188.247.84.73/
200 OK 1.9 kB IP
ASN #48832 Linkdotnet-Jordan
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash f8f23d662ed0eb37ee3ce4468ff79173
ed1e3adca3911217ba71c7e496e8b43249c2bd73
8ce3fa119e520b46b20da74a7d62542d54fa891877ee82b969856c2d6f98f371
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
ETag: "1837783282"
Last-Modified: Wed, 09 Nov 2022 11:28:32 GMT
Content-Length: 1917
Date: Wed, 07 Dec 2022 22:47:02 GMT
Server: lighttpd/1.4.31
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7181eff9c60e83eb0004ece591e47dca
0fd8cd0c9d10b0547938982e57d2c43e2d98679f
89c5c0e2d6890798644174a8e31976aec03a1b3deb03812afbb520e5ed68f522
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89C5C0E2D6890798644174A8E31976AEC03A1B3DEB03812AFBB520E5ED68F522"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2611
Expires: Wed, 07 Dec 2022 23:30:29 GMT
Date: Wed, 07 Dec 2022 22:46:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea93551fa9deb76ae49a3b4019d64fe
e3b8862057ebe839959228e42246d7b1807fc90c
7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13519
Expires: Thu, 08 Dec 2022 02:32:17 GMT
Date: Wed, 07 Dec 2022 22:46:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 22:08:06 GMT
content-type: application/json
age: 2332
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00e7703bd74975689fc9050356aaca6b
9788fe6a36d6f278e8da329ebc5dd87bcd212317
593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4272
Expires: Wed, 07 Dec 2022 23:58:10 GMT
Date: Wed, 07 Dec 2022 22:46:58 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nDCW8+Xj0j/NLJ6jInfUgQ+gPGH3evvUEPeMYDwLHzxSoigUDvv2K0+b8GccagA/qqILdfMRWng=
x-amz-request-id: HDXTREQK2VWNX3ZX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 21:49:31 GMT
age: 3447
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css
200 OK 6.0 kB URL HTTP/1.1 netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css
IP
File type ASCII text, with very long lines (301)
Hash 46428eb0a79918b2732aead48bde4e1d
bf2e90411cadf7ff24dd75f66de72bab963dcf12
157e3a5f0b547ee3823a0d0d9e861599eec7f704d427b9f5adcb5367f2e7eca9
GET /font-awesome/3.2.1/css/font-awesome.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 22:46:58 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CDN-PullZone: 252412
CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
CDN-RequestCountryCode: DE
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31919000
Content-Encoding: gzip
Last-Modified: Mon, 25 Jan 2021 22:04:51 GMT
CDN-CachedAt: 08/03/2021 17:42:29
CDN-EdgeStorageId: 601
CDN-RequestPullCode: 200
CDN-RequestPullSuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
X-Content-Type-Options: nosniff
CDN-ProxyVer: 1.0
CDN-Status: 200
CDN-RequestId: 9026c9e4abb125cb82a6f9e5488a7cfc
CDN-Cache: HIT
CF-Cache-Status: HIT
Age: 15894339
Server: cloudflare
CF-RAY: 7760cceaafe8b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 22:46:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 22:46:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 22:46:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 4ba6292f244806690ca83cc99f8b01f8
ef5bf68f9257da8e04bde1f5d2bb763f3546601b
2ee227f863004098dd21b1a4f528d439596ad9866c82e0f978852aed53a3b2bf
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2EE227F863004098DD21B1A4F528D439596AD9866C82E0F978852AED53A3B2BF"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11926
Expires: Thu, 08 Dec 2022 02:05:45 GMT
Date: Wed, 07 Dec 2022 22:46:59 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 4ba6292f244806690ca83cc99f8b01f8
ef5bf68f9257da8e04bde1f5d2bb763f3546601b
2ee227f863004098dd21b1a4f528d439596ad9866c82e0f978852aed53a3b2bf
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2EE227F863004098DD21B1A4F528D439596AD9866C82E0F978852AED53A3B2BF"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11926
Expires: Thu, 08 Dec 2022 02:05:45 GMT
Date: Wed, 07 Dec 2022 22:46:59 GMT
Connection: keep-alive
188.247.84.73/MasterviewWebUI/raphael/colorwheel.js
200 OK 8.0 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/raphael/colorwheel.js
IP
ASN #48832 Linkdotnet-Jordan
Hash a0207270d96b00283b3155135d69f445
6dc0739c3ecb3b69aa44090be4f7e0b6effffe8a
87e3c34421a29f02f1d7b033e8344786497a34983717c9145540a6f41956273b
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/raphael/colorwheel.js HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
ETag: "2484852287"
Last-Modified: Thu, 19 Jul 2018 06:33:46 GMT
Content-Length: 7966
Date: Wed, 07 Dec 2022 22:47:03 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/MasterviewWebUI.nocache.js
200 OK 11 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/MasterviewWebUI.nocache.js
IP
ASN #48832 Linkdotnet-Jordan
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3530)
Hash b1fb147acc5a347a346cc21a66648531
bdbb1d33859c1392697ad0d0829e6aec379f6282
e79ca3ba6a00b11c8b714e200668cec049d4ab343efdbe2c63f6bcb3a7a76bd1
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/MasterviewWebUI.nocache.js HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
ETag: "2996332112"
Last-Modified: Fri, 10 Aug 2018 09:53:00 GMT
Content-Length: 10657
Date: Wed, 07 Dec 2022 22:47:03 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI.css
200 OK 5.6 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI.css
IP
ASN #48832 Linkdotnet-Jordan
Hash 9e2ec821ce19a458f86e1b47161880ff
3daf6915eb640042da82a19d10194b238415555d
b373e94fc358c41a97e3ac1422d8d45a6fb05efbbf5e33920a09138c73c2b2c2
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI.css HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/css
Accept-Ranges: bytes
ETag: "1805535973"
Last-Modified: Thu, 19 Jul 2018 06:28:24 GMT
Content-Length: 5593
Date: Wed, 07 Dec 2022 22:47:03 GMT
Server: lighttpd/1.4.31
188.247.84.73/unit.css
200 OK 56 B IP
ASN #48832 Linkdotnet-Jordan
File type ASCII text, with CRLF line terminators
Hash 3307476664c40b953a81f22a063bb531
719d6fcd29bdb98865ada42563e586c4da3e057a
8647b0d5ad23719d030c3b0b4486d4b4e0d764fd8c13e92804ef08c5c7a44dd1
Analyzer Verdict Alert quad9 Sinkholed
GET /unit.css HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/css
Accept-Ranges: bytes
ETag: "4289489467"
Last-Modified: Tue, 25 Feb 2020 13:13:06 GMT
Content-Length: 56
Date: Wed, 07 Dec 2022 22:47:03 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/raphael/colorpicker.js
200 OK 7.3 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/raphael/colorpicker.js
IP
ASN #48832 Linkdotnet-Jordan
Hash 28376b0718f9056a74895eaf4c3400cf
9597aec8b10c5a2b81a9db960ad84e5e9e547b10
05c26815052166e8a990194b816681c9f0754a674cb905dfbacb5b3da75c0b90
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/raphael/colorpicker.js HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
ETag: "3617248811"
Last-Modified: Thu, 19 Jul 2018 06:33:46 GMT
Content-Length: 7321
Date: Wed, 07 Dec 2022 22:47:03 GMT
Server: lighttpd/1.4.31
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 22:07:55 GMT
age: 2344
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4475
Cache-Control: max-age=128066
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 22:46:59 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 10:21:25 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
188.247.84.73/MasterviewWebUI/raphael/raphael2-min.js
200 OK 117 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/raphael/raphael2-min.js
IP
ASN #48832 Linkdotnet-Jordan
File type ASCII text, with very long lines (65536), with no line terminators
Size 117 kB (116604 bytes)
Hash c8377ae8fd7f3a9767ffa53c0abb3707
86d50a5ea8607da6bba4d45d97bf9f602b9df266
b6fdceacd03ca04c840199b1251e86cb8d41fb5d310b166d8043054b311b5055
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/raphael/raphael2-min.js HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
ETag: "1262412865"
Last-Modified: Thu, 19 Jul 2018 06:33:46 GMT
Content-Length: 116604
Date: Wed, 07 Dec 2022 22:47:03 GMT
Server: lighttpd/1.4.31
fonts.googleapis.com/css?family=Lato:400,900
200 OK 367 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:400,900
IP
Hash 2bd92f722b233d75fec0087933537b0a
0c1bcb46967e0d030aca6208ed1e0d9a95ccdac7
70f57e14891577c4c8c38ceaa3a459bcdb88817102dd8324ff9d01196763137d
GET /css?family=Lato:400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://188.247.84.73/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 22:46:59 GMT
date: Wed, 07 Dec 2022 22:46:59 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
188.247.84.73/MasterviewWebUI/gwt/standard/standard.css
200 OK 27 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/gwt/standard/standard.css
IP
ASN #48832 Linkdotnet-Jordan
Hash a81147c2bca305ce96eef3ee8f29d90b
ceda4c7542cfc3d935101c93aeda59f0b34a9ddb
de9e10a67985aa1e0977e4287e2d4798fc63575346e1d27b162b3982ddf217b7
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/gwt/standard/standard.css HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/css
Accept-Ranges: bytes
ETag: "1600873176"
Last-Modified: Thu, 19 Jul 2018 06:33:44 GMT
Content-Length: 27038
Date: Wed, 07 Dec 2022 22:47:03 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/WebApp/style.css
200 OK 1.6 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/WebApp/style.css
IP
ASN #48832 Linkdotnet-Jordan
Hash a158df0b67328ce9f0960affd7ae603f
2a196dc29349f0ad84f6647127afd9e388d1f313
61a2c8d6ce4f843e0519537c8422070862b371e701775c03355aa0f551fc197d
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/WebApp/style.css HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/css
Accept-Ranges: bytes
ETag: "3929659297"
Last-Modified: Thu, 19 Jul 2018 06:33:46 GMT
Content-Length: 1610
Date: Wed, 07 Dec 2022 22:47:04 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/WebApp/avgrund.css
200 OK 3.0 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/WebApp/avgrund.css
IP
ASN #48832 Linkdotnet-Jordan
Hash c7e6ab8a0243b0df72803a2970ae8c07
01a72252930887a4a65daadb38f447149fadc6af
a679476482b520a9f711310f09506f4515e56bb15a261654997c3a0bcfe824da
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/WebApp/avgrund.css HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/css
Accept-Ranges: bytes
ETag: "4198422317"
Last-Modified: Thu, 19 Jul 2018 06:33:46 GMT
Content-Length: 3000
Date: Wed, 07 Dec 2022 22:47:04 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/WebApp/webappwidgets.css
200 OK 4.8 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/WebApp/webappwidgets.css
IP
ASN #48832 Linkdotnet-Jordan
File type assembler source, ASCII text
Hash eef8123156d5b2b3bd7aa8362a2b94b8
a1babed34a462438437eb484e0a15a5b7a268afb
0ac88ed8748edbda37f5ee6ccb0d9d5f36f77f6867972b726aa831f5a14c1dae
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/WebApp/webappwidgets.css HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/css
Accept-Ranges: bytes
ETag: "2075973347"
Last-Modified: Thu, 19 Jul 2018 06:33:46 GMT
Content-Length: 4783
Date: Wed, 07 Dec 2022 22:47:04 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/masterview.css
200 OK 910 B URL HTTP/1.1 188.247.84.73/MasterviewWebUI/masterview.css
IP
ASN #48832 Linkdotnet-Jordan
Hash adaedd2a6499a812de27a2d24c1cd67a
3bd3c800290e19d92f9110301354e77d3fbd8fa3
7095a87a28fd4678b58f7e811d961b670568d3be8814afcdc04512e9ca5558c8
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/masterview.css HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/css
Accept-Ranges: bytes
ETag: "1610160856"
Last-Modified: Thu, 19 Jul 2018 06:33:46 GMT
Content-Length: 910
Date: Wed, 07 Dec 2022 22:47:04 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/popover.css
200 OK 2.7 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/popover.css
IP
ASN #48832 Linkdotnet-Jordan
Hash 1034072b836b27b67318f54e2a47fe29
6ab77e6456cecc70ab60bf6e725cbe8fc2a50efd
919a169eb12828636c347e188915f4fc2d70c281e626ece246927124a4ab61b9
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/popover.css HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/css
Accept-Ranges: bytes
ETag: "29412175"
Last-Modified: Fri, 10 Aug 2018 09:52:18 GMT
Content-Length: 2671
Date: Wed, 07 Dec 2022 22:47:04 GMT
Server: lighttpd/1.4.31
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 22:47:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://188.247.84.73
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 17:11:08 GMT
expires: Wed, 06 Dec 2023 17:11:08 GMT
cache-control: public, max-age=31536000
age: 106552
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 22:47:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
188.247.84.73/favicon.ico
200 OK 5.4 kB URL HTTP/1.1 188.247.84.73/favicon.ico
IP
ASN #48832 Linkdotnet-Jordan
File type MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel\012- data
Hash ff0da20c6d220a1ba1934d84b9669551
82c62f81681debbbb505767ecb51f9f7572b5169
5a504aae61c6dfce9220a9fbd520d2af89b9bec89093ecc297b1048a916ee1a7
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Accept-Ranges: bytes
Content-Length: 5430
Date: Wed, 07 Dec 2022 22:47:04 GMT
Server: lighttpd/1.4.31
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2375
Expires: Wed, 07 Dec 2022 23:26:36 GMT
Date: Wed, 07 Dec 2022 22:47:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2375
Expires: Wed, 07 Dec 2022 23:26:36 GMT
Date: Wed, 07 Dec 2022 22:47:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2375
Expires: Wed, 07 Dec 2022 23:26:36 GMT
Date: Wed, 07 Dec 2022 22:47:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2375
Expires: Wed, 07 Dec 2022 23:26:36 GMT
Date: Wed, 07 Dec 2022 22:47:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 06:11:41 GMT
age: 59720
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43fdc85bfd574fa803f0bcdc216ef622
27f558d5cdc150a50f080c054423500666b63d74
fafd2a81cddacdb4e5fd7c9963a784e6e56d06ac98f0bd4124fd74fa3ba015e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5245
x-amzn-requestid: 9770ebcd-fb1e-4b81-bb87-1e98ef024741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy-E8HugoAMFsKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911085-54eb7a48323113d52329abf5;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:15:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: d2DHUS5fGT4uoPPdjDXmHUOQVF93ULtO4zSHRmrx7KMu3lO0y0K9ag==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:24:13 GMT
age: 1368
etag: "27f558d5cdc150a50f080c054423500666b63d74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8011441-85ad-4414-9c3d-7ae1b86acd3f.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8011441-85ad-4414-9c3d-7ae1b86acd3f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dc3cc57336eca8e3d0e307bbd970b90e
cd3fffde0e1ab3cdd48b1fd969dbc7cb77daaf6e
9aae742b419b8b6d2371c3e2082d15a8974f530230367e82b6aa7961e41919c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8011441-85ad-4414-9c3d-7ae1b86acd3f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6926
x-amzn-requestid: ef7f28d4-3d5e-40ad-89f8-77817630530e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctERRH3ToAMFylg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb407-42738f8437edfc5440ae59e7;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: c_-xjk5YlgjsKQG_Jd-YL3G4bGYCBiOZvg-1IP-0sxbNgtI9ZgHpcg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 05:22:40 GMT
age: 62661
etag: "cd3fffde0e1ab3cdd48b1fd969dbc7cb77daaf6e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc231183-b100-4921-9a48-0bac91da0d2b.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc231183-b100-4921-9a48-0bac91da0d2b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 280c788841ca669f2c8556f03ee85b68
c15a4519a69eb6b5cc624344a7c3d99335a095d9
451a816aa2129c3a7712a01b96daee492ae2ab25c4940405063098f3b7ad10ae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc231183-b100-4921-9a48-0bac91da0d2b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6032
x-amzn-requestid: 22b80af7-87cf-4719-8bc8-927077cc3aa1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4hoFraoAMFpVA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639107a3-42927c064ee65d3b23121b36;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -6j01fDKCX0VuXQjVKCm1nPOqSRuh9_Pd-3cgxbEKWhLzlL27hs0fA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:07:32 GMT
age: 2369
etag: "c15a4519a69eb6b5cc624344a7c3d99335a095d9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d44d17585c9a536c8da0e75ed90d175
9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1
6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 12:11:17 GMT
age: 38144
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbdf939d23b987fd36a86b7a1258b10d
2cad45ad8e56699db3457501cf1e488fe85d479a
285a8a3d3ec439f493ca5d586477c3e3ed3b9e5d7a0133da73c426b69e112cb1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2019d3bc-b4a4-4afc-ad84-3ab33b8036ec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10861
x-amzn-requestid: ad568a35-9eba-4c6d-a09d-97e518fbf503
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4gIFN4oAMFqrw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6391079a-434ca8281e48538e69e72e05;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4MrxT27cyrFqR70ofprhh4FbJAfVpKb787jT3TsH0l7BxQOf2tWh6g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:02:15 GMT
age: 2686
etag: "2cad45ad8e56699db3457501cf1e488fe85d479a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
188.247.84.73/MasterviewWebUI/88D2CDBE08871EB2B0A1BF529F21673A.cache.js
200 OK 239 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/88D2CDBE08871EB2B0A1BF529F21673A.cache.js
IP
ASN #48832 Linkdotnet-Jordan
File type ASCII text, with very long lines (65536), with no line terminators
Size 239 kB (238771 bytes)
Hash 9fe70b45a88a81ec71fe4b3458f8fa86
8897a9b19787ee6b1e941f1f5a28878a6985f35f
2a94344262e9ce3a1241e3d2deb8081f440aa73fae9327623b5c0f64ecb63799
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/88D2CDBE08871EB2B0A1BF529F21673A.cache.js HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
ETag: "263121753"
Last-Modified: Fri, 10 Aug 2018 09:52:58 GMT
Content-Length: 238771
Date: Wed, 07 Dec 2022 22:47:04 GMT
Server: lighttpd/1.4.31
188.247.84.73/version.json
200 OK 169 B URL HTTP/1.1 188.247.84.73/version.json
IP
ASN #48832 Linkdotnet-Jordan
File type JSON data\012- , ASCII text
Hash dab7aa76d2ef3ec7ce6688af830e9001
de798e74dbc02335b73b17a5ff904b0abe3e2fa3
9aeec8fc461c130b545cb2ed9868d39444cc98a3273036c9fbd1ffeb130c97e5
Analyzer Verdict Alert quad9 Sinkholed
POST /version.json HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=utf-8
Content-Length: 2
Origin: http://188.247.84.73
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Accept-Ranges: bytes
Content-Length: 169
Date: Wed, 07 Dec 2022 22:47:05 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/deferredjs/88D2CDBE08871EB2B0A1BF529F21673A/9.cache.js
200 OK 476 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/deferredjs/88D2CDBE08871EB2B0A1BF529F21673A/9.cache.js
IP
ASN #48832 Linkdotnet-Jordan
File type ASCII text, with very long lines (65536), with no line terminators
Size 476 kB (475766 bytes)
Hash d54c1b3894975bcec95afd739a2b0a3c
2de680c6bcb2070aa647f8192f400103959d89d7
bd40d1d35b815d2b53a3569961fb67adaf22f0866eebd4cd7f1bfb599bd74772
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/deferredjs/88D2CDBE08871EB2B0A1BF529F21673A/9.cache.js HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
ETag: "405325853"
Last-Modified: Fri, 10 Aug 2018 09:52:58 GMT
Content-Length: 475766
Date: Wed, 07 Dec 2022 22:47:06 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/deferredjs/88D2CDBE08871EB2B0A1BF529F21673A/6.cache.js
200 OK 14 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/deferredjs/88D2CDBE08871EB2B0A1BF529F21673A/6.cache.js
IP
ASN #48832 Linkdotnet-Jordan
File type ASCII text, with very long lines (13760)
Hash f80af3552d8de48133d62a4bf8e162a1
0c21d8d8f48d8dcbe8dfcb6c9ce1f766a645596f
669ac70d41571634aeb3fb43201da1a2282d81efec062a70e227de20db6a1526
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/deferredjs/88D2CDBE08871EB2B0A1BF529F21673A/6.cache.js HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
ETag: "764962682"
Last-Modified: Fri, 10 Aug 2018 09:52:58 GMT
Content-Length: 13761
Date: Wed, 07 Dec 2022 22:47:08 GMT
Server: lighttpd/1.4.31
188.247.84.73/images/bg-img.jpeg
200 OK 5.8 kB URL HTTP/1.1 188.247.84.73/images/bg-img.jpeg
IP
ASN #48832 Linkdotnet-Jordan
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 256x256, components 3\012- data
Hash 6b3faf794a1bd761cdf5513a4cbb861d
7ab93e265a0066518aba7333a541eeacfffc6421
b45221fb1102127d479abb4b68266fe1e9d446aa73804345753c14c835e55b80
Analyzer Verdict Alert quad9 Sinkholed
GET /images/bg-img.jpeg HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: image/jpeg
Accept-Ranges: bytes
ETag: "4214835967"
Last-Modified: Thu, 19 Jul 2018 06:28:24 GMT
Content-Length: 5801
Date: Wed, 07 Dec 2022 22:47:08 GMT
Server: lighttpd/1.4.31
188.247.84.73/MasterviewWebUI/deferredjs/88D2CDBE08871EB2B0A1BF529F21673A/4.cache.js
200 OK 3.5 kB URL HTTP/1.1 188.247.84.73/MasterviewWebUI/deferredjs/88D2CDBE08871EB2B0A1BF529F21673A/4.cache.js
IP
ASN #48832 Linkdotnet-Jordan
File type HTML document, ASCII text, with very long lines (3468)
Hash 1edd3c958522c99ddb34724645a58f17
a398992e5c78e10cc8e53425d4975aae96e95d9d
a65c6b7059b60b553f01ee6b4b6fe93051576f9f8d4bf095e238f91d1278318c
Analyzer Verdict Alert quad9 Sinkholed
GET /MasterviewWebUI/deferredjs/88D2CDBE08871EB2B0A1BF529F21673A/4.cache.js HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: text/javascript
Accept-Ranges: bytes
ETag: "277728139"
Last-Modified: Fri, 10 Aug 2018 09:52:58 GMT
Content-Length: 3469
Date: Wed, 07 Dec 2022 22:47:08 GMT
Server: lighttpd/1.4.31
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2
200 OK 22 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 22504, version 1.0\012- data
Hash 1c6c65523675abc6fcd78e804325bd77
898d9808304dc157f5dcb18ca169ec6e2b96b3d7
08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
GET /s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://188.247.84.73
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 17:14:55 GMT
expires: Wed, 06 Dec 2023 17:14:55 GMT
cache-control: public, max-age=31536000
age: 106329
last-modified: Tue, 26 Apr 2022 16:04:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
188.247.84.73/fonts/fontomas-webfont.woff
200 OK 2.3 kB URL HTTP/1.1 188.247.84.73/fonts/fontomas-webfont.woff
IP
ASN #48832 Linkdotnet-Jordan
File type Web Open Font Format, TrueType, length 2280, version 1.0\012- data
Hash f28a1018cbde83704a8c482de127dd86
44903384e4d34da8f54b603afb87ce420e16dff9
203b129d97b34203e22b62aa0de0110199ce0d483067858f96942188f6e91728
Analyzer Verdict Alert quad9 Sinkholed
GET /fonts/fontomas-webfont.woff HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Accept-Ranges: bytes
Content-Length: 2280
Date: Wed, 07 Dec 2022 22:47:09 GMT
Server: lighttpd/1.4.31
188.247.84.73/fonts/franchise-bold-webfont.woff
200 OK 15 kB URL HTTP/1.1 188.247.84.73/fonts/franchise-bold-webfont.woff
IP
ASN #48832 Linkdotnet-Jordan
File type Web Open Font Format, TrueType, length 14972, version 1.0\012- data
Hash 85a8ea96ef16769230b3aac44d2abb06
28071c545a6f35b1032766063c9d172b9af93423
e54c42ee0275ff4eebc72e43cf9d5af559999359c61ec91dd85331738f90405b
Analyzer Verdict Alert quad9 Sinkholed
GET /fonts/franchise-bold-webfont.woff HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Accept-Ranges: bytes
Content-Length: 14972
Date: Wed, 07 Dec 2022 22:47:08 GMT
Server: lighttpd/1.4.31
188.247.84.73/fonts/BebasNeue-webfont.woff
200 OK 12 kB URL HTTP/1.1 188.247.84.73/fonts/BebasNeue-webfont.woff
IP
ASN #48832 Linkdotnet-Jordan
File type Web Open Font Format, TrueType, length 11632, version 1.0\012- data
Hash 6f04d3d6e28184a5ace603e80b97433e
1998cb7315be9d506cc738032bb81412b17f6036
dd360ae94b4d7230efb497196eb6b948f8afeb2e41ec8ff6113309ee971c3721
Analyzer Verdict Alert quad9 Sinkholed
GET /fonts/BebasNeue-webfont.woff HTTP/1.1
Host: 188.247.84.73
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://188.247.84.73/
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Accept-Ranges: bytes
Content-Length: 11632
Date: Wed, 07 Dec 2022 22:47:09 GMT
Server: lighttpd/1.4.31
beacon-v2.helpscout.help/static/js/vendor.06c7227b.js
403 Forbidden 0 B URL HTTP/2 beacon-v2.helpscout.help/static/js/vendor.06c7227b.js
IP
GET /static/js/vendor.06c7227b.js HTTP/1.1
Host: beacon-v2.helpscout.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://188.247.84.73/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Wed, 07 Dec 2022 22:46:59 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gykJiY7ac1jT3rRydxZw0Ikk%2BC%2BSMQtmxRMoQ5PxyQYLJxPZoMHmbgsRM3Y4NwujhEVuNji4FW0WSjjCyBoDchlAKi70%2BJ3YigCyYIOVcofmD8CGIq1%2FYySgzyLAsHdawvTE84LTFomCHfY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7760ccebed0eb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
188.247.84.73
93.184.220.29
216.58.207.227
23.36.76.226
104.18.10.207