firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 02 Sep 2022 19:13:51 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Nc-ya40eR8a1Aza6v1z3EZNNXeOI-pXq7ZJF_I2gSPkgsyBcKd8UBw==
Age: 2735
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19899
Expires: Sat, 03 Sep 2022 01:31:05 GMT
Date: Fri, 02 Sep 2022 19:59:26 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Sep 2022 01:15:17 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QEVek7tBNnl_COIzSVfpr47YS7YMA1njnZ6OwaRzQmwFmirvweZG9w==
age: 67449
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 19:59:26 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mcaffeeantivlrusonlineservice.ml/
200 OK 3.9 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (816), with CRLF, LF line terminators
Hash a57c1dbf29f8776bfa24ca85a539990d
1fd8e02b5252c720126235a112239338ce115992
27618a4678f9aa91ffd7763c9735133f805077a029bbcb59a268fa0997660ef2
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yttxr0U1yJLlABW5lMSw7uiWNUy5Uq92qg3ckTg%2BJ9ZdHjDUr03By1sn5MCZ3ZlITMdRQmjT%2B%2FF4AOMuhksAtguX8u8GlgKTMTNJHFRFWwA5cWNbw9Bpn3InwAGJaNNGg1dL%2FmC2oZyvcrrss%2BRlz6nWjw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37b69beb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdnjs.cloudflare.com/ajax/libs/froala-editor/2.8.5/css/froala_style.min.css
200 OK 1.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/froala-editor/2.8.5/css/froala_style.min.css
IP
File type ASCII text, with very long lines (7048)
Hash aa3b4ed7478b3a40f2409188a0c9fdab
1b4efc2536689dde7205f6eb81766b6ad54ada8f
80db261e2480e9541813923e022ea7d0dceece776b3aa606216545a1ba272d26
GET /ajax/libs/froala-editor/2.8.5/css/froala_style.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 19:59:26 GMT
content-type: text/css; charset=utf-8
content-length: 1380
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e6a-1c28"
last-modified: Mon, 04 May 2020 16:10:18 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 7435630
expires: Wed, 23 Aug 2023 19:59:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=glMFlMOGw8qOuvINn%2BXR9tKYDi9HnZ5UJk%2BD%2Fe5lg5aT3NrtOWgh4opj6qYD5lUeznu35aM1dkOIQVEeeQ%2BNsVB6gtL7Z9ut3sLkl2Vy8W2SMsmXomf%2BbM8u%2FZXRyx%2BtqoVXaDKe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7448d37f3e68b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 7040539fecb815b0cc84c15e3e2e99df
761de2d6da86cb1df6bb1fdd85ad71f75a825bb4
b1edf3547f6db4798d46a116924942acc48ad56da1fd61f9951acf93053a6578
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-148713061-1
200 OK 43 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-148713061-1
IP
File type ASCII text, with very long lines (1615)
Hash 48f97c6b050e4024f7c40c99c86829c9
2dfd707b4679a0f516415067d4b365b9514a3c15
33ad3629eefba1f7080d5a6f9d8254de4385817b7efbc382799708aae67da53e
GET /gtag/js?id=UA-148713061-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Sep 2022 19:59:26 GMT
expires: Fri, 02 Sep 2022 19:59:26 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42896
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b69e4ee589f24deef7c8a3004daae9d1
e96ab184083a5084569b86b8846a6fa0c3b6af9a
7560417294eeb0f5c955d68bcc9b9eae40d69d1ff4b717a115ca1c614b1f4a17
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mcaffeeantivlrusonlineservice.ml/fac23c099924821cd892889afa8e64aa.static6b42.css?1618996856
200 OK 2.0 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/fac23c099924821cd892889afa8e64aa.static6b42.css?1618996856
IP
Hash 15abfd2136db59053c43d0817a5685f6
c44f2e7ea2f9e9914c5a8c07809371ca0e57310c
7ebe1142f43cfe6e1413ab4fce1bad5734c0ff1b79e2aebfcd93058ce461bd5a
GET /fac23c099924821cd892889afa8e64aa.static6b42.css?1618996856 HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:26 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-36e4"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UI8qkXAlAfjkMYNoS8YAJ86D8RrgxQsUxxxjlJqPmVYpQ66lneeXiSe0acXfL9b677PBeX7iFumPw30n5Ag9VOLq0fkXlmzF36KQuo6wEn765roAcF2qlvy1v5Pa%2Bk9urOh7g8dCNpInqEA1Pv6C5H5Lag%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1f51b527-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/e75b3003b83c4c77c5543c09747f7d14.static.js
200 OK 544 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/e75b3003b83c4c77c5543c09747f7d14.static.js
IP
Hash 70c6773f9266737772527accf03c1e84
04e2528f0317316f2cc6fc436580b06fa1b050c3
7109ffebc8a20b34d1d187eb5ce62cb23f61bc9e867ab8bcf99a59b913e44eb1
Analyzer Verdict Alert fortinet Phishing
GET /e75b3003b83c4c77c5543c09747f7d14.static.js HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-485"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Roy84ztM6K1QT9dvSlVxQZ90d0GA2UEiLlGJvvojq5Oyv2St%2FQ7lDJ4DvLF8hOb5Am8sP8eTg4PPFAgKCGQOW0cJuk9XvenwvaEef1r%2BVWJpBkD7vMeLNQ%2FaoXwJheeFPZl4Kzk4LHaUHdbIGKPi%2FXMhzg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1ac4b529-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/1aad1fc323565eb03a9aeb41caab6029.static.js
200 OK 912 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/1aad1fc323565eb03a9aeb41caab6029.static.js
IP
Hash 9f47639e2e2f8cf12520056fdb427504
09b5c73229615bc6b5483dfc9795770b0256a39f
648d70b51cf48543e1f53afa4ab546633c380f7a5aafd8835144e3de8c27291f
Analyzer Verdict Alert fortinet Phishing
GET /1aad1fc323565eb03a9aeb41caab6029.static.js HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-896"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RZQg3YCuNWn4yWldoOq6LI4zk7bs8kbWC9WnbQJHB3X1r%2B6OHYsRG2l19Wro%2F%2Fgbhz%2FaXvUbhhKvY0kXOaEp3zr3wYyJYMlbvzzWp9nv476%2BXAt5Jyr777C03YYzQ%2Bv3FEqFWEM5IdxudYtab2lKAg1%2BNg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1fe6fab8-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/386fb79720480e3cb9aceea5a6ef2efb.static.js
200 OK 455 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/386fb79720480e3cb9aceea5a6ef2efb.static.js
IP
Hash 8525af4f58ad5b5001b9c74aa746fc70
d7254d331edde32800c3428e9c563c2c560a17da
ea4c9d43661daecd12c010fb702d26c691a6674e5ba67a660daedb8fe259ec61
Analyzer Verdict Alert fortinet Phishing
GET /386fb79720480e3cb9aceea5a6ef2efb.static.js HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-366"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J23BdvWPlV3p1oKMpd6hOkl0aO0L9Ovm%2FG5Wq2YELkacXCJ2JCkPnE%2FYzzcnIUNgyEsvDK%2B4A1gtLwvZD9JxPx7GiHuRDjiAj%2B6%2FJYdnZu%2BuVvciXmqSYqRsvSLTQRBeJV2JYUAGmYcCqllBTdGO5NzETA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1833b511-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 02 Sep 2022 19:38:16 GMT
Expires: Fri, 02 Sep 2022 20:15:59 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: diolZuGeKjkOLC1z916N8py0ECniput_YPu533NU7e1hQ0aJ3DQpkw==
Age: 1270
mcaffeeantivlrusonlineservice.ml/bdf182ea4297c0ae8eeb3784d2a6e54d.static.js
200 OK 30 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/bdf182ea4297c0ae8eeb3784d2a6e54d.static.js
IP
File type ASCII text, with very long lines (65451)
Hash e713186118b655f653a2076385d83dab
827db9205bbbfe60c03fdee56429e69ad24e8a95
9e4dd4a79aa648dd171a65f4b492955c47a0078c5d0b21b61a1343493a2be450
Analyzer Verdict Alert fortinet Phishing
GET /bdf182ea4297c0ae8eeb3784d2a6e54d.static.js HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
Vary: Accept-Encoding
ETag: W/"62199584-1538f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g0X7AHEOCnkqF2ymxrlRHq8fMvJccugn5AWP6TGtQ%2B5L5bYhdFmvYfFlIrbUvi1jKruy0mkfOCqfOWXnXcsw4QA%2Frdklqq3j0ndR7bZ%2BdXnWXYGIb3TuSpVmrb3oCEUOZIrOcaRkyZjVJbW9lKZNtMYLqg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1f01b4ee-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/cedc7e22fcd66cb856cf2af71d53a011.statica0d8.js?cb=googleTranslateElementInit
200 OK 27 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/cedc7e22fcd66cb856cf2af71d53a011.statica0d8.js?cb=googleTranslateElementInit
IP
File type ASCII text, with very long lines (574)
Hash da550e2c89a51e840508967073bdd62e
5c96c3190b6858bb56328f3ba8e4d199fede223c
14c1d21fd5ab43613f69617db4dc67b7099b576fab24d9d3a3c0b292fb21afe5
Analyzer Verdict Alert fortinet Phishing
GET /cedc7e22fcd66cb856cf2af71d53a011.statica0d8.js?cb=googleTranslateElementInit HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-13108"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=knsy5sc0q85nEngeR6nKm8JGOQrkASyIf19Cas%2BiOyVqigBY9z%2BiP6%2B36ZZTJOIsV6nqvV6M3SlaoiRSesidsm9T09Ck4rc40PcitKKBwpritTOyFureJBd9By7t4wcx%2F1UmNy6RFuG%2FvsTZg1%2BQHWVVnA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d37f1ca90af6-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/aea6d5a799760b586d5035c0940a5678.static.js
200 OK 2.1 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/aea6d5a799760b586d5035c0940a5678.static.js
IP
File type ASCII text, with very long lines (8729), with no line terminators
Hash 6caaed348e6423d7410b755e775dff8c
b12aba0b3470e3e79ed0c488b004c1c0618f10b6
25127bce0facccf73600df7defacb07736f9c0d5156ce3be287cdf8dbaedaccb
Analyzer Verdict Alert fortinet Phishing
GET /aea6d5a799760b586d5035c0940a5678.static.js HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-2219"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fzh3XgfntmEpm4GBiL4XNi8xL3C0HXumMZ22hN3pM%2FDt7JwWuNg%2FadJf%2Bk7fIWRE93pgjXv86jvrJCD2W1VwPwkKgPPVEnNFJhNryU58P9aZqgVHl1N1dhnmvtL0eZc9Y2o9XOn7e1JT8yKqgj%2BmpA06lg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d38068feb527-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/8192a7d58aa76b274b5f8a609e67c040.static.js
200 OK 767 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/8192a7d58aa76b274b5f8a609e67c040.static.js
IP
Hash a7111294626e93bd1823f706961783d0
cdc1d0417a0d79f4b9d71e29409dfea7b0035667
0c9c7538aaf85e14c5b93d880d798841606a43bb496dea4bcee64624aadb8c2f
Analyzer Verdict Alert fortinet Phishing
GET /8192a7d58aa76b274b5f8a609e67c040.static.js HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-99c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y61l4GXKh1fQIttZonepT0fxu%2F7rJZhbGzCn03nNNQ52vs00tzk6Q4OMOwkcxA5kZuyZNMAyvhXdjiizLMocOrZDFHjTn%2F8mRE6a9NdUwd90cxqYpUKrVZC%2B3hYIF7RFOVWDlHIn2PKBsNuXiRUAltva6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3806ceab529-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/2ca1a3d46dfea28e31d1992c47823de2.static.js
200 OK 0 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/2ca1a3d46dfea28e31d1992c47823de2.static.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /2ca1a3d46dfea28e31d1992c47823de2.static.js HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Last-Modified: Tue, 08 Mar 2022 23:17:22 GMT
ETag: "6227e402-0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4uZ3EUdEoh44h6TZrq5FO9msfqEoraSNNP4NUkpdyvoGv2oV%2Bl0HKhGFesA3tD2zXLmi7WnLSoqOkCZXrxi2AdRvFKZh2ahELlCA0tXwcVuRXjEE4y8LLJR3t4BdZ2jdppD3EpEXAqJCdm5XmqIEl8yaqw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d380793cfab8-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/b617d70fcfc137ccd72b657b785e74e2.static.css
200 OK 3.7 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/b617d70fcfc137ccd72b657b785e74e2.static.css
IP
File type ASCII text, with very long lines (18688)
Hash b405c30c8a6f068289ead8abac572aca
8c6cc2c721b223916cc1507a975b9c6639614af1
bdd361d6fddf57dbd8d92a5847c923c350ffbea15556ae6aeb6bf7b303746cd6
GET /b617d70fcfc137ccd72b657b785e74e2.static.css HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-4936"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KK%2BELUk7AgQqrfWuB00GFMTDVQWBsbVdQFdMhecPkUsnM3AaU0AAbLm08VOdtdtp4um%2F3fL%2BsLy5pVti5X5I3mZtVONnmyJOP2UFh2o020FBIUTmsrHHiqk2VIt39ICVgtj86lqAr2Uq996jauhaQ3BSCA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3807ab3b511-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59bdc2e0a449c6388eb0c96da3586600
c61d2414961c4f05c9bcf400d6a1d9792fbe9093
2b3c911dddbf9fad01ea3232354ac2f0e6731541ab3a7e916ef09682dd43cf4e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.googleapis.com/translate_static/css/translateelement.css
200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP
File type ASCII text, with very long lines (18670)
Hash 897ba9a21d9625286674da769dacc2e2
84b4923ab7dee562395160824d53496314499b77
696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 19:09:49 GMT
expires: Fri, 02 Sep 2022 20:09:49 GMT
cache-control: public, max-age=3600
age: 2978
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 21daf45cdda2eb462873226bb5c1f0fb
4d4621bbf1461f35f7e536c1dbd9de71978ffa23
8164c742d013bdc2836cac1167acfe482547347ab6a1daefa15475f694dae057
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6231
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:27 GMT
Last-Modified: Fri, 02 Sep 2022 18:15:36 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 59bdc2e0a449c6388eb0c96da3586600
c61d2414961c4f05c9bcf400d6a1d9792fbe9093
2b3c911dddbf9fad01ea3232354ac2f0e6731541ab3a7e916ef09682dd43cf4e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mcaffeeantivlrusonlineservice.ml/cd43b3f1c5d33504bb302fe8ed9a6b5c.static.js
200 OK 79 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/cd43b3f1c5d33504bb302fe8ed9a6b5c.static.js
IP
File type ASCII text, with very long lines (1964)
Hash f129963e76d6242087be143525822b94
89d6e5a2d5683a4927c36f85b8ab64dda17ea5f0
baa744b6508084c17d3072737b60040013cf66278b0ee3986c989d37d8a15ec4
Analyzer Verdict Alert fortinet Phishing
GET /cd43b3f1c5d33504bb302fe8ed9a6b5c.static.js HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-3893c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bewsa5C5l7lziuPoEDLWpZlsf06EDDn7ypZo1RvdBViqq4cLG79HlirmRFBzUfRFa%2FycTHb16D6WuyrrwcMah7acXcytM8HrmMgvYpj62N39ZwjvwJ4Red5o%2BvVYZy72QgVtqyhnQuyWBWAz2yiXA33vLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3811a08b4ee-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pf2lVkKerPimVcuXrjepgg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Wq3fZQq8UpBIr7l0hu4aqtBUBPs=
mcaffeeantivlrusonlineservice.ml/bdd4d2f8a17aa2619367d3068f10fe46.static.png
200 OK 349 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/bdd4d2f8a17aa2619367d3068f10fe46.static.png
IP
File type PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data
Hash 7454c652e0733d92de6c920c2d646ae0
34a5bd8c7401f95e346895b0e5ccffbf0e9ad638
44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /bdd4d2f8a17aa2619367d3068f10fe46.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Content-Length: 349
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-15d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JXXA6B%2BS682O0DhyBx6YTH%2BsAzkNkFJSVbXqC0SG7mNvXLRE%2BF%2FIzzIUkam52tI6IdqbphE5UW3pYJmcwys1xuBOXnQ5XScnBZi70%2Fib1jxkwiqxQAzszK4VkQzX8EVLpVX0Qfp2hLRLixIW4TWevltj%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d383b8b3b511-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/b18fe7bf68a8125b1846d2ab0a4d0240.static.png
200 OK 293 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/b18fe7bf68a8125b1846d2ab0a4d0240.static.png
IP
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash 9eb68d2ce05c151bda542a7a6356e22c
baeeefe4a7ac657c10a5f081841015de1bcf90dd
2d2b7040bc32b397c3c60d800de9aa7d86404f1874862eba61bdaa21f1523eb7
GET /b18fe7bf68a8125b1846d2ab0a4d0240.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Content-Length: 293
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-125"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I%2BMgUflXSrV%2FcH21QlZTjwxoPja3CE%2F%2B%2F3dnkHHLFN50l2f1PJ25UeTVjIFmiLNZ8%2BQqy9M4kASJkmWDTk0jPOXQo0FTaCjmVK4B1m0I%2FKqVoI%2FJ9zwkT6Cjlcsn2Nq4%2F%2BbKcptHS%2FuZH7y9Bbkz4qrXow%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d383bbb90af6-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/707a5f2b6dafe9ebb72de055881df8fd.static.png
200 OK 364 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/707a5f2b6dafe9ebb72de055881df8fd.static.png
IP
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /707a5f2b6dafe9ebb72de055881df8fd.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Content-Length: 364
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
ETag: "62199584-16c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oCeHhxHR%2Fq4xH1Ki6ayHyEIiztlMqxFH6Fvqk8ktRnZvWzdSaABF9VUbr0VpKE3TFTSQ6scD60WrXUyzslQrFtx%2BRmCEBzSLMQAp5c5UX6opGrVZcXXcIorQpDSe7HP8VFzY8Qb11YN4QS18n2hm7kzTXw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d383bb7efab8-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/c195505bd51a228cc230b25a460fa7a1.static.png
200 OK 869 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/c195505bd51a228cc230b25a460fa7a1.static.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 34940f122c9c0c8a5a1245c7a94611d8
f48e0b239dba45f855a21cd3c31e7bfa164ee510
63fcd75a9dc74d07adcc8b9551e241741b9a754f55a336f46f32457c906a5962
GET /c195505bd51a228cc230b25a460fa7a1.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-34e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cq99iTdLkUzwLlOQHX%2Fe2bcg3wgk7P5F7rJNSdMRB7goV6f%2BWOuJa086Nk5OD8kGbkLGUondYJ1JVfSc%2FqryZSA1YPPss3RplkMJXZSMja4n%2FJKd8uK1GAlVMtFoGmbWG1XwyngbZBosem4s2qKaoEp4fA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d383ba42b529-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/a3972241ebbd442bc74095fba3030cb4.static.png
200 OK 1.4 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/a3972241ebbd442bc74095fba3030cb4.static.png
IP
File type PNG image data, 40 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash c2a1ae11666837c1c279116125a2735f
46ad968bf4a0ae84eb939ab65bc8b14e72cb9953
8e84a13f29ab4673710c914524d6d1d85e3f1dcb914c367f4cda8365305e1661
GET /a3972241ebbd442bc74095fba3030cb4.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-6ad"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qLt5lhIsYN%2BxTo4q3oU5U6bzwxS9fLjOFIURDOEBgESyUPA1vlBD8NpAWHH4sp%2B0pY%2B7qQeOjr6taksLtP0qxXu7xe1mzH6x6E%2BzH8%2FhevZJPCrZN7L5IDJSuFKWDkGJE51VkIjr8DaUkzOpzXh3ZS88Sw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d383be6db4ee-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/1df9d439cd075b31ec7d832740ada7de.static.png
200 OK 70 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/1df9d439cd075b31ec7d832740ada7de.static.png
IP
File type PNG image data, 543 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash b88d4a25ecff74c93c5ac73856d942a5
971e24326ccd352859b671572e767597d9ecd7c0
d179315717beead9a74ec5fa3e9dc07b94c0bd0df4f67466f1b62be8ba404275
GET /1df9d439cd075b31ec7d832740ada7de.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
Vary: Accept-Encoding
ETag: W/"62199584-113c1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dx8pkMk5SOgILVcLrpDgTqTqCMYGroCXz%2FuTZb5%2BQgqmCIk7fEiB0fyACFMtEwWaXtZ4GcfjgobGuScoRQV8X2geswhn8irndjUnH3h8gSdv3GB2k%2BPGquhrvDpPsYct4hlgL0YMCa65l0f%2BX%2B3q1gauuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d383be29b527-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/fe29d9ab45b3c75b3ee75411fef792e5.static.svg
200 OK 617 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/fe29d9ab45b3c75b3ee75411fef792e5.static.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1296), with no line terminators
Hash 65e19603998241ae29b3839ce0a0834a
08855fd391f59192b1f9a0bd33064af054517f22
56b7e03e46278c5a13fed62873114054f7e9db314cf491760fdb310d4ae6a9c8
Analyzer Verdict Alert fortinet Phishing
GET /fe29d9ab45b3c75b3ee75411fef792e5.static.svg HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-510"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PQyEvV6CfVnsx6WSREFK5z1fT9V8Ad%2FpSeOeJewi1piKY%2FzkCwHW8vNmw8C7ncn8jTSQ%2Fb%2BPA8qpHvlK%2BI4mSrPwVcs4yXRuUY3BUC94SwGVyw42uFeHdSjcbNu6yeKruHBw85XIWpVKSnmbAV76EG0cAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3846a08b511-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/bd7271795a71d5f771e0159db4c6a7c9.static.png
200 OK 128 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/bd7271795a71d5f771e0159db4c6a7c9.static.png
IP
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash 0bb86caf792dd7d24731c18cd37bb68e
dda1e433a0eaf785b2aa2c6214d5e48cb82a3a25
2ac27821ba64d645f36e2ad197492d30c11b10a032cc474554679555f4604622
GET /bd7271795a71d5f771e0159db4c6a7c9.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Content-Length: 128
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
ETag: "62199584-80"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EegpXLnLOFHQq%2F6xhU4R%2BsMp94DbstHfXx4UqqeuUcisuKocetAyIAoNrHqoy54C7K4GUTsPilm3FHj7aY5kG3Sv0F3NVVzjo1zP7f8JM29raSsOsJNv7CQHLIDXybNh%2BAqPzLuTLd319h7qI8lTULM91Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3851871b4ee-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/156e52dd5e06f1316281c245b433f0df.static.gif
200 OK 511 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/156e52dd5e06f1316281c245b433f0df.static.gif
IP
File type GIF image data, version 89a, 80 x 65\012- data
Hash af3aca2036675c5979fb535c5d190f15
70c4f17ef1a2afe0477c84c5d209fbe31760b657
aa88fa9731a6021cd8c0f80ef76476fd055a9cf0bff3ad9fbefbedbd255e26fa
GET /156e52dd5e06f1316281c245b433f0df.static.gif HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/gif
Content-Length: 511
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
ETag: "62199584-1ff"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xmLxfk%2FJcwiTr6JUR6yxFPUP1OpN2qRTugBbLKo5uTiCyPc4T8myLPqg%2FSAYhsl29wjcYJO70OCNcNU8QQEnRIeae78e3voAZruJImw%2FL8ku%2FpFGhjzFMOKAcEDeavtC2%2FPYv%2Fdp5E4HxhrhzbtuVvObbA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d385b91cb527-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/4e2657974ab086d5423bc5e8de18d474.static.png
200 OK 4.5 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/4e2657974ab086d5423bc5e8de18d474.static.png
IP
File type PNG image data, 230 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash e7c06a45a08cfbb96706d7863b5110dd
05c004c90ad8b6504d2fed412616f50603defd33
c620734bdf873b3ad4df6dcf763e906726b6e1d4e0c68acb574c16d0ff9140fe
GET /4e2657974ab086d5423bc5e8de18d474.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-126a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CSFGVQQ8ybTkX482smGeEoF9AwfNTB28zNsVEw5YXD16%2BLIvokTQ%2ByBbogEQ6FN%2Bx7nilfbsTUZ1CsOl%2FVN4cyM3Njp6EZMs%2BcKnrK%2Bv%2BphX1ZdcF9oY6SJRTaCnHCRJU4TMutJGwK6NUESUDUhMu%2FyrAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3851cb2b529-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/a754aca2dc777ce3c480603091242149.static.gif
200 OK 972 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/a754aca2dc777ce3c480603091242149.static.gif
IP
File type GIF image data, version 89a, 78 x 68\012- data
Hash bafc3a320b932ca1e8bd78be69eb30c1
cf64672e8c8be025221c61d2c0c50d0cc6c80f84
c8e8ba4d57b323b8e00a136a867e88477f40ec753733b028388c7fb975130b2a
GET /a754aca2dc777ce3c480603091242149.static.gif HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-3b5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dv4VFroBsaBVjCToa3zPc62wGJ5MVimPlqnZKay4A5%2F7BDX9MCHx6mriizu%2FBfYFZVy%2Fl5h4lXERb6KF4AOirQrfgDZEM5xZL5gfKOq%2BQVjiiEGAj5Ml7wVIQhn2LJkW8aVsIQ8aK7AQt7AlcRjorsQ2zQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d385c998b4ee-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/71133a0d48b2c999bef214d9b4d6446b.static.mp3
206 Partial Content 16 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/71133a0d48b2c999bef214d9b4d6446b.static.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash d6040c63cafad92b0c2933569de365c0
6e0782bf850c89a1211cc1ec2ab10373520c834c
e8ef8e78f08ac34193423319b86566a442440ec663d09f26911e9fa10c4c9db7
Analyzer Verdict Alert fortinet Phishing
GET /71133a0d48b2c999bef214d9b4d6446b.static.mp3 HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Cookie: GoogleAccountsLocale_session=en; googtrans=/en/en
HTTP/1.1 206 Partial Content
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: audio/mpeg
Content-Length: 15932
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-3e3c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Content-Range: bytes 0-15931/15932
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SQunUEB7ciEJiJ9xuAG2YmC3gbb68fdstOv2hGTtEgCq585CqkzONEsqCETqhpP9cWnxJnvdnR%2BKyaeC7Z75sYi8RrOUj%2Bg9qC%2Bfqt1DsMcuhMeL1ikeO9pMTQY2Un%2B4opbgbCMOIHo7ScVV0nlC2AbweA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3850dd50af6-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/960801b53f07bd0559315e465aeb0db9.static.png
200 OK 1.9 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/960801b53f07bd0559315e465aeb0db9.static.png
IP
File type PNG image data, 73 x 84, 8-bit/color RGBA, non-interlaced\012- data
Hash cab7be7fde05f76f7d9fe3fd5afd311c
3a778fd99e420b80ef06ad3b411d7bcb28e95e8d
7bff0750b33c24138d2597f185ea48bb068dfe07e7ada349617d4065cbe67917
GET /960801b53f07bd0559315e465aeb0db9.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-882"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6IzIzpFFKijxWyFung4ZqY2is35hH3iLks8GllOptbCOA8od10tPDQn8j980MYcUDha218ZNyIbvRi9erkTaMl7fOB1vZJUMiMqJOawYVmWIVULea9QlQdVYTOiesLv3Qwy5S1xhgseU8MNzmKL4u82AgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3866a40b527-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/82e46faa625ee16f4fee551e9c293ba7.static.gif
200 OK 1.6 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/82e46faa625ee16f4fee551e9c293ba7.static.gif
IP
File type GIF image data, version 89a, 65 x 80\012- data
Hash 7a9812a5eb71bda85c88fd8fca5f8be5
503f5347874315f15e7e9eaa14e625f4a465023e
6dfb8b419a1761075ed2fecd4f80d16b13cc39fe39c4e14fa00baefc66bfc6b5
GET /82e46faa625ee16f4fee551e9c293ba7.static.gif HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
Vary: Accept-Encoding
ETag: W/"62199584-60b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Fe06U%2FHUAPVcMzgGd4qXMWrsFfsMgajJolxSZS36EQIQy5xKT0pMzVFRrxws6MpS5Y2d7LXqRIpRLxa8kIzSAecQPvg2vSL6xKGUPL8vHrq8IqGGThh4YR5w3YetFENf3eS87NnDsTsiVDDRHeAZi6kgA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d385cc02b511-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/040e3f108b50625616c25c3182218e2d.static.gif
200 OK 69 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/040e3f108b50625616c25c3182218e2d.static.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 3ae573d079dcd1d2da4086f2c0c72c45
e7c9dabec81379373476ed23168dcecb9b8c56aa
9cce08ab28e94790cf78c87e37f8690acbc6c535e4b43ae7b38506b94538e107
GET /040e3f108b50625616c25c3182218e2d.static.gif HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/gif
Content-Length: 69
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-45"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8gnwaGQGuu6gfUCz5mO1UxopgHI416RvaQvdJaW38TEX4dZJ98nSm%2BL9MmUTQ%2FyY2pNdCv4Pdyy4ofnNkikIvhqiEGiOtWi%2BZPCahy5ZIpJOalY2lK9%2FvBnmxjtFgccVDAChE0G%2BRVVxrZrKXKnQcp1Czw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3868abeb4ee-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/a7eb96616218cf2e56ce5bf33d1f1779.static.png
200 OK 7.0 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/a7eb96616218cf2e56ce5bf33d1f1779.static.png
IP
File type PNG image data, 230 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 33db69dcbfe28359b4ea4c2210cf3773
2f51e93d0ed63f30d379e5387288e62a8737f576
3a4c80bd3ca60459c8c8a52452a9bd024f17a10714494805726dbe87512f5b69
GET /a7eb96616218cf2e56ce5bf33d1f1779.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:44 GMT
Vary: Accept-Encoding
ETag: W/"62199584-1c56"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fruHjt5glGodkE5yuUU0hIyV0XN04STsovlqqgdqtgtWx0qZ4kTEFw7FjUj3KcD9aIQCeK6MKvI9sOdyEu5V2t60Np7NNlOXRiVcbWuFGPravW4UOoxlz3VlNhrITzeCRSBcqVKZB49%2BurkMplBzAuPdHw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3866f5cb529-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/www.gstatic.com/images/branding/product/2x/translate_24dp.png
404 Not Found 173 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3674c9f9d4cb3aeda8a1dabcf83e21ce
e464bbf96e99f833d457531275b5f4e94d5f633d
d0defd1c3d57c0cc21ccf2602e742ba72684282cebaae43539b5b6c6d97ac5b7
GET /www.gstatic.com/images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/b617d70fcfc137ccd72b657b785e74e2.static.css
Cookie: GoogleAccountsLocale_session=en; googtrans=/en/en
HTTP/1.1 404 Not Found
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nHJTUnzfC78bZgoc3hEDgQnQWU1wNMEzkyNzP5pdCcbIVs%2FIraLecd2LVvemXD5zznJpH1TBYGI6ttlhRGOr4ZKhj692FE40yP8PGFHv8cvkNz%2BBKAw1AE21Z%2BrFv378yksYWgbXq4ix%2BQfl5mxG%2Fv9Wtw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3872e79b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/f38f95a9f151e2d0ebe5979c1632b689.static.gif
200 OK 211 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/f38f95a9f151e2d0ebe5979c1632b689.static.gif
IP
File type GIF image data, version 89a, 29 x 29\012- data
Hash 45b0c8a1e52d91e8cf84eaf75ebca9a9
0e358b8571f9062dedfacd0c31d54179270153cd
4e635bdab7a300d0ccb5aac26b4610a07ee1b33643578c1a4308e677d7eb595d
GET /f38f95a9f151e2d0ebe5979c1632b689.static.gif HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/gif
Content-Length: 211
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-d3"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3P1KsE%2BafAhvQYV61Aj79TJ8fRKtlBeGfqk9a1DED%2F%2FynA%2BRRrE6uw%2FrDQBOzWpQd327OrZlWHWXvLySay%2FQ35BfSz7SV1wQG1EyK2uOoqa%2BVMwJJT1t0ieG6L2rpz1pVrOeRf9Zj9ZS25yUM6lC1hXQSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3873ba2b4ee-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/5dfb2a1bc56220ad77be3196362abc05.static.gif
200 OK 377 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/5dfb2a1bc56220ad77be3196362abc05.static.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash c10bdec858cb0cf9e6cc5865d5925746
697c095ed5509e5a5af0c5ebf2380662aeffc531
b65b47a79e32335d9ca35ff59c6975d2b5808f84da0db88d11ce777b33e72ad9
GET /5dfb2a1bc56220ad77be3196362abc05.static.gif HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:28 GMT
Content-Type: image/gif
Content-Length: 377
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-179"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bovRQnu1canabhcPoPpIcBv%2FqYbKlw5pjU9Hbpkbk%2F1q8HqadyXdOQWy33nJ2niQ%2BsgcZjMTBcfHFLVYw6tdDXTWPyK0wBBpzgK88Zd%2FDAcpPrFqzUcLbRv7dd8M0xXh%2Flb%2F3i0YmeXiAds9Uw2a9y5TkA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d386f8650af6-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/0ceda21f97803d8846e2d135396be2d2.static.gif
200 OK 234 B URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/0ceda21f97803d8846e2d135396be2d2.static.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 9ce99ec458daf212f9812a90f3fadd13
9e3041bc91b79a17b52e0fbb6c2d0e2f905d98a1
b0d335401c9fd5fac9991ec92edaf7865ff3a491ebe390120936c69796c3b753
GET /0ceda21f97803d8846e2d135396be2d2.static.gif HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:28 GMT
Content-Type: image/gif
Content-Length: 234
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
ETag: "62199582-ea"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AFemBiisiXl2gtS%2FqxztkJHMsAm%2FnW0qE7TTEg0O8VzahpII%2B3Bvt0UqjGPV2tq1T84GV2v94Wt%2BanAB8o3ad8GYuy12Cp4ra%2BCZ8GWy8de%2BMQpz4lLAU2xo5BLvTdnPILpnC0hvjtaHSQcctTf%2FM%2B0RYw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7448d3872bb2b527-OSL
alt-svc: h2=":443"; ma=60
mcaffeeantivlrusonlineservice.ml/e9f7342a364ad130cc862be53588ccb5.static.png
200 OK 301 kB URL HTTP/1.1 mcaffeeantivlrusonlineservice.ml/e9f7342a364ad130cc862be53588ccb5.static.png
IP
File type PNG image data, 1440 x 700, 8-bit gray+alpha, non-interlaced\012- data
Size 301 kB (301270 bytes)
Hash 9f43c433f3feaf8baf80a5999d1f6fdf
28eef49c63bab88c71310e89d1beec5d585e62da
c7be07bbfdbb50620ccd3434bcd67b560c93b4db176a95b083106d03b4cf8bfa
GET /e9f7342a364ad130cc862be53588ccb5.static.png HTTP/1.1
Host: mcaffeeantivlrusonlineservice.ml
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 19:59:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 26 Feb 2022 02:50:42 GMT
Vary: Accept-Encoding
ETag: W/"62199582-49f73"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rjvno7pUaQQi3DGe5pJkxuHeLU3hjePMzJJGMDf4fIDnvPb3cXNvVWBbl4Kv4ztzzwQcBuu1HfD572R8DZZbljLF%2FJwI64h2l1DFOoA1hJNgk1m8FwiW6%2FCOwgnCT%2FxfNZ83J9nkei%2Fku5PYT9glJBDiew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7448d3851c80fab8-OSL
alt-svc: h2=":443"; ma=60
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Fri, 02 Sep 2022 18:41:12 GMT
expires: Fri, 02 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 4696
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9665d92cfb2f9db5f7032ed692dff0e0
2ca6220de116f04429a7ce3f3c8f95cae61db137
5cc77ac9117df4aa52cc268287bf82f9dde172f1bcd7f640d3f0ef04a5ed07c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dc076b754adaddcb000f3f987b6c5df2
01e9b40591692b8b2a6a94729e9481c7e600d248
9dbf2e71e1cbad91a71154b729e8ef496eda7544828a8bfd4f64e6dd70c4f64d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-YD3VLMVLVF>m=2oe8v0&_p=301585974&cid=1198340494.1662148766&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662148766&sct=1&seg=0&dl=http%3A%2F%2Fmcaffeeantivlrusonlineservice.ml%2F&dt=McAfee%C2%AE%20Total%20Protection&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-YD3VLMVLVF>m=2oe8v0&_p=301585974&cid=1198340494.1662148766&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662148766&sct=1&seg=0&dl=http%3A%2F%2Fmcaffeeantivlrusonlineservice.ml%2F&dt=McAfee%C2%AE%20Total%20Protection&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-YD3VLMVLVF>m=2oe8v0&_p=301585974&cid=1198340494.1662148766&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662148766&sct=1&seg=0&dl=http%3A%2F%2Fmcaffeeantivlrusonlineservice.ml%2F&dt=McAfee%C2%AE%20Total%20Protection&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mcaffeeantivlrusonlineservice.ml
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://mcaffeeantivlrusonlineservice.ml
date: Fri, 02 Sep 2022 19:59:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0fb935f05e6aaba744f686e2bb3928f9
5b8211247e237b44ddd5bc3df47063bfcac84b0e
a998f91aa98aee49510e973a892dd630395bb1af087c7dbc77b61d29bef2bf68
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 660657162b524658006a1856e274a946
56c933c6682c0019f6dbd040da6b929044dc216a
9578fc0408868ae40d41af8d13787f4137853c056300524b5558b1c57d39b2b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
200 OK 27 kB URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
Hash 7f5d11667b106594011b2a0d3be039af
a106a42790ac24e893b5c6691db6fafa64b2cdfd
2ec8c5bb620c253c87c5319549e8e14280eae1ef369ec4a1804bb060760915bc
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Sep 2022 19:59:28 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+575; expires=Sun, 01-Sep-2024 19:59:28 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/product/1x/translate_24dp.png
200 OK 846 B URL HTTP/2 www.gstatic.com/images/branding/product/1x/translate_24dp.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e9cd262114358f26b7608b56905185dc
6dbde0a96deaab2b529723ce26c62043cf9180ab
5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 07:54:53 GMT
expires: Sat, 02 Sep 2023 07:54:53 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 43475
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/images/branding/product/2x/translate_24dp.png
200 OK 1.8 kB URL HTTP/2 www.gstatic.com/images/branding/product/2x/translate_24dp.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash c69c796362406f9e11c7f4bf5bb628da
e489ce95ab56208090868882113d7416abf46775
4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 18:54:28 GMT
expires: Sat, 02 Sep 2023 18:54:28 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 3900
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 660657162b524658006a1856e274a946
56c933c6682c0019f6dbd040da6b929044dc216a
9578fc0408868ae40d41af8d13787f4137853c056300524b5558b1c57d39b2b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
200 OK 1.4 kB URL HTTP/2 translate-pa.googleapis.com/v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback
IP
Hash 3ad547ec47ef63d87eff80e53d6dd861
20cd334266b4bc9b47966d5487f0a2b2d41db765
c9b9dc1b30d38db2a72068eb7d8a5d1af32006b64263cab5e89f500f62856ea3
GET /v1/supportedLanguages?client=te&display_language=no&key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4&callback=callback HTTP/1.1
Host: translate-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mcaffeeantivlrusonlineservice.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-type: text/javascript; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 02 Sep 2022 19:59:28 GMT
server: ESF
cache-control: private
content-length: 1392
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
expires: Fri, 02 Sep 2022 19:59:28 GMT
set-cookie: NID=511=ptfro6AHfAvgNjycKOLswhoIJGLshG2gTjgBdOOnHjOrkD6YKgV9jyRFmxjmS3G-3DWujP7wmGWh-N0wlIXr7UuWFYq8uU5GsVNFsI35VaKeHaQiCv4a4NbUGXfzkDdbqwKFqVKwfc9uOZpwlnet1Fhd0lY-n61s2d8D6MeFIoQ; expires=Sat, 04-Mar-2023 19:59:28 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly
CONSENT=PENDING+217; expires=Sun, 01-Sep-2024 19:59:28 GMT; path=/; domain=.googleapis.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0fb935f05e6aaba744f686e2bb3928f9
5b8211247e237b44ddd5bc3df47063bfcac84b0e
a998f91aa98aee49510e973a892dd630395bb1af087c7dbc77b61d29bef2bf68
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 19:59:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14616
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 19:59:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14616
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 19:59:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14616
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 19:59:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14616
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 19:59:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12756903aaa74164feb5f8525398ca36
9fef9b071daea6793cbbdfe391254ac4326b1aa2
6d474a6d96aebfed43a4f6812f18a1be8d100c590f75eb0fbf4ec7277dd0c442
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16818
x-amzn-requestid: fa921878-2054-453b-b313-681cdd9c9068
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj-Z_HUNIAMFltg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b110c-053ce81943fea70c2de7daa0;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 06:54:04 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CDyJUMKmUlrT3LgfeiZhQN1XEV2vKTIZtmV4QZYXaoM4PWbYo8IyJA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 14:46:29 GMT
age: 18779
etag: "9fef9b071daea6793cbbdfe391254ac4326b1aa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d848f7606889b048b6334e70d8a5e0
85239ef4f2fee8d3345e599bc942cab63ff3aaf6
da6cf33b440b51f72a70f309d62fd581aed246b6a78b8f329fa3899db15ff86d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5889
x-amzn-requestid: 42237574-f86e-4ece-b986-6d0c5910fcc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzMVgHajoAMFmXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112756-48ff9d98464cf3c9680d97b4;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:42:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _7BBSlQQucoO5poncTYuX4fcmS4WFg3UcVFXalckGCCNFKJ0h5UpsQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:06:51 GMT
etag: "85239ef4f2fee8d3345e599bc942cab63ff3aaf6"
content-type: image/jpeg
age: 78757
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ba50b2fd1814c5ffc95aef40c69ce8c
cbb4546228115cccc122b16209e70171bef5c1f2
de822c8549508b28a07d29b203ae3ef356470df906cba727fc765f1bd14bb866
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9252
x-amzn-requestid: 7feebba8-f6b9-4b79-9726-5a7534da277e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyVG5DoAMF_Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112675-3123158f3dcfbd476537ca3c;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BOa5zGQyJS9q9bHmtKzlNtyS9ToGPZJkDFo2uY2lzz8Lnd3cZLQEaA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:01:10 GMT
age: 79098
etag: "cbb4546228115cccc122b16209e70171bef5c1f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e05660322f0368dd2bf8067d7e4554d
ec65cb47d86488f734c945a210d5f636a40fea2c
98875230ec45766102191bdc4180742fa3b8f3ad5ad1a128d12437105f86247e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6196
x-amzn-requestid: a7d6ce70-06d7-498c-8024-80185a3fc3e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyLFmVIAMFkcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112674-3fad622927177e9236d7c50a;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: wLezqM4_yKqtOR7D43beBqm8TAD5y8eQ7xHOxjDJdHchCpyusuzMuQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:55:46 GMT
etag: "ec65cb47d86488f734c945a210d5f636a40fea2c"
content-type: image/jpeg
age: 79422
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c3b7580a37e6eb7e5bd18491f1d4dd6
288b82ad8f924eb9570ae1c55da84d041f862366
046d1ef76448c53446068ef5f8315b7299484996cdebfd9d1e749b4ded9c7d3c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5079
x-amzn-requestid: 3b19c77a-2e9b-499f-890b-36fc4ee72ba7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XslOVEtZIAMFv1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630e825b-01b7b71617b59f7414a0e5e5;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 21:34:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: et3ZsWRVoBNMpArUk9CohTyMpS5F0eKiR6cZJRfwAEiiFJUaeay58g==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:48:05 GMT
age: 79883
etag: "288b82ad8f924eb9570ae1c55da84d041f862366"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 955f2a35bd6b3802670e7fa8a7cda833
4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c
2fb517039f0704d2f6fe2fa78eae47c71c645add1c2276f8726248184ae45760
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10435
x-amzn-requestid: 813ec4ca-243d-46cb-a6a6-8ec58e5dd9f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLjdHwnIAMFhzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112615-4733cfb83cf0e8734abc5716;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: n6DJbsUGTdXT42cNLTDq6Uz28H2SDhwq6drdKP4axAHsBz471X7r_g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:37:26 GMT
age: 80522
etag: "4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
104.21.57.178
143.204.55.25
104.17.25.14
93.184.220.29
23.36.76.226