Report - tafilarakia.ikaros.xn--qxam/

Report Overview

Submitted URL
tafilarakia.ikaros.xn--qxam/
IP
5.9.8.16
ASN
#24940 Hetzner Online GmbH
Submitted
2022-12-08 04:05:56
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	737 B	93.184.220.29
ikaros.xn--qxam	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	424 B	17 kB	5.9.8.16
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	450 B	85 kB	142.250.74.106
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	47 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	95.101.11.115
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	2.8 kB	142.250.74.131
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	397 B	44 kB	172.217.21.168
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.161.136.21
tafilarakia.ikaros.xn--qxam	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	13 kB	1.9 MB	5.9.8.16
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	21 kB	216.239.36.178

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/flipbook/lib/hash.js	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/flipbook/pics/page-flip.mp3	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/flipbook/js/core.js	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/flipbook/js/magazineoff.js	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/data/1-regions.json	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery-ui-1.8.20.full.min.js	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/flipbook/extras/modernizr.2.5.3.min.js	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/flipbook/lib/turn.min.js	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/flipbook/lib/zoom.min.js	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/data/3-regions.json	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery.min.1.7.js	Phishing
2022-12-08	medium	tafilarakia.ikaros.xn--qxam/data/2-regions.json	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (14)

	URL	Size	First Seen	Last Seen
	www.googletagmanager.com/gtag/js?id=UA-144220429-1	112 kB	2023-03-08	2023-03-08
Pretty URL www.googletagmanager.com/gtag/js?id=UA-144220429-1 IP 172.217.21.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:35:47 Last Seen2023-03-08 21:35:47 Times Seen1 Hash ffd42423ec4436b9be156558d5c9208b 9f34ca2155dc1e6cef5645307a6cc1ef91df95a7 c761f54897a8f2f2f843791e4e0ee58e417779ee3405b95a4c137438cd42b168 Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-08	2024-04-19
Pretty URL www.google-analytics.com/analytics.js IP 216.239.36.178 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:22:31 Last Seen2024-04-19 07:47:47 Times Seen1515 Hash fda30e8a22c9bcd954fd8d0fadd0e77c ae47cd34cbde081a48d7f92fc80aaf06a1381193 b42e4a056cb5b80c5a315040826866445ec9332f0749e184509ab2d9d3b86719 Loading...

	tafilarakia.ikaros.xn--qxam/flipbook/extras/modernizr.2.5.3.min.js	8.5 kB	2023-03-08	2023-12-25
Pretty URL tafilarakia.ikaros.xn--qxam/flipbook/extras/modernizr.2.5.3.min.js IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:35:47 Last Seen2023-12-25 17:26:24 Times Seen25 Hash 2115fabc38f6f34f00c38d79b82a83ce 21c2c2def8dc0e8ea4a7397818d89a9dc7846d9f c17c84e682712bd3e5e3f23ca76cc7eaaaf9879be223a8e2ba92ea8cd40e1ba7 Loading...

	tafilarakia.ikaros.xn--qxam/flipbook/lib/hash.js	3.0 kB	2023-03-08	2023-12-03
Pretty URL tafilarakia.ikaros.xn--qxam/flipbook/lib/hash.js IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:35:47 Last Seen2023-12-03 13:17:00 Times Seen31 Hash 8a6abc943d939dc48f63944ac307a436 f93f876d2794e1658e76248c4d7cf977847d0dc9 5c56c9d6b31c8de4d43a1099c1a80cbcca39f0a63696a10ef389d9eeaff84887 Loading...

	tafilarakia.ikaros.xn--qxam/	155 B	2023-03-08	2023-03-14
Pretty URL tafilarakia.ikaros.xn--qxam/ IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:35:47 Last Seen2023-03-14 05:12:44 Times Seen1 Hash 7a24e79c3b388c09c9b4b9994fcfe82d 66b512167f62eac85a48062fd899cb911078254a d84ca065c4c42178c29474807870e845045872bee44e7007169ca38ef7f5e9cd Loading...

	tafilarakia.ikaros.xn--qxam/	382 B	2023-03-08	2023-04-05
Pretty URL tafilarakia.ikaros.xn--qxam/ IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:35:47 Last Seen2023-04-05 01:39:45 Times Seen3 Hash 7fdb1c88bc9d9d52c0a4613c94bdf0ea 0eb4a07c69c3c20cceba9788c9498166c79148ce 8cde67d4ec20cf0d4d2711dc1e73d290254d89d15f57c09b916a8fad428ba354 Loading...

	tafilarakia.ikaros.xn--qxam/	541 B	2023-03-08	2023-04-05
Pretty URL tafilarakia.ikaros.xn--qxam/ IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:35:47 Last Seen2023-04-05 01:39:45 Times Seen4 Hash ae74a1611e73d10dc1d973791440c07f a624dce5b8c86a1f7ce79b4047c6a44513a915b5 4d59b4677956e1362fed686332ebd623d95dbf17d3f12c281804eb652c098a72 Loading...

	tafilarakia.ikaros.xn--qxam/flipbook/lib/zoom.min.js	12 kB	2023-03-07	2023-12-19
Pretty URL tafilarakia.ikaros.xn--qxam/flipbook/lib/zoom.min.js IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:21:10 Last Seen2023-12-19 16:57:43 Times Seen18 Hash e541cf0b250b4b07ca33a212196a9939 d267e888308669c4a777ec710a2650721a283f34 f04817d0bc74955dffe49c9c420ff5d2a636c5f1be7fc34934801cf8ef053de3 Loading...

	tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery.min.1.7.js	94 kB	2023-03-07	2024-04-19
Pretty URL tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery.min.1.7.js IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:02:44 Last Seen2024-04-19 07:18:55 Times Seen1500 Hash 25721ced154b3a99e818431446d7506d 3f1b0e9e54af1af2db2c8a639530448723462151 ff4e4975ef403004f8fe8e59008db7ad47f54b10d84c72eb90e728d1ec9157ce Loading...

	tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery-ui-1.8.20.full.min.js	202 kB	2023-03-07	2023-12-04
Pretty URL tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery-ui-1.8.20.full.min.js IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 15:44:59 Last Seen2023-12-04 06:29:55 Times Seen24 Hash a9e8368559211f870bf8c67dc4af20a3 ae74362cdb2fadb2eee6c962f47f1e33af51c79d 592d119e51160fb7d1523d20b047d25b4846e5243a328624139364fd2270648b Loading...

	tafilarakia.ikaros.xn--qxam/flipbook/js/core.js	17 kB	2023-03-08	2023-03-14
Pretty URL tafilarakia.ikaros.xn--qxam/flipbook/js/core.js IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:35:47 Last Seen2023-03-14 05:12:44 Times Seen1 Hash a4ce906438ea71a89895aaad27137546 2a24781fd939200960692b253622a9644d67e0ee dcd125b068d413f138593150ec7056a54f7931f66c22fa81d9d4184db9c3ed8d Loading...

	tafilarakia.ikaros.xn--qxam/	943 B	2023-03-08	2023-03-14
Pretty URL tafilarakia.ikaros.xn--qxam/ IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:35:47 Last Seen2023-03-14 05:12:44 Times Seen1 Hash 2f2133e90c7cc9a31b13d0b53b72e460 b507e38e59a64c404dbb37abbab60d85d1234251 5e56d83a563ddb8117f1cfb8bb94a07d07e18d9d5143ab60c84cd0112fbd624e Loading...

	tafilarakia.ikaros.xn--qxam/flipbook/lib/turn.min.js	34 kB	2023-03-08	2023-12-19
Pretty URL tafilarakia.ikaros.xn--qxam/flipbook/lib/turn.min.js IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:32:01 Last Seen2023-12-19 16:57:43 Times Seen29 Hash b146d06b9de2afa4fd7be5e7d43eb832 f23c905180ce0a9e737b371666606a8ecda64219 94806afae7e55e4afa9603a49937ecff80bf1533c0d7fb65b5d564d5a906ed85 Loading...

	tafilarakia.ikaros.xn--qxam/flipbook/js/magazineoff.js	11 kB	2023-03-08	2023-04-19
Pretty URL tafilarakia.ikaros.xn--qxam/flipbook/js/magazineoff.js IP 5.9.8.16 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:35:47 Last Seen2023-04-19 09:06:44 Times Seen10 Hash bb4c344e61df8dfc12a80e777b40958e 38ec330d9f735c5ee207087f4089ae14beb20767 75365e12c769e6428947ccd5ff7838ad57e9d6a52f3fa711a6bf36d171627d9b Loading...

HTTP Transactions (54)

URL IP Response Size

tafilarakia.ikaros.xn--qxam/

5.9.8.16

301 Moved Permanently

162 B

URL HTTP/1.1
tafilarakia.ikaros.xn--qxam/
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 08 Dec 2022 04:05:44 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://tafilarakia.ikaros.xn--qxam/

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2865
Expires: Thu, 08 Dec 2022 04:53:30 GMT
Date: Thu, 08 Dec 2022 04:05:45 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3452
Expires: Thu, 08 Dec 2022 05:03:17 GMT
Date: Thu, 08 Dec 2022 04:05:45 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 03:08:07 GMT
content-type: application/json
age: 3458
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
00e7703bd74975689fc9050356aaca6b
9788fe6a36d6f278e8da329ebc5dd87bcd212317
593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4639
Expires: Thu, 08 Dec 2022 05:23:04 GMT
Date: Thu, 08 Dec 2022 04:05:45 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: MHi1WVZhxM+mPuS9XHxb0EsSOBvSwkHeErypkNL4YOV6GHqw8a3BSR3tvWqFPBFfBwIsw8yw6fs=
x-amz-request-id: TM4ATKGGS33VSC2X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 03:47:46 GMT
age: 1079
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
58f0436133b200668f409e7967c7a9d6
42135edbeda0727c4900b1f207a520161525b8ae
77b672e969564724db5644bc8314c7d1cc7a37822275f13bff27a3a9afc9c820

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "77B672E969564724DB5644BC8314C7D1CC7A37822275F13BFF27A3A9AFC9C820"
Last-Modified: Thu, 08 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21553
Expires: Thu, 08 Dec 2022 10:04:58 GMT
Date: Thu, 08 Dec 2022 04:05:45 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
6ec5f6261a8262e9f94b29627f54cefe
7ac766cf2ac8c2d960ec033388a767ff8a7d45e2
5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 04:05:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
c7a5f887bbc7d30b9cfe15163c3d8ddb
21d65790a1d10a06d198b54218365aa474126e1c
2a2e7930f967d947cc5293c95221913e24596773577bbf56ff402db6236bbda1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 04:05:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

tafilarakia.ikaros.xn--qxam/flipbook/pics/zoomin.png

5.9.8.16

200 OK

694 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/pics/zoomin.png
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
694 B (694 bytes)
Hash
a2999e3f71f6f96e1e5b33519eee2314
59f1337a02c5287eaac52cd837a97689ceda5a37
def7775997a93c4a91640260df48c329fc0970dc206b7a1a43595a091751f972

HTTP Headers

GET /flipbook/pics/zoomin.png HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: image/png
content-length: 694
x-accel-version: 0.01
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "2b6-5c22de8497b80"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=UA-144220429-1

172.217.21.168

200 OK

44 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=UA-144220429-1
IP
172.217.21.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1921)
Size
44 kB (43623 bytes)
Hash
f2f7964d16e212b5e2451b7ef1019a5a
ee658e173b9887a4ff599eeb82085fb3f912938d
a2ba713c752f937fc66b32bed2bdbe615863bafa05a2cf2eab0f9e06289acbe0

HTTP Headers

GET /gtag/js?id=UA-144220429-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 04:05:45 GMT
expires: Thu, 08 Dec 2022 04:05:45 GMT
cache-control: private, max-age=900
last-modified: Thu, 08 Dec 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43623
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 03:07:55 GMT
age: 3470
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/pics/zoomout.png

5.9.8.16

200 OK

652 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/pics/zoomout.png
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
652 B (652 bytes)
Hash
b11c2c40f7dd26d839ce10afc7a548d6
6cfa25ebe663d056fa6f63eaa8ea29e94f8a1402
a5c10474fd37d095227a59759ca868a9ed0f531c4de30d5afe50d5458f18990b

HTTP Headers

GET /flipbook/pics/zoomout.png HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: image/png
content-length: 652
x-accel-version: 0.01
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "28c-5c22de8497b80"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/

5.9.8.16

200 OK

2.7 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text
Size
2.7 kB (2690 bytes)
Hash
8be664136fca41b8162f67a62b8926b6
4295dca64e1f123e3908c44a81df2acf6e1bf51c
30c98bedff53f9cbd67e303b026e489b540f3b6a37634aacf1ffdf4e879ac2fc

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: text/html
last-modified: Thu, 13 May 2021 11:36:50 GMT
etag: W/"609d0f52-178b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3806
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 04:05:45 GMT
Last-Modified: Thu, 08 Dec 2022 03:02:19 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 04:05:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

tafilarakia.ikaros.xn--qxam/flipbook/lib/hash.js

5.9.8.16

200 OK

1.5 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/lib/hash.js
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
ASCII text
Size
1.5 kB (1469 bytes)
Hash
03e65f5a0fab07f7ed25c10d61b07861
8be55d845c4f943008c96b092d63f2ff146ca4da
5e4cc16ea37c29f5cd93b041ab6527fd035af4f474562052c283978a80fb43d4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /flipbook/lib/hash.js HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-b97"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

ikaros.xn--qxam/wp-content/uploads/2020/02/logo_black.png

5.9.8.16

200 OK

16 kB

URL HTTP/2
ikaros.xn--qxam/wp-content/uploads/2020/02/logo_black.png
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 300 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size
16 kB (16427 bytes)
Hash
617b965a97273dec2deebd4625abfe6b
9932ed571d8e82e76013d720c1d0dacbf12a0197
257929cbc6d3215b09cc9fb1ade4a6a960b2f6faa4cd4db245306bbfebef8782

HTTP Headers

GET /wp-content/uploads/2020/02/logo_black.png HTTP/1.1
Host: ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: image/png
content-length: 16427
last-modified: Wed, 19 Jan 2022 20:45:21 GMT
etag: "61e87861-402b"
x-cache-status: MISS
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/pics/page-flip.mp3

5.9.8.16

206 Partial Content

30 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/pics/page-flip.mp3
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 256 kbps, 48 kHz, Stereo\012- data
Size
30 kB (30039 bytes)
Hash
ac5e16b4e9b7e0fd1d98520f8aa7a958
c25a8cf4c97936627447147706b3aed4b4b50f03
a1d715d444227368fc99cb5a0e3619aa52e0c3b411661173d04f690b2f64d2c2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /flipbook/pics/page-flip.mp3 HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 206 Partial Content
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: audio/mpeg
content-length: 30039
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "609c9ffe-7557"
x-powered-by: PleskLin
content-range: bytes 0-30038/30039
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/pics/fs.png

5.9.8.16

200 OK

625 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/pics/fs.png
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
625 B (625 bytes)
Hash
91397c0e0737097b7c8c5be1b05e724f
f11e7cdce66dcd18896c5c72b9055277c73fbf0f
20a1ea1b9d4dc33ee2df57e35d71e2cf340dd4225ec3423532abb55bb698cf6c

HTTP Headers

GET /flipbook/pics/fs.png HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: image/png
content-length: 625
x-accel-version: 0.01
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "271-5c22de8497b80"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Indie+Flower|Open+Sans:400,700|Ubuntu:400,700|Great+Vibes

142.250.74.106

200 OK

84 kB

URL HTTP/2
fonts.googleapis.com/css?family=Indie+Flower|Open+Sans:400,700|Ubuntu:400,700|Great+Vibes
IP
142.250.74.106:0
ASN
#15169 GOOGLE

File type
data
Size
84 kB (84410 bytes)
Hash
e515adf29f9831abd5bcbcd5eeca857b
92f82d779805b7011f5a34524e08c097ebc7c14f
4281b26a3408cad2bdfcb11f1705dc40b840e63ded7a640af0f0956972723204

HTTP Headers

GET /css?family=Indie+Flower|Open+Sans:400,700|Ubuntu:400,700|Great+Vibes HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 Dec 2022 04:05:45 GMT
date: Thu, 08 Dec 2022 04:05:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google-analytics.com/analytics.js

216.239.36.178

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
216.239.36.178:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20039 bytes)
Hash
47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 08 Dec 2022 02:41:08 GMT
expires: Thu, 08 Dec 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 5077
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

push.services.mozilla.com/

35.161.136.21

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.161.136.21:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RHZKN32wMscud29ZqD7JSQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: M0Yh+yIML8X0cqhYOQ20jTk7IkI=

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
30aec170d58f580f2ed4da4b92d72cc7
3b11a98ba9563f7f266e7a935e3b78bd0c0712aa
7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 04:05:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google-analytics.com/j/collect?v=1&_v=j98&a=409184587&t=pageview&_s=1&dl=https%3A%2F%2Ftafilarakia.ikaros.xn--qxam%2F&ul=en-us&de=UTF-8&dt=%CE%A4%CE%B1%20%CE%A6%CE%B9%CE%BB%CE%B1%CF%81%CE%AC%CE%BA%CE%B9%CE%B1&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=859803645&gjid=1890437818&cid=533812117.1670472345&tid=UA-144220429-1&_gid=1869748508.1670472345&_r=1&gtm=2oubu0&z=1132446098

216.239.36.178

200 OK

1 B

URL HTTP/2
www.google-analytics.com/j/collect?v=1&_v=j98&a=409184587&t=pageview&_s=1&dl=https%3A%2F%2Ftafilarakia.ikaros.xn--qxam%2F&ul=en-us&de=UTF-8&dt=%CE%A4%CE%B1%20%CE%A6%CE%B9%CE%BB%CE%B1%CF%81%CE%AC%CE%BA%CE%B9%CE%B1&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=859803645&gjid=1890437818&cid=533812117.1670472345&tid=UA-144220429-1&_gid=1869748508.1670472345&_r=1&gtm=2oubu0&z=1132446098
IP
216.239.36.178:0
ASN
#15169 GOOGLE

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

HTTP Headers

POST /j/collect?v=1&_v=j98&a=409184587&t=pageview&_s=1&dl=https%3A%2F%2Ftafilarakia.ikaros.xn--qxam%2F&ul=en-us&de=UTF-8&dt=%CE%A4%CE%B1%20%CE%A6%CE%B9%CE%BB%CE%B1%CF%81%CE%AC%CE%BA%CE%B9%CE%B1&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=859803645&gjid=1890437818&cid=533812117.1670472345&tid=UA-144220429-1&_gid=1869748508.1670472345&_r=1&gtm=2oubu0&z=1132446098 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://tafilarakia.ikaros.xn--qxam
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: https://tafilarakia.ikaros.xn--qxam
date: Thu, 08 Dec 2022 04:05:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/pics/zoom-icons.png

5.9.8.16

200 OK

4.0 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/pics/zoom-icons.png
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 176 x 44, 8-bit/color RGBA, non-interlaced\012- data
Size
4.0 kB (3987 bytes)
Hash
f31dc8e3b876ce6824fc7a446fbd14cc
0e1331a5531be0ec83f80c7904c890420a7acff8
25c8505da94c861857d2af5d7d6fd7b2b358e58808944cba205de4d979eeb344

HTTP Headers

GET /flipbook/pics/zoom-icons.png HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/flipbook/css/magazine.css
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: image/png
content-length: 3987
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "609c9ffe-f93"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/pics/prev.png

5.9.8.16

200 OK

839 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/pics/prev.png
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 29 x 26, 8-bit/color RGBA, non-interlaced\012- data
Size
839 B (839 bytes)
Hash
749752ec9e77a1737362639aa38702e3
9c15ab5bb13ebebfb821b43b222299042ae10af1
f58029d41e063942200b7b80d9a3414c455122ac8ccb306bfccfbe142753b877

HTTP Headers

GET /flipbook/pics/prev.png HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/flipbook/css/magazine.css
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: image/png
content-length: 839
x-accel-version: 0.01
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "347-5c22de8497b80"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/pics/next.png

5.9.8.16

200 OK

837 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/pics/next.png
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 29 x 26, 8-bit/color RGBA, non-interlaced\012- data
Size
837 B (837 bytes)
Hash
a247d347a581443872bd18313ab9122e
a7eadc219a30a1fdd8624d459370eff0425927f8
6136a21a097987dd38b97e3d7ea3f18050b305137a5542e4c2335228233657fd

HTTP Headers

GET /flipbook/pics/next.png HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/flipbook/css/magazine.css
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: image/png
content-length: 837
x-accel-version: 0.01
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "345-5c22de8497b80"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/data/1.jpg

5.9.8.16

200 OK

269 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/data/1.jpg
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1049x1483, components 3\012- data
Size
269 kB (269420 bytes)
Hash
0c604503af32dd516268001f8d269770
ab50bbae49f3c49b741ffd5afc1082fbf2c011d4
21b040eae9a9fa6d5cd88d31a9dee1c08e63d179db59af3a4d639d4f4119d1f0

HTTP Headers

GET /data/1.jpg HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: image/jpeg
content-length: 269420
last-modified: Thu, 13 May 2021 11:38:39 GMT
etag: "609d0fbf-41c6c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/data/2.jpg

5.9.8.16

200 OK

566 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/data/2.jpg
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 180x180, segment length 16, baseline, precision 8, 1049x1488, components 3\012- data
Size
566 kB (565732 bytes)
Hash
39d33262537c5fc24ea059341a7d5f6b
976eec1f1fb7dc885df37690ca1bbde76f6afdda
f40917fd11a735b5d8fcb806b0a60bb2f512a6071d750aafe8ec6370e19b06ce

HTTP Headers

GET /data/2.jpg HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: image/jpeg
content-length: 565732
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "609c9ffe-8a1e4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/pics/loader.gif

5.9.8.16

200 OK

2.5 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/pics/loader.gif
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
GIF image data, version 89a, 24 x 24\012- data
Size
2.5 kB (2545 bytes)
Hash
4b3afb84b2b71ef56df09997a350bd04
accdac8a7abeab0e21c49539aad0a973addb28ef
9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645

HTTP Headers

GET /flipbook/pics/loader.gif HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/flipbook/css/magazine.css
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: image/gif
content-length: 2545
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "609c9ffe-9f1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/data/3.jpg

5.9.8.16

200 OK

495 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/data/3.jpg
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 180x180, segment length 16, baseline, precision 8, 1049x1488, components 3\012- data
Size
495 kB (494591 bytes)
Hash
9a461510ff030728a42becb99d0f891e
14118458daddcadbb058b308c15ca99b2ad8fa12
77158992dd0bef8c31e80a9aaed174fb2ccfe3e651a2f969df657ba47d9af5b0

HTTP Headers

GET /data/3.jpg HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: image/jpeg
content-length: 494591
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: "609c9ffe-78bff"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/css/jquery.ui.css

5.9.8.16

200 OK

485 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/css/jquery.ui.css
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
ASCII text
Size
485 kB (484823 bytes)
Hash
0bf7a622261d52c5fd25072bb7b5b3fd
52400ff4c689c4b0281390deb52a3134da9c9ead
3d21121ab8498aafd8728e24d1a646da50a5ccbfa2ec3e4338cac8d38c5a3332

HTTP Headers

GET /flipbook/css/jquery.ui.css HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: text/css
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-aab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2929
Expires: Thu, 08 Dec 2022 04:54:36 GMT
Date: Thu, 08 Dec 2022 04:05:47 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2929
Expires: Thu, 08 Dec 2022 04:54:36 GMT
Date: Thu, 08 Dec 2022 04:05:47 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2929
Expires: Thu, 08 Dec 2022 04:54:36 GMT
Date: Thu, 08 Dec 2022 04:05:47 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F525e2750-67bb-410b-9408-34845ca67f18.jpeg

34.120.237.76

200 OK

6.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F525e2750-67bb-410b-9408-34845ca67f18.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.7 kB (6746 bytes)
Hash
1cfd2bbdab3f88f525c53c375a0e0439
b0a5af508496c98460212497f6e75a0ddfc7f2de
9fd863a6e673c348b4e5cbc3e4747d48e87b4699e9fed7ae9590e36ae72ad9c9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F525e2750-67bb-410b-9408-34845ca67f18.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6746
x-amzn-requestid: 50f40893-5343-473d-96ff-e59b0c7ec77e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_pFx6oAMF1cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-79cff8fe348074d505426909;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: s4Zf3VmA9ybuz7NQdvaolSHSFvGyZ0niRgZtogYnTNWEatHRouG3Sw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:01:55 GMT
age: 21832
etag: "b0a5af508496c98460212497f6e75a0ddfc7f2de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234796b8-a59e-4174-a03a-b127b03b60eb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13556 bytes)
Hash
57a992ab666f21c6da0057fefb622ff2
c36381d6744ae44360b2a37ca7586028e980714b
afe4050d9b07dcab509c95eb8d75ca410db74bd59f39561e5d190550cb61503e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F234796b8-a59e-4174-a03a-b127b03b60eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13556
x-amzn-requestid: 3e79e2da-80ea-404c-8d87-939c7682dbe8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4h8EuUIAMFkIQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639107a5-68318f164708882a43fb0f12;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7RZTh3iQHGp_XffXQQw13UUWqPNZQFJ_e4pIvNPgAaA1aGy_cXMueA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:13:24 GMT
etag: "c36381d6744ae44360b2a37ca7586028e980714b"
content-type: image/jpeg
age: 21143
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6524c56-aea0-48f9-a1c0-2eb8b37618cc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8401 bytes)
Hash
39ae12151067969e63a9064a2b273e03
9450229c82f195e4b62c0862650dbb3d159b46e8
7b462d7f52643ca683c18d789d2adc4475c64e655489513a2faa1edbd69eecd3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6524c56-aea0-48f9-a1c0-2eb8b37618cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8401
x-amzn-requestid: f90a46ff-cf1f-4a27-a85c-088fdca3abb4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4BDF1zIAMF-EA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106d3-7496cf2770c9b22924b2a11c;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: R6ftXKYEOemnZcKjNanVHiKnPEQw34DUyLPODM5DCcqIGU50qVvNIA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:06:53 GMT
age: 21534
etag: "9450229c82f195e4b62c0862650dbb3d159b46e8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6557 bytes)
Hash
210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 06:11:41 GMT
age: 78846
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95d68d20-ce48-4bc4-a89b-d42a294520bc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.7 kB (6656 bytes)
Hash
077c8b656d9ac4ecba7aea40ecaa4e0c
84b9d58a1cf4174f1a55b1c3475a09d579094f19
abf13120589f3c11466a6b3f65874565a78b3a25b047b2089dafdae0cdf71c08

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95d68d20-ce48-4bc4-a89b-d42a294520bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6656
x-amzn-requestid: 623488c8-42b4-43d0-a274-f35f4e2695c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4AwH11IAMFfCw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106d1-1226750c2e9dbe517b1211e3;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Wvq8PJEuXz7Yf5QE2phHXPYPCLWzIR1MXWiJKyN84yHINqK6H_ZQrQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:05:39 GMT
age: 21608
etag: "84b9d58a1cf4174f1a55b1c3475a09d579094f19"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/js/core.js

5.9.8.16

200 OK

16 kB

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/js/core.js
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type
ISO-8859 text
Size
16 kB (16011 bytes)
Hash
a47e9c08ebddcb0a822938374501a599
3a7e55424cd00321c6c72739e1f151cefe90ddfe
a69f2c8705ab3ba2cfa60cb5d88519460b52cbcd792d81b54e4fa91e4229c328

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /flipbook/js/core.js HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-4211"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/js/magazineoff.js

5.9.8.16

200 OK

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/js/magazineoff.js
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /flipbook/js/magazineoff.js HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-2a1c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/data/1-regions.json

5.9.8.16

404 Not Found

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/data/1-regions.json
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /data/1-regions.json HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: text/html
last-modified: Fri, 18 Sep 2020 10:39:07 GMT
etag: W/"328-5af941c3f0c6e"
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/favicon.ico

5.9.8.16

404 Not Found

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/favicon.ico
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: text/html
last-modified: Fri, 18 Sep 2020 10:39:07 GMT
etag: W/"328-5af941c3f0c6e"
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery-ui-1.8.20.full.min.js

5.9.8.16

200 OK

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery-ui-1.8.20.full.min.js
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /flipbook/extras/jquery-ui-1.8.20.full.min.js HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-316ac"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/extras/modernizr.2.5.3.min.js

5.9.8.16

200 OK

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/extras/modernizr.2.5.3.min.js
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /flipbook/extras/modernizr.2.5.3.min.js HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-2163"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/lib/turn.min.js

5.9.8.16

200 OK

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/lib/turn.min.js
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /flipbook/lib/turn.min.js HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-83ee"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/lib/zoom.min.js

5.9.8.16

200 OK

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/lib/zoom.min.js
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /flipbook/lib/zoom.min.js HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-2f66"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/css/magazine.css

5.9.8.16

200 OK

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/css/magazine.css
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /flipbook/css/magazine.css HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: text/css
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-2ebe"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/data/3-regions.json

5.9.8.16

404 Not Found

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/data/3-regions.json
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /data/3-regions.json HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: text/html
last-modified: Fri, 18 Sep 2020 10:39:07 GMT
etag: W/"328-5af941c3f0c6e"
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery.min.1.7.js

5.9.8.16

200 OK

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/flipbook/extras/jquery.min.1.7.js
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /flipbook/extras/jquery.min.1.7.js HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 04:05:45 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 03:41:50 GMT
etag: W/"609c9ffe-16f44"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

tafilarakia.ikaros.xn--qxam/data/2-regions.json

5.9.8.16

404 Not Found

0 B

URL HTTP/2
tafilarakia.ikaros.xn--qxam/data/2-regions.json
IP
5.9.8.16:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /data/2-regions.json HTTP/1.1
Host: tafilarakia.ikaros.xn--qxam
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://tafilarakia.ikaros.xn--qxam/
Cookie: _ga=GA1.2.533812117.1670472345; _gid=GA1.2.1869748508.1670472345; _gat_gtag_UA_144220429_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Thu, 08 Dec 2022 04:05:46 GMT
content-type: text/html
last-modified: Fri, 18 Sep 2020 10:39:07 GMT
etag: W/"328-5af941c3f0c6e"
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (14)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations