ed9a6b5c.static.js Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/fe29d9ab45b3c75b3ee75411fef792e5.static.svg Phishing
2022-09-02 2 mcaffeeantivlrusonlineservice.ml/71133a0d48b2c999bef214d9b4d6446b.static.mp3 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 104.21.57.178
Date UQ / IDS / BL URL IP
2023-01-27 01:55:40 +0000 0 - 0 - 2 2021.hertabetgiris.com/ 104.21.57.178
2022-09-02 19:59:37 +0000 3 - 0 - 12 mcaffeeantivlrusonlineservice.ml/ 104.21.57.178


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-21 08:32:06 +0000 0 - 0 - 2 gtomeconquista.com/7dsf567asf7asdf5/as78d6g45 (...) 104.21.46.108
2023-03-21 08:32:00 +0000 0 - 0 - 1 cdn.discordapp.com/attachments/93740723492789 (...) 162.159.135.233
2023-03-21 08:31:51 +0000 0 - 0 - 1 l3.pervl206.xyz/cdn/down/3cef96dcc9b8035d23f6 (...) 104.21.32.30
2023-03-21 08:31:48 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/10625003450681 (...) 162.159.130.233
2023-03-21 08:31:23 +0000 0 - 3 - 0 cdn.discordapp.com/attachments/93552837455263 (...) 162.159.129.233


Last 1 reports on domain: mcaffeeantivlrusonlineservice.ml
Date UQ / IDS / BL URL IP
2022-09-02 19:59:37 +0000 3 - 0 - 12 mcaffeeantivlrusonlineservice.ml/ 104.21.57.178


Last 4 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-24 22:49:43 +0000 20 - 0 - 2 efficientsecuritysoft.com/d314336b8cb5?clicki (...) 188.114.97.1
2022-12-21 14:01:07 +0000 19 - 0 - 0 ttg.yourhighpotencydefender.site/c/74e2237746 (...) 52.51.27.131
2022-10-22 08:30:46 +0000 3 - 0 - 2 yourwebprotections.com/76f71a05635e?click_id= (...) 104.21.8.81
2022-10-20 18:26:44 +0000 3 - 0 - 2 webprotective.com/24e7d1460fd0?click_id=push_ (...) 172.67.151.29

JavaScript

Executed Scripts (18)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (69)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 02 Sep 2022 19:13:51 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Nc-ya40eR8a1Aza6v1z3EZNNXeOI-pXq7ZJF_I2gSPkgsyBcKd8UBw==
Age: 2735


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19899
Expires: Sat, 03 Sep 2022 01:31:05 GMT
Date: Fri, 02 Sep 2022 19:59:26 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.25
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Sep 2022 01:15:17 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QEVek7tBNnl_COIzSVfpr47YS7YMA1njnZ6OwaRzQmwFmirvweZG9w==
age: 67449
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 02 Sep 2022 19:59:26 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yttxr0U1yJLlABW5lMSw7uiWNUy5Uq92qg3ckTg%2BJ9ZdHjDUr03By1sn5MCZ3ZlITMdRQmjT%2B%2FF4AOMuhksAtguX8u8GlgKTMTNJHFRFWwA5cWNbw9Bpn3InwAGJaNNGg1dL%2FmC2oZyvcrrss%2BRlz6nWjw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37b69beb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (816), with CRLF, LF line terminators
Size:   3872
Md5:    a57c1dbf29f8776bfa24ca85a539990d
Sha1:   1fd8e02b5252c720126235a112239338ce115992
Sha256: 27618a4678f9aa91ffd7763c9735133f805077a029bbcb59a268fa0997660ef2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ajax/libs/froala-editor/2.8.5/css/froala_style.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Fri, 02 Sep 2022 19:59:26 GMT
content-length: 1380
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e6a-1c28"
last-modified: Mon, 04 May 2020 16:10:18 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 7435630
expires: Wed, 23 Aug 2023 19:59:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=glMFlMOGw8qOuvINn%2BXR9tKYDi9HnZ5UJk%2BD%2Fe5lg5aT3NrtOWgh4opj6qYD5lUeznu35aM1dkOIQVEeeQ%2BNsVB6gtL7Z9ut3sLkl2Vy8W2SMsmXomf%2BbM8u%2FZXRyx%2BtqoVXaDKe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7448d37f3e68b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7048)
Size:   1380
Md5:    aa3b4ed7478b3a40f2409188a0c9fdab
Sha1:   1b4efc2536689dde7205f6eb81766b6ad54ada8f
Sha256: 80db261e2480e9541813923e022ea7d0dceece776b3aa606216545a1ba272d26
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-148713061-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Sep 2022 19:59:26 GMT
expires: Fri, 02 Sep 2022 19:59:26 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42896
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1615)
Size:   42896
Md5:    48f97c6b050e4024f7c40c99c86829c9
Sha1:   2dfd707b4679a0f516415067d4b365b9514a3c15
Sha256: 33ad3629eefba1f7080d5a6f9d8254de4385817b7efbc382799708aae67da53e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /fac23c099924821cd892889afa8e64aa.static6b42.css?1618996856 HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-36e4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UI8qkXAlAfjkMYNoS8YAJ86D8RrgxQsUxxxjlJqPmVYpQ66lneeXiSe0acXfL9b677PBeX7iFumPw30n5Ag9VOLq0fkXlmzF36KQuo6wEn765roAcF2qlvy1v5Pa%2Bk9urOh7g8dCNpInqEA1Pv6C5H5Lag%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1f51b527-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   2007
Md5:    15abfd2136db59053c43d0817a5685f6
Sha1:   c44f2e7ea2f9e9914c5a8c07809371ca0e57310c
Sha256: 7ebe1142f43cfe6e1413ab4fce1bad5734c0ff1b79e2aebfcd93058ce461bd5a
                                        
                                            GET /e75b3003b83c4c77c5543c09747f7d14.static.js HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-485"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Roy84ztM6K1QT9dvSlVxQZ90d0GA2UEiLlGJvvojq5Oyv2St%2FQ7lDJ4DvLF8hOb5Am8sP8eTg4PPFAgKCGQOW0cJuk9XvenwvaEef1r%2BVWJpBkD7vMeLNQ%2FaoXwJheeFPZl4Kzk4LHaUHdbIGKPi%2FXMhzg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1ac4b529-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   544
Md5:    70c6773f9266737772527accf03c1e84
Sha1:   04e2528f0317316f2cc6fc436580b06fa1b050c3
Sha256: 7109ffebc8a20b34d1d187eb5ce62cb23f61bc9e867ab8bcf99a59b913e44eb1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /1aad1fc323565eb03a9aeb41caab6029.static.js HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-896"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RZQg3YCuNWn4yWldoOq6LI4zk7bs8kbWC9WnbQJHB3X1r%2B6OHYsRG2l19Wro%2F%2Fgbhz%2FaXvUbhhKvY0kXOaEp3zr3wYyJYMlbvzzWp9nv476%2BXAt5Jyr777C03YYzQ%2Bv3FEqFWEM5IdxudYtab2lKAg1%2BNg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1fe6fab8-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   912
Md5:    9f47639e2e2f8cf12520056fdb427504
Sha1:   09b5c73229615bc6b5483dfc9795770b0256a39f
Sha256: 648d70b51cf48543e1f53afa4ab546633c380f7a5aafd8835144e3de8c27291f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /386fb79720480e3cb9aceea5a6ef2efb.static.js HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-366"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J23BdvWPlV3p1oKMpd6hOkl0aO0L9Ovm%2FG5Wq2YELkacXCJ2JCkPnE%2FYzzcnIUNgyEsvDK%2B4A1gtLwvZD9JxPx7GiHuRDjiAj%2B6%2FJYdnZu%2BuVvciXmqSYqRsvSLTQRBeJV2JYUAGmYcCqllBTdGO5NzETA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1833b511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   455
Md5:    8525af4f58ad5b5001b9c74aa746fc70
Sha1:   d7254d331edde32800c3428e9c563c2c560a17da
Sha256: ea4c9d43661daecd12c010fb702d26c691a6674e5ba67a660daedb8fe259ec61

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 02 Sep 2022 19:38:16 GMT
Expires: Fri, 02 Sep 2022 20:15:59 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: diolZuGeKjkOLC1z916N8py0ECniput_YPu533NU7e1hQ0aJ3DQpkw==
Age: 1270


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /bdf182ea4297c0ae8eeb3784d2a6e54d.static.js HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
Vary: Accept-Encoding
ETag: W/"62199584-1538f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g0X7AHEOCnkqF2ymxrlRHq8fMvJccugn5AWP6TGtQ%2B5L5bYhdFmvYfFlIrbUvi1jKruy0mkfOCqfOWXnXcsw4QA%2Frdklqq3j0ndR7bZ%2BdXnWXYGIb3TuSpVmrb3oCEUOZIrOcaRkyZjVJbW9lKZNtMYLqg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1f01b4ee-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30351
Md5:    e713186118b655f653a2076385d83dab
Sha1:   827db9205bbbfe60c03fdee56429e69ad24e8a95
Sha256: 9e4dd4a79aa648dd171a65f4b492955c47a0078c5d0b21b61a1343493a2be450

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /cedc7e22fcd66cb856cf2af71d53a011.statica0d8.js?cb=googleTranslateElementInit HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-13108"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=knsy5sc0q85nEngeR6nKm8JGOQrkASyIf19Cas%2BiOyVqigBY9z%2BiP6%2B36ZZTJOIsV6nqvV6M3SlaoiRSesidsm9T09Ck4rc40PcitKKBwpritTOyFureJBd9By7t4wcx%2F1UmNy6RFuG%2FvsTZg1%2BQHWVVnA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1ca90af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (574)
Size:   26678
Md5:    da550e2c89a51e840508967073bdd62e
Sha1:   5c96c3190b6858bb56328f3ba8e4d199fede223c
Sha256: 14c1d21fd5ab43613f69617db4dc67b7099b576fab24d9d3a3c0b292fb21afe5

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /aea6d5a799760b586d5035c0940a5678.static.js HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-2219"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fzh3XgfntmEpm4GBiL4XNi8xL3C0HXumMZ22hN3pM%2FDt7JwWuNg%2FadJf%2Bk7fIWRE93pgjXv86jvrJCD2W1VwPwkKgPPVEnNFJhNryU58P9aZqgVHl1N1dhnmvtL0eZc9Y2o9XOn7e1JT8yKqgj%2BmpA06lg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d38068feb527-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (8729), with no line terminators
Size:   2137
Md5:    6caaed348e6423d7410b755e775dff8c
Sha1:   b12aba0b3470e3e79ed0c488b004c1c0618f10b6
Sha256: 25127bce0facccf73600df7defacb07736f9c0d5156ce3be287cdf8dbaedaccb

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /8192a7d58aa76b274b5f8a609e67c040.static.js HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 02 Sep 2022 19:59:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-99c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y61l4GXKh1fQIttZonepT0fxu%2F7rJZhbGzCn03nNNQ52vs00tzk6Q4OMOwkcxA5kZuyZNMAyvhXdjiizLMocOrZDFHjTn%2F8mRE6a9NdUwd90cxqYpUKrVZC%2B3hYIF7RFOVWDlHIn2PKBsNuXiRUAltva6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3806ceab529-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   767
Md5:    a7111294626e93bd1823f706961783d0
Sha1:   cdc1d0417a0d79f4b9d71e29409dfea7b0035667
Sha256: 0c9c7538aaf85e14c5b93d880d798841606a43bb496dea4bcee64624aadb8c2f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /2ca1a3d46dfea28e31d1992c47823de2.static.js HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Length: 0
Connection: keep-alive
Last-Modified: Tue, 08 Mar 2022 23:17:22 GMT
ETag: "6227e402-0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4uZ3EUdEoh44h6TZrq5FO9msfqEoraSNNP4NUkpdyvoGv2oV%2Bl0HKhGFesA3tD2zXLmi7WnLSoqOkCZXrxi2AdRvFKZh2ahELlCA0tXwcVuRXjEE4y8LLJR3t4BdZ2jdppD3EpEXAqJCdm5XmqIEl8yaqw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d380793cfab8-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /b617d70fcfc137ccd72b657b785e74e2.static.css HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-4936"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KK%2BELUk7AgQqrfWuB00GFMTDVQWBsbVdQFdMhecPkUsnM3AaU0AAbLm08VOdtdtp4um%2F3fL%2BsLy5pVti5X5I3mZtVONnmyJOP2UFh2o020FBIUTmsrHHiqk2VIt39ICVgtj86lqAr2Uq996jauhaQ3BSCA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3807ab3b511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (18688)
Size:   3702
Md5:    b405c30c8a6f068289ead8abac572aca
Sha1:   8c6cc2c721b223916cc1507a975b9c6639614af1
Sha256: bdd361d6fddf57dbd8d92a5847c923c350ffbea15556ae6aeb6bf7b303746cd6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 19:09:49 GMT
expires: Fri, 02 Sep 2022 20:09:49 GMT
cache-control: public, max-age=3600
age: 2978
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18670)
Size:   3619
Md5:    897ba9a21d9625286674da769dacc2e2
Sha1:   84b4923ab7dee562395160824d53496314499b77
Sha256: 696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6231
Cache-Control: 'max-age=158059'
Date: Fri, 02 Sep 2022 19:59:27 GMT
Last-Modified: Fri, 02 Sep 2022 18:15:36 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /cd43b3f1c5d33504bb302fe8ed9a6b5c.static.js HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-3893c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bewsa5C5l7lziuPoEDLWpZlsf06EDDn7ypZo1RvdBViqq4cLG79HlirmRFBzUfRFa%2FycTHb16D6WuyrrwcMah7acXcytM8HrmMgvYpj62N39ZwjvwJ4Red5o%2BvVYZy72QgVtqyhnQuyWBWAz2yiXA33vLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3811a08b4ee-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1964)
Size:   79209
Md5:    f129963e76d6242087be143525822b94
Sha1:   89d6e5a2d5683a4927c36f85b8ab64dda17ea5f0
Sha256: baa744b6508084c17d3072737b60040013cf66278b0ee3986c989d37d8a15ec4

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pf2lVkKerPimVcuXrjepgg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.39.57.61
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Wq3fZQq8UpBIr7l0hu4aqtBUBPs=

                                        
                                            GET /bdd4d2f8a17aa2619367d3068f10fe46.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Length: 349
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-15d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JXXA6B%2BS682O0DhyBx6YTH%2BsAzkNkFJSVbXqC0SG7mNvXLRE%2BF%2FIzzIUkam52tI6IdqbphE5UW3pYJmcwys1xuBOXnQ5XScnBZi70%2Fib1jxkwiqxQAzszK4VkQzX8EVLpVX0Qfp2hLRLixIW4TWevltj%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d383b8b3b511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data
Size:   349
Md5:    7454c652e0733d92de6c920c2d646ae0
Sha1:   34a5bd8c7401f95e346895b0e5ccffbf0e9ad638
Sha256: 44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7

Alerts:
  urlquery:
    - Scam / Fake AntiVirus
                                        
                                            GET /b18fe7bf68a8125b1846d2ab0a4d0240.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Length: 293
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-125"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I%2BMgUflXSrV%2FcH21QlZTjwxoPja3CE%2F%2B%2F3dnkHHLFN50l2f1PJ25UeTVjIFmiLNZ8%2BQqy9M4kASJkmWDTk0jPOXQo0FTaCjmVK4B1m0I%2FKqVoI%2FJ9zwkT6Cjlcsn2Nq4%2F%2BbKcptHS%2FuZH7y9Bbkz4qrXow%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d383bbb90af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Size:   293
Md5:    9eb68d2ce05c151bda542a7a6356e22c
Sha1:   baeeefe4a7ac657c10a5f081841015de1bcf90dd
Sha256: 2d2b7040bc32b397c3c60d800de9aa7d86404f1874862eba61bdaa21f1523eb7
                                        
                                            GET /707a5f2b6dafe9ebb72de055881df8fd.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Length: 364
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
ETag: "62199584-16c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oCeHhxHR%2Fq4xH1Ki6ayHyEIiztlMqxFH6Fvqk8ktRnZvWzdSaABF9VUbr0VpKE3TFTSQ6scD60WrXUyzslQrFtx%2BRmCEBzSLMQAp5c5UX6opGrVZcXXcIorQpDSe7HP8VFzY8Qb11YN4QS18n2hm7kzTXw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d383bb7efab8-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Size:   364
Md5:    e144c3378090087c8ce129a30cb6cb4e
Sha1:   59da5466551de941d0215e45c54aa2ceaf436be1
Sha256: b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a

Alerts:
  urlquery:
    - Scam / Fake AntiVirus
                                        
                                            GET /c195505bd51a228cc230b25a460fa7a1.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-34e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cq99iTdLkUzwLlOQHX%2Fe2bcg3wgk7P5F7rJNSdMRB7goV6f%2BWOuJa086Nk5OD8kGbkLGUondYJ1JVfSc%2FqryZSA1YPPss3RplkMJXZSMja4n%2FJKd8uK1GAlVMtFoGmbWG1XwyngbZBosem4s2qKaoEp4fA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d383ba42b529-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size:   869
Md5:    34940f122c9c0c8a5a1245c7a94611d8
Sha1:   f48e0b239dba45f855a21cd3c31e7bfa164ee510
Sha256: 63fcd75a9dc74d07adcc8b9551e241741b9a754f55a336f46f32457c906a5962
                                        
                                            GET /a3972241ebbd442bc74095fba3030cb4.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-6ad"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qLt5lhIsYN%2BxTo4q3oU5U6bzwxS9fLjOFIURDOEBgESyUPA1vlBD8NpAWHH4sp%2B0pY%2B7qQeOjr6taksLtP0qxXu7xe1mzH6x6E%2BzH8%2FhevZJPCrZN7L5IDJSuFKWDkGJE51VkIjr8DaUkzOpzXh3ZS88Sw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d383be6db4ee-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 40 x 45, 8-bit/color RGBA, non-interlaced\012- data
Size:   1423
Md5:    c2a1ae11666837c1c279116125a2735f
Sha1:   46ad968bf4a0ae84eb939ab65bc8b14e72cb9953
Sha256: 8e84a13f29ab4673710c914524d6d1d85e3f1dcb914c367f4cda8365305e1661
                                        
                                            GET /1df9d439cd075b31ec7d832740ada7de.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
Vary: Accept-Encoding
ETag: W/"62199584-113c1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dx8pkMk5SOgILVcLrpDgTqTqCMYGroCXz%2FuTZb5%2BQgqmCIk7fEiB0fyACFMtEwWaXtZ4GcfjgobGuScoRQV8X2geswhn8irndjUnH3h8gSdv3GB2k%2BPGquhrvDpPsYct4hlgL0YMCa65l0f%2BX%2B3q1gauuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d383be29b527-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 543 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size:   70174
Md5:    b88d4a25ecff74c93c5ac73856d942a5
Sha1:   971e24326ccd352859b671572e767597d9ecd7c0
Sha256: d179315717beead9a74ec5fa3e9dc07b94c0bd0df4f67466f1b62be8ba404275
                                        
                                            GET /fe29d9ab45b3c75b3ee75411fef792e5.static.svg HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-510"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PQyEvV6CfVnsx6WSREFK5z1fT9V8Ad%2FpSeOeJewi1piKY%2FzkCwHW8vNmw8C7ncn8jTSQ%2Fb%2BPA8qpHvlK%2BI4mSrPwVcs4yXRuUY3BUC94SwGVyw42uFeHdSjcbNu6yeKruHBw85XIWpVKSnmbAV76EG0cAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3846a08b511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1296), with no line terminators
Size:   617
Md5:    65e19603998241ae29b3839ce0a0834a
Sha1:   08855fd391f59192b1f9a0bd33064af054517f22
Sha256: 56b7e03e46278c5a13fed62873114054f7e9db314cf491760fdb310d4ae6a9c8

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /bd7271795a71d5f771e0159db4c6a7c9.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Length: 128
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
ETag: "62199584-80"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EegpXLnLOFHQq%2F6xhU4R%2BsMp94DbstHfXx4UqqeuUcisuKocetAyIAoNrHqoy54C7K4GUTsPilm3FHj7aY5kG3Sv0F3NVVzjo1zP7f8JM29raSsOsJNv7CQHLIDXybNh%2BAqPzLuTLd319h7qI8lTULM91Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3851871b4ee-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Size:   128
Md5:    0bb86caf792dd7d24731c18cd37bb68e
Sha1:   dda1e433a0eaf785b2aa2c6214d5e48cb82a3a25
Sha256: 2ac27821ba64d645f36e2ad197492d30c11b10a032cc474554679555f4604622
                                        
                                            GET /156e52dd5e06f1316281c245b433f0df.static.gif HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Length: 511
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
ETag: "62199584-1ff"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xmLxfk%2FJcwiTr6JUR6yxFPUP1OpN2qRTugBbLKo5uTiCyPc4T8myLPqg%2FSAYhsl29wjcYJO70OCNcNU8QQEnRIeae78e3voAZruJImw%2FL8ku%2FpFGhjzFMOKAcEDeavtC2%2FPYv%2Fdp5E4HxhrhzbtuVvObbA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d385b91cb527-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 80 x 65\012- data
Size:   511
Md5:    af3aca2036675c5979fb535c5d190f15
Sha1:   70c4f17ef1a2afe0477c84c5d209fbe31760b657
Sha256: aa88fa9731a6021cd8c0f80ef76476fd055a9cf0bff3ad9fbefbedbd255e26fa
                                        
                                            GET /4e2657974ab086d5423bc5e8de18d474.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-126a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CSFGVQQ8ybTkX482smGeEoF9AwfNTB28zNsVEw5YXD16%2BLIvokTQ%2ByBbogEQ6FN%2Bx7nilfbsTUZ1CsOl%2FVN4cyM3Njp6EZMs%2BcKnrK%2Bv%2BphX1ZdcF9oY6SJRTaCnHCRJU4TMutJGwK6NUESUDUhMu%2FyrAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3851cb2b529-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 230 x 45, 8-bit/color RGBA, non-interlaced\012- data
Size:   4473
Md5:    e7c06a45a08cfbb96706d7863b5110dd
Sha1:   05c004c90ad8b6504d2fed412616f50603defd33
Sha256: c620734bdf873b3ad4df6dcf763e906726b6e1d4e0c68acb574c16d0ff9140fe
                                        
                                            GET /a754aca2dc777ce3c480603091242149.static.gif HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-3b5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dv4VFroBsaBVjCToa3zPc62wGJ5MVimPlqnZKay4A5%2F7BDX9MCHx6mriizu%2FBfYFZVy%2Fl5h4lXERb6KF4AOirQrfgDZEM5xZL5gfKOq%2BQVjiiEGAj5Ml7wVIQhn2LJkW8aVsIQ8aK7AQt7AlcRjorsQ2zQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d385c998b4ee-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 78 x 68\012- data
Size:   972
Md5:    bafc3a320b932ca1e8bd78be69eb30c1
Sha1:   cf64672e8c8be025221c61d2c0c50d0cc6c80f84
Sha256: c8e8ba4d57b323b8e00a136a867e88477f40ec753733b028388c7fb975130b2a
                                        
                                            GET /71133a0d48b2c999bef214d9b4d6446b.static.mp3 HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Cookie: GoogleAccountsLocale_session=en; googtrans=/en/en

search
                                         172.67.165.68
HTTP/1.1 206 Partial Content
Content-Type: audio/mpeg
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Length: 15932
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-3e3c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Content-Range: bytes 0-15931/15932
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SQunUEB7ciEJiJ9xuAG2YmC3gbb68fdstOv2hGTtEgCq585CqkzONEsqCETqhpP9cWnxJnvdnR%2BKyaeC7Z75sYi8RrOUj%2Bg9qC%2Bfqt1DsMcuhMeL1ikeO9pMTQY2Un%2B4opbgbCMOIHo7ScVV0nlC2AbweA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3850dd50af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Size:   15932
Md5:    d6040c63cafad92b0c2933569de365c0
Sha1:   6e0782bf850c89a1211cc1ec2ab10373520c834c
Sha256: e8ef8e78f08ac34193423319b86566a442440ec663d09f26911e9fa10c4c9db7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /960801b53f07bd0559315e465aeb0db9.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-882"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6IzIzpFFKijxWyFung4ZqY2is35hH3iLks8GllOptbCOA8od10tPDQn8j980MYcUDha218ZNyIbvRi9erkTaMl7fOB1vZJUMiMqJOawYVmWIVULea9QlQdVYTOiesLv3Qwy5S1xhgseU8MNzmKL4u82AgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3866a40b527-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 73 x 84, 8-bit/color RGBA, non-interlaced\012- data
Size:   1901
Md5:    cab7be7fde05f76f7d9fe3fd5afd311c
Sha1:   3a778fd99e420b80ef06ad3b411d7bcb28e95e8d
Sha256: 7bff0750b33c24138d2597f185ea48bb068dfe07e7ada349617d4065cbe67917
                                        
                                            GET /82e46faa625ee16f4fee551e9c293ba7.static.gif HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
Vary: Accept-Encoding
ETag: W/"62199584-60b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Fe06U%2FHUAPVcMzgGd4qXMWrsFfsMgajJolxSZS36EQIQy5xKT0pMzVFRrxws6MpS5Y2d7LXqRIpRLxa8kIzSAecQPvg2vSL6xKGUPL8vHrq8IqGGThh4YR5w3YetFENf3eS87NnDsTsiVDDRHeAZi6kgA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d385cc02b511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 65 x 80\012- data
Size:   1575
Md5:    7a9812a5eb71bda85c88fd8fca5f8be5
Sha1:   503f5347874315f15e7e9eaa14e625f4a465023e
Sha256: 6dfb8b419a1761075ed2fecd4f80d16b13cc39fe39c4e14fa00baefc66bfc6b5
                                        
                                            GET /040e3f108b50625616c25c3182218e2d.static.gif HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Length: 69
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-45"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8gnwaGQGuu6gfUCz5mO1UxopgHI416RvaQvdJaW38TEX4dZJ98nSm%2BL9MmUTQ%2FyY2pNdCv4Pdyy4ofnNkikIvhqiEGiOtWi%2BZPCahy5ZIpJOalY2lK9%2FvBnmxjtFgccVDAChE0G%2BRVVxrZrKXKnQcp1Czw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3868abeb4ee-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16\012- data
Size:   69
Md5:    3ae573d079dcd1d2da4086f2c0c72c45
Sha1:   e7c9dabec81379373476ed23168dcecb9b8c56aa
Sha256: 9cce08ab28e94790cf78c87e37f8690acbc6c535e4b43ae7b38506b94538e107
                                        
                                            GET /a7eb96616218cf2e56ce5bf33d1f1779.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
Vary: Accept-Encoding
ETag: W/"62199584-1c56"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fruHjt5glGodkE5yuUU0hIyV0XN04STsovlqqgdqtgtWx0qZ4kTEFw7FjUj3KcD9aIQCeK6MKvI9sOdyEu5V2t60Np7NNlOXRiVcbWuFGPravW4UOoxlz3VlNhrITzeCRSBcqVKZB49%2BurkMplBzAuPdHw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3866f5cb529-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 230 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size:   7042
Md5:    33db69dcbfe28359b4ea4c2210cf3773
Sha1:   2f51e93d0ed63f30d379e5387288e62a8737f576
Sha256: 3a4c80bd3ca60459c8c8a52452a9bd024f17a10714494805726dbe87512f5b69
                                        
                                            GET /www.gstatic.com/images/branding/product/2x/translate_24dp.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/b617d70fcfc137ccd72b657b785e74e2.static.css
Cookie: GoogleAccountsLocale_session=en; googtrans=/en/en

search
                                         172.67.165.68
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nHJTUnzfC78bZgoc3hEDgQnQWU1wNMEzkyNzP5pdCcbIVs%2FIraLecd2LVvemXD5zznJpH1TBYGI6ttlhRGOr4ZKhj692FE40yP8PGFHv8cvkNz%2BBKAw1AE21Z%2BrFv378yksYWgbXq4ix%2BQfl5mxG%2Fv9Wtw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3872e79b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   173
Md5:    3674c9f9d4cb3aeda8a1dabcf83e21ce
Sha1:   e464bbf96e99f833d457531275b5f4e94d5f633d
Sha256: d0defd1c3d57c0cc21ccf2602e742ba72684282cebaae43539b5b6c6d97ac5b7
                                        
                                            GET /f38f95a9f151e2d0ebe5979c1632b689.static.gif HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Length: 211
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-d3"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3P1KsE%2BafAhvQYV61Aj79TJ8fRKtlBeGfqk9a1DED%2F%2FynA%2BRRrE6uw%2FrDQBOzWpQd327OrZlWHWXvLySay%2FQ35BfSz7SV1wQG1EyK2uOoqa%2BVMwJJT1t0ieG6L2rpz1pVrOeRf9Zj9ZS25yUM6lC1hXQSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3873ba2b4ee-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 29 x 29\012- data
Size:   211
Md5:    45b0c8a1e52d91e8cf84eaf75ebca9a9
Sha1:   0e358b8571f9062dedfacd0c31d54179270153cd
Sha256: 4e635bdab7a300d0ccb5aac26b4610a07ee1b33643578c1a4308e677d7eb595d
                                        
                                            GET /5dfb2a1bc56220ad77be3196362abc05.static.gif HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 02 Sep 2022 19:59:28 GMT
Content-Length: 377
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-179"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bovRQnu1canabhcPoPpIcBv%2FqYbKlw5pjU9Hbpkbk%2F1q8HqadyXdOQWy33nJ2niQ%2BsgcZjMTBcfHFLVYw6tdDXTWPyK0wBBpzgK88Zd%2FDAcpPrFqzUcLbRv7dd8M0xXh%2Flb%2F3i0YmeXiAds9Uw2a9y5TkA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d386f8650af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16\012- data
Size:   377
Md5:    c10bdec858cb0cf9e6cc5865d5925746
Sha1:   697c095ed5509e5a5af0c5ebf2380662aeffc531
Sha256: b65b47a79e32335d9ca35ff59c6975d2b5808f84da0db88d11ce777b33e72ad9
                                        
                                            GET /0ceda21f97803d8846e2d135396be2d2.static.gif HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 02 Sep 2022 19:59:28 GMT
Content-Length: 234
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-ea"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AFemBiisiXl2gtS%2FqxztkJHMsAm%2FnW0qE7TTEg0O8VzahpII%2B3Bvt0UqjGPV2tq1T84GV2v94Wt%2BanAB8o3ad8GYuy12Cp4ra%2BCZ8GWy8de%2BMQpz4lLAU2xo5BLvTdnPILpnC0hvjtaHSQcctTf%2FM%2B0RYw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3872bb2b527-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16\012- data
Size:   234
Md5:    9ce99ec458daf212f9812a90f3fadd13
Sha1:   9e3041bc91b79a17b52e0fbb6c2d0e2f905d98a1
Sha256: b0d335401c9fd5fac9991ec92edaf7865ff3a491ebe390120936c69796c3b753
                                        
                                            GET /e9f7342a364ad130cc862be53588ccb5.static.png HTTP/1.1 
Host: mcaffeeantivlrusonlineservice.ml
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/

search
                                         172.67.165.68
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 02 Sep 2022 19:59:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-49f73"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rjvno7pUaQQi3DGe5pJkxuHeLU3hjePMzJJGMDf4fIDnvPb3cXNvVWBbl4Kv4ztzzwQcBuu1HfD572R8DZZbljLF%2FJwI64h2l1DFOoA1hJNgk1m8FwiW6%2FCOwgnCT%2FxfNZ83J9nkei%2Fku5PYT9glJBDiew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3851c80fab8-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 1440 x 700, 8-bit gray+alpha, non-interlaced\012- data
Size:   301270
Md5:    9f43c433f3feaf8baf80a5999d1f6fdf
Sha1:   28eef49c63bab88c71310e89d1beec5d585e62da
Sha256: c7be07bbfdbb50620ccd3434bcd67b560c93b4db176a95b083106d03b4cf8bfa
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Fri, 02 Sep 2022 18:41:12 GMT
expires: Fri, 02 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 4696
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20006
Md5:    56f5d7f608e25d64207135f045f988cb
Sha1:   901eb59372ae330ae85e1384da93479b21ae1082
Sha256: 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /g/collect?v=2&tid=G-YD3VLMVLVF&gtm=2oe8v0&_p=301585974&cid=1198340494.1662148766&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662148766&sct=1&seg=0&dl=http%3A%2F%2Fmcaffeeantivlrusonlineservice.ml%2F&dt=McAfee%C2%AE%20Total%20Protection&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mcaffeeantivlrusonlineservice.ml
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: http://mcaffeeantivlrusonlineservice.ml
date: Fri, 02 Sep 2022 19:59:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Sep 2022 19:59:28 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+575; expires=Sun, 01-Sep-2024 19:59:28 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   26696
Md5:    7f5d11667b106594011b2a0d3be039af
Sha1:   a106a42790ac24e893b5c6691db6fafa64b2cdfd
Sha256: 2ec8c5bb620c253c87c5319549e8e14280eae1ef369ec4a1804bb060760915bc
                                        
                                            GET /images/branding/product/1x/translate_24dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 07:54:53 GMT
expires: Sat, 02 Sep 2023 07:54:53 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
age: 43475
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size:   846
Md5:    e9cd262114358f26b7608b56905185dc
Sha1:   6dbde0a96deaab2b529723ce26c62043cf9180ab
Sha256: 5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
                                        
                                            GET /images/branding/product/2x/translate_24dp.png HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 18:54:28 GMT
expires: Sat, 02 Sep 2023 18:54:28 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
age: 3900
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size:   1842
Md5:    c69c796362406f9e11c7f4bf5bb628da
Sha1:   e489ce95ab56208090868882113d7416abf46775
Sha256: 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1 
Host: translate-pa.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 02 Sep 2022 19:59:28 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
expires: Fri, 02 Sep 2022 19:59:28 GMT
set-cookie: NID=511=ptfro6AHfAvgNjycKOLswhoIJGLshG2gTjgBdOOnHjOrkD6YKgV9jyRFmxjmS3G-3DWujP7wmGWh-N0wlIXr7UuWFYq8uU5GsVNFsI35VaKeHaQiCv4a4NbUGXfzkDdbqwKFqVKwfc9uOZpwlnet1Fhd0lY-n61s2d8D6MeFIoQ; expires=Sat, 04-Mar-2023 19:59:28 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly CONSENT=PENDING+217; expires=Sun, 01-Sep-2024 19:59:28 GMT; path=/; domain=.googleapis.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   1392
Md5:    3ad547ec47ef63d87eff80e53d6dd861
Sha1:   20cd334266b4bc9b47966d5487f0a2b2d41db765
Sha256: c9b9dc1b30d38db2a72068eb7d8a5d1af32006b64263cab5e89f500f62856ea3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14616
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 19:59:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14616
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 19:59:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14616
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 19:59:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14616
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 19:59:28 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 16818
x-amzn-requestid: fa921878-2054-453b-b313-681cdd9c9068
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj-Z_HUNIAMFltg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b110c-053ce81943fea70c2de7daa0;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 06:54:04 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CDyJUMKmUlrT3LgfeiZhQN1XEV2vKTIZtmV4QZYXaoM4PWbYo8IyJA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 14:46:29 GMT
age: 18779
etag: "9fef9b071daea6793cbbdfe391254ac4326b1aa2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   16818
Md5:    12756903aaa74164feb5f8525398ca36
Sha1:   9fef9b071daea6793cbbdfe391254ac4326b1aa2
Sha256: 6d474a6d96aebfed43a4f6812f18a1be8d100c590f75eb0fbf4ec7277dd0c442
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5889
x-amzn-requestid: 42237574-f86e-4ece-b986-6d0c5910fcc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzMVgHajoAMFmXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112756-48ff9d98464cf3c9680d97b4;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:42:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _7BBSlQQucoO5poncTYuX4fcmS4WFg3UcVFXalckGCCNFKJ0h5UpsQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:06:51 GMT
etag: "85239ef4f2fee8d3345e599bc942cab63ff3aaf6"
age: 78757
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5889
Md5:    24d848f7606889b048b6334e70d8a5e0
Sha1:   85239ef4f2fee8d3345e599bc942cab63ff3aaf6
Sha256: da6cf33b440b51f72a70f309d62fd581aed246b6a78b8f329fa3899db15ff86d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9252
x-amzn-requestid: 7feebba8-f6b9-4b79-9726-5a7534da277e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyVG5DoAMF_Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112675-3123158f3dcfbd476537ca3c;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BOa5zGQyJS9q9bHmtKzlNtyS9ToGPZJkDFo2uY2lzz8Lnd3cZLQEaA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:01:10 GMT
age: 79098
etag: "cbb4546228115cccc122b16209e70171bef5c1f2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9252
Md5:    5ba50b2fd1814c5ffc95aef40c69ce8c
Sha1:   cbb4546228115cccc122b16209e70171bef5c1f2
Sha256: de822c8549508b28a07d29b203ae3ef356470df906cba727fc765f1bd14bb866
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6196
x-amzn-requestid: a7d6ce70-06d7-498c-8024-80185a3fc3e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyLFmVIAMFkcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112674-3fad622927177e9236d7c50a;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: wLezqM4_yKqtOR7D43beBqm8TAD5y8eQ7xHOxjDJdHchCpyusuzMuQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:55:46 GMT
etag: "ec65cb47d86488f734c945a210d5f636a40fea2c"
age: 79422
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6196
Md5:    5e05660322f0368dd2bf8067d7e4554d
Sha1:   ec65cb47d86488f734c945a210d5f636a40fea2c
Sha256: 98875230ec45766102191bdc4180742fa3b8f3ad5ad1a128d12437105f86247e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5079
x-amzn-requestid: 3b19c77a-2e9b-499f-890b-36fc4ee72ba7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XslOVEtZIAMFv1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630e825b-01b7b71617b59f7414a0e5e5;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 21:34:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: et3ZsWRVoBNMpArUk9CohTyMpS5F0eKiR6cZJRfwAEiiFJUaeay58g==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:48:05 GMT
age: 79883
etag: "288b82ad8f924eb9570ae1c55da84d041f862366"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5079
Md5:    5c3b7580a37e6eb7e5bd18491f1d4dd6
Sha1:   288b82ad8f924eb9570ae1c55da84d041f862366
Sha256: 046d1ef76448c53446068ef5f8315b7299484996cdebfd9d1e749b4ded9c7d3c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10435
x-amzn-requestid: 813ec4ca-243d-46cb-a6a6-8ec58e5dd9f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLjdHwnIAMFhzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112615-4733cfb83cf0e8734abc5716;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: n6DJbsUGTdXT42cNLTDq6Uz28H2SDhwq6drdKP4axAHsBz471X7r_g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:37:26 GMT
age: 80522
etag: "4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10435
Md5:    955f2a35bd6b3802670e7fa8a7cda833
Sha1:   4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c
Sha256: 2fb517039f0704d2f6fe2fa78eae47c71c645add1c2276f8726248184ae45760