Overview

URL189.127.173.52/
IP 189.127.173.52 (Brazil)
ASN#270712 TOTAL FIBRA INTERNET EIRELI I
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-02 21:13:12 UTC
StatusLoading report..
IDS alerts1
Blocklist alert38
urlquery alerts No alerts detected
Tags None

Domain Summary (10)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (8) 344 2020-12-02 08:52:13 UTC 2023-02-02 04:09:15 UTC 23.36.77.32
ocsp.pki.goog (9) 175 2017-06-14 07:23:31 UTC 2023-02-02 04:09:06 UTC 142.250.74.99
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-02 04:10:44 UTC 54.200.107.47
fonts.gstatic.com (3) 0 2014-04-02 10:51:04 UTC 2023-02-02 07:34:01 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-02-02 04:09:26 UTC 34.120.237.76
fonts.googleapis.com (2) 8877 2012-05-23 12:41:44 UTC 2023-02-02 08:36:04 UTC 142.250.74.74
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-02 04:09:02 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-02 04:10:44 UTC 34.160.144.191
189.127.173.52 (38) 0 No data No data 189.127.173.52 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-02 04:09:20 UTC 34.117.237.239

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-02-02 21:13:29 UTC 2  189.127.173.52 Client IP ET COMPROMISED Known Compromised or Hostile Host Traffic group 108 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed
2023-02-02 2 189.127.173.52 Sinkholed

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 189.127.173.52
Date UQ / IDS / BL URL IP
2023-02-02 21:13:12 +0000 0 - 1 - 38 189.127.173.52/ 189.127.173.52
2023-01-07 20:16:54 +0000 0 - 1 - 38 189.127.173.52/ 189.127.173.52


Last 2 reports on ASN: TOTAL FIBRA INTERNET EIRELI I
Date UQ / IDS / BL URL IP
2023-02-02 21:13:12 +0000 0 - 1 - 38 189.127.173.52/ 189.127.173.52
2023-01-07 20:16:54 +0000 0 - 1 - 38 189.127.173.52/ 189.127.173.52


Last 2 reports on domain: 189.127.173.52
Date UQ / IDS / BL URL IP
2023-02-02 21:13:12 +0000 0 - 1 - 38 189.127.173.52/ 189.127.173.52
2023-01-07 20:16:54 +0000 0 - 1 - 38 189.127.173.52/ 189.127.173.52


Last 1 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-07 20:16:54 +0000 0 - 1 - 38 189.127.173.52/ 189.127.173.52

JavaScript

Executed Scripts (14)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (71)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14746
Expires: Fri, 03 Feb 2023 01:18:47 GMT
Date: Thu, 02 Feb 2023 21:13:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3974208CE1840F6C9467287B7E220379ED881D76DB64939F411DBC500C103D48"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12682
Expires: Fri, 03 Feb 2023 00:44:23 GMT
Date: Thu, 02 Feb 2023 21:13:01 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 20:43:31 GMT
age: 1770
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15705
Expires: Fri, 03 Feb 2023 01:34:46 GMT
Date: Thu, 02 Feb 2023 21:13:01 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: QV2nqNXYMKFmCLse6b4ozT4VqsfLvrWtdJoapQYfES2qnKmW1j+KEwjLWISK3m1Orkwhft/xgNg=
x-amz-request-id: Z2WSH20ASV7YJ26R
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 20:52:07 GMT
age: 1254
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET / HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 02 Feb 2023 21:13:01 GMT
Server: Apache/2.4.53 (Debian)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4688
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (311), with CRLF, LF line terminators
Size:   4688
Md5:    899b0dda5b92c8b0efb1cdf6bcf86567
Sha1:   c90350f40db653a6f249212d3c3f42a8e2bfb67a
Sha256: d7a59b26dfb448996f98845e4a5a40cb681ff1d0dc7b863d957651b041a775d0

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 02 Feb 2023 21:13:01 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /assets/css/animate.min.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:01 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:56 GMT
ETag: "e283-5e1989c3bda00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4324
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (57790)
Size:   4324
Md5:    ee777e634ba2463f5f4a161dde14dcbe
Sha1:   a4ecf77a2c47390e3aecb2b912130cbcc421733e
Sha256: cd82447b75b27668be76ec8b86546aafabdc1ddf952e07bcf8f25ef7387fa21f

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 20:49:05 GMT
age: 1437
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /assets/css/fontawesome.min.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:57 GMT
ETag: "d711-5e1989c4b1c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12057
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (54872)
Size:   12057
Md5:    68bedd5eddfc48208f4524dc1a174edb
Sha1:   658c4c2a612b8e841f4cacff69c665d5cd2bd631
Sha256: 4208d828d5cf3fd7e5c9789cc8add4b71abd5613c2115ef2e8d7e69e2030fb0f

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/css/meanmenu.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:57 GMT
ETag: "c0d-5e1989c4b1c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 971
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   971
Md5:    8a1ea21a06b9cbfedb3577470f4b9eae
Sha1:   5f61acf726d15c69481181d467447625b2e1d573
Sha256: 72f4b9b49e2c6eddf7f007975d5f1cb7c59a1baef32ab821f7dec898e99ff057

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/css/nice-select.min.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:57 GMT
ETag: "c0e-5e1989c4b1c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 926
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (3086), with no line terminators
Size:   926
Md5:    e072d1fad0b125bf80db3c6039d3bdcd
Sha1:   5ed02224cb23a2e44d334208a673fdcceb9f27d6
Sha256: aa0340e65901d580f457dadc6c561dee374c910e09d3da02055736b21a170c0e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/css/bootstrap.min.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:01 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:57 GMT
ETag: "2606e-5e1989c4b1c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 23238
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65324)
Size:   23238
Md5:    3b5537dce96f57098998e410b0202920
Sha1:   7732b57e4e3bbc122d63f67078efa7cf5f975448
Sha256: a1c54426705d6cef00e0ae98f5ad1615735a31a4e200c3a5835b44266a4a3f88

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/css/owl.carousel.min.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:57 GMT
ETag: "1068-5e1989c4b1c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1284
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (3185)
Size:   1284
Md5:    b03a894c10a584ef50a759ca747d108a
Sha1:   14d8bf21b7ce53ebe5c6b6a937bbc6101664411e
Sha256: 7bdce6f0d52177d3615e2b1a1798319d00dc05e1a4e019d0604ff812ce912865

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20027
Expires: Fri, 03 Feb 2023 02:46:49 GMT
Date: Thu, 02 Feb 2023 21:13:02 GMT
Connection: keep-alive

                                        
                                            GET /assets/css/responsive.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:57 GMT
ETag: "6c14-5e1989c4b1c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3838
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   3838
Md5:    d1afa3d8984ec5f0f1cfda8fb0556fd8
Sha1:   e456570f075e2934a23f37cc40a436c635b58c6d
Sha256: 00627c319cc61b3a9cd1c7f2f784f1485c048f5de23aee5e5a8884f208cf7e33

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/popper.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "520b-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7456
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (20831)
Size:   7456
Md5:    7a9ebcec68d45170ea14d25d99b335b0
Sha1:   9aaab0fcbdab1e6461ef0ede92bb35e13928561f
Sha256: 41f429e4a748bf2e44693d3b8800d75b3e431b2ccf51cc83a7b71751d4af8ff1

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/css/style.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Wed, 22 Jun 2022 20:01:03 GMT
ETag: "1d0dc-5e20ecbf7fdc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14051
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (532)
Size:   14051
Md5:    250b36745372a307bf3763c236131a8b
Sha1:   647d85c8bdb2e09954d4498da98f6fc8ce63234b
Sha256: 1c996735b1f3f7e9b348da8468daf12a335b14a9aa71e7536516f6ea1fb29a33

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/bootstrap.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:00 GMT
ETag: "e2da-5e1989c78e300-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15438
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (57792)
Size:   15438
Md5:    5b7b54f72077a8fbccc1ca1c7d28e9d6
Sha1:   3ca09512af480939c550ddc16b9b6ff841af5748
Sha256: 733693a44840948d0b014e3429d6b8d1e88f98aada321556c72a5d32b18a415d

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/jquery.meanmenu.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "1732-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1608
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (397)
Size:   1608
Md5:    2e0174334d0bd2210e2418d4d9dc7dbb
Sha1:   b8295253bcc0755fa9b4a9d1386a5a42493de783
Sha256: 34357b531e5341274d28d6a623cf8cca19ff8bb5e8afcf55892e0d58056b6636

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.99
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.99
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 51l2b8Si5smNbmSkGfdTmw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.200.107.47
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8RFLFVVL/ea4OOZMiCrhsqavmf4=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.99
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/js/jquery.magnific-popup.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "4ef8-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7346
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (20087)
Size:   7346
Md5:    efa6db60af1529649bd3b95c4220e9ba
Sha1:   4b6b8cd07ee784e67c7702c147e0c80e0bb3bd90
Sha256: 5723d10c2697c434b25b904f2fcec179ad231ccaebc4c77daa7732c7949a1e99

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/jquery.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "14985-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 29537
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32029)
Size:   29537
Md5:    9ecbb51e4fe15d7783b6815acc5f4e72
Sha1:   fbed8bc7a65e3497e9d9981a08102d79f4f837f0
Sha256: 3ee327a6113037f977a04b9b9e208f741895c67823f23ac5032153335a9fe1fd

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/owl.carousel.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "ad36-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 11412
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (31997)
Size:   11412
Md5:    147ac1c530c19c721f2f08015355831f
Sha1:   36666c04ebfd91eb34a2bccfd77d5921f149719e
Sha256: ad388396f2600caf304c74c3255d0cb91ec3eb6979eece045c096b4b8f0e0f3c

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/parallax.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "33a5-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4001
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (597)
Size:   4001
Md5:    10a3098cb8edbbacc13ac4094ffd9d3c
Sha1:   9726d120eba116022da7834b032fa97a0b125ca5
Sha256: 26f84de9ca575cc88332eeb78a014412682e1fc314bcc9d096521734e19a95d3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/jquery.nice-select.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "b7e-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1036
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (2822)
Size:   1036
Md5:    45ae1605b17ed145576a973d6779e979
Sha1:   841a35142dceac20f894809ec068544413e03c30
Sha256: 80261cfa5544a8c0a6849419a0bc94e7b7bdd5625a046cde5b57691ff82346b1

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/wow.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "1ff6-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2702
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (8152)
Size:   2702
Md5:    78065f91523af060141b9abfb707107b
Sha1:   40a8615f9546bdc72a99284de32fcbf1073e1db8
Sha256: 7dc2c443deb9a15d8e3154397a0e5c15c56022147ef3d211b9147b566cd58d59

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/jquery.ajaxchimp.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "94d-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 939
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (2381), with no line terminators
Size:   939
Md5:    1c157aa7cdf20ef979ba469afff5377b
Sha1:   64ae54010d36d749a6f9724040072841d2ff95e8
Sha256: d0957fed84330d67f9e748e79ee29587d50a854fac4865c535872c407c0b6faa

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/form-validator.min.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:00 GMT
ETag: "17a7-5e1989c78e300-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2096
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (5862)
Size:   2096
Md5:    daf326aa9fbde756f335fbc71417788e
Sha1:   be9640e9aae5d417ae507b49b30c302a16ea7873
Sha256: b92f07acf3cf2db9877fa68276a1a31627eede240ce8f4f1911117ee61adbd40

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/contact-form-script.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:00 GMT
ETag: "823-5e1989c78e300-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 741
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   741
Md5:    fc185e4df5ac87b40400bc96ede6a058
Sha1:   d1f507a2791b83be82da44174477e3042fa82ca4
Sha256: aefcc5355b2cb5e0c11b8bd55d6d10410fae9c8e910c41f9ff1f26fc8bbea693

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/bahama-map.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:59 GMT
ETag: "377-5e1989c69a0c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 382
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   382
Md5:    9f65767febfe3fd7bcb29d07b2681031
Sha1:   0434b64879d14dc4f5ccf930a07057c58dc52bfd
Sha256: fca5f3307f2e27be162edc292f06782b1e8b4abfa6653a1493a9794777fbc6c9

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/js/main.js HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:01:01 GMT
ETag: "2946-5e1989c882540-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2778
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   2778
Md5:    f004e4fa60a3ed48bd7f1bbddb843a00
Sha1:   1b1cc583a15b7524b51cdb7252084101496b2206
Sha256: 01fa38965b640e05eec17d8dc54442e1e5ca265330baa4b5b802939b7206da56

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/css/magnific-popup.min.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:02 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:57 GMT
ETag: "148b-5e1989c4b1c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1566
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (5259), with no line terminators
Size:   1566
Md5:    5e3fb66f957e87adb1030748be39ec12
Sha1:   f947937864725452687d58a7546d5ca34843f4cb
Sha256: 123795002a63c52c46c8f57d0c23b0b46757b6f380c7d420388a304b7bf902cb

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/css/flaticon.css HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:57 GMT
ETag: "98e-5e1989c4b1c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 635
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   635
Md5:    04f7cc77079bf66e6b8b2a3c5a7d0f8b
Sha1:   eea088571fc322e874320a2ed057387ac88ebed3
Sha256: 585cead621ec872de71840a6134691275384ed2259cea4085475e9826a96d0d9

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.99
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.99
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.99
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://189.127.173.52
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 07:08:09 GMT
expires: Sat, 27 Jan 2024 07:08:09 GMT
cache-control: public, max-age=31536000
age: 569094
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            GET /s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://189.127.173.52
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35904
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 07:32:21 GMT
expires: Mon, 29 Jan 2024 07:32:21 GMT
cache-control: public, max-age=31536000
age: 394842
last-modified: Mon, 18 Jul 2022 19:34:47 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 35904, version 1.0\012- data
Size:   35904
Md5:    c26b97e7f5bb7a34d190703522d75e16
Sha1:   69d9e5aea0544dbaf9b78c1b65139c03eceece8f
Sha256: 96217f1d27fb909f92b4a6b35a0d3d6775f2f0b4d136d27aee88547d3ed87357
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.99
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.99
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/nunito/v25/XRXX3I6Li01BKofIMNaDRs4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://189.127.173.52
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 10:06:13 GMT
expires: Sat, 27 Jan 2024 10:06:13 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:37:26 GMT
age: 558410
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 37852, version 1.0\012- data
Size:   37852
Md5:    3e234fa0724b4b5b6c5f0bb405055d7d
Sha1:   508857a361080c23b3a3ea6c0c66c36525b7422d
Sha256: fe7839e0dc27d5a668c79b399849d56bc542d9c5dbf2ce2b52c476c6a35a7803
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.99
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/img/logo.png HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Wed, 22 Jun 2022 16:12:11 GMT
ETag: "526d-5e20b997a4cc0"
Accept-Ranges: bytes
Content-Length: 21101
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 290 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   21101
Md5:    5008d3bb46fedd3582042d034c2ee8a6
Sha1:   37d61fc606ca5b1ec39c039ab984c16f21b46db2
Sha256: fc58b19210ccaa3721795cd7724ffa71857076b2021079262d8c1bae082c2392

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/img/shape-image/2.png HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:59 GMT
ETag: "6960-5e1989c69a0c0"
Accept-Ranges: bytes
Content-Length: 26976
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 418 x 246, 8-bit/color RGBA, non-interlaced\012- data
Size:   26976
Md5:    c417d27fa0ce554c8d6199700a00bd53
Sha1:   a2ca44d9aa0bfb30410a83df2be1bc50906c0533
Sha256: eb398562161cabb8520bbeae43117d1e1456a48b11f338614e40cfdeaf78bf3c

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/img/shape-image/1.png HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:59 GMT
ETag: "6ef9-5e1989c69a0c0"
Accept-Ranges: bytes
Content-Length: 28409
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 815 x 634, 8-bit/color RGBA, non-interlaced\012- data
Size:   28409
Md5:    e951cd2df870dce35ab996b664b1c411
Sha1:   fbe9e4c7793a5aa79a20de870c5a9859c9482cbd
Sha256: 30020008c12fa6610d63c552fc9bbc22ed038dc4f9c46e4e5d87d710d8b8a763

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/fonts/Flaticon.woff2 HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://189.127.173.52/assets/css/flaticon.css

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:58 GMT
ETag: "19d0-5e1989c5a5e80"
Accept-Ranges: bytes
Content-Length: 6608
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 6608, version 1.0\012- data
Size:   6608
Md5:    719b8a5a558d43a3bee8fe4969df6900
Sha1:   44629bf5c78784e61bd04551c89e00cf3e889316
Sha256: 1546f1027303a3cb266e830fe0f6835f015755d4d9eda32a46754f61687455ef

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/img/black-bg1.png HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/assets/css/style.css

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:58 GMT
ETag: "8ac6-5e1989c5a5e80"
Accept-Ranges: bytes
Content-Length: 35526
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1920 x 1150, 8-bit/color RGBA, non-interlaced\012- data
Size:   35526
Md5:    ab6c803623edc5d358abf19bd555209d
Sha1:   1271738023644ff861514ac5485d763c88c96e6b
Sha256: f9a6b9be270dcb197e8bf0d398f7f7d723c7250a005412f029a7f89b10e94cce

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14007
Expires: Fri, 03 Feb 2023 01:06:30 GMT
Date: Thu, 02 Feb 2023 21:13:03 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14007
Expires: Fri, 03 Feb 2023 01:06:30 GMT
Date: Thu, 02 Feb 2023 21:13:03 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14007
Expires: Fri, 03 Feb 2023 01:06:30 GMT
Date: Thu, 02 Feb 2023 21:13:03 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14007
Expires: Fri, 03 Feb 2023 01:06:30 GMT
Date: Thu, 02 Feb 2023 21:13:03 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab614ba-4572-4b54-9079-a26b68b1ece7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 15051
x-amzn-requestid: 72a3f2ae-538e-40dc-9496-86c28334ba0d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc6jGTAIAMFy4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb76-72178ed13a2e70d462785b90;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CKTfQzCvXa4oL6Lm2n8Rw_9Uhj69YfgpDTP9s0zoaX5qW1vcqWIXDA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:46:26 GMT
age: 84397
etag: "8fb46b9ca85f2c578eb2a56d0007859183e12209"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15051
Md5:    6bb5b89e738516f4862491eec286bf6d
Sha1:   8fb46b9ca85f2c578eb2a56d0007859183e12209
Sha256: 7f164a37b675bf39f8473392b07a2a383397da003303965fb190fd4f455bb43b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5356
x-amzn-requestid: fef22c83-35a4-4990-9008-af5853f838d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5BEB6oAMFczg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6c-68d3017555c069bc3107d150;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XyDZc0F-b0rxwoS5wvSXBuBfYE7JljMmuXseBjLOBk4HvxU5gE7Oqg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:18:55 GMT
age: 82448
etag: "a7b74d11494fb3254df907e5cc1eead070d84617"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5356
Md5:    7c823f1d6bf1c50d58eb263b85e6e37c
Sha1:   a7b74d11494fb3254df907e5cc1eead070d84617
Sha256: b2706961eb756383e0988dfdb501dc424aea59697aedd1e4a6c294c314a31935
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C1kqthy0eZop0UZfG3_op5xeBOVGiPLYfia4uS1l4-kchEzV6ccE9w==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 07:28:37 GMT
age: 49466
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15857
Md5:    4bb3a6fba496d54cdbbccaf2b9600386
Sha1:   8e30002699e9fbf2047f9ac11a36d2175fc9c591
Sha256: 927bf3a04b011b4e3bc8d8772a3d5813507f7f523312d43627767b64615562f3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9221
x-amzn-requestid: 209c2ad4-7a1f-4867-bf98-4ca8621111a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdTBFv5IAMFgqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc13-1627a9d603c69f7760ad013b;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kAkcQOKAvuq3k-X081MLCqon-cnQJqGryVeE0fwX0a7bcXgJlySIvg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:12:07 GMT
age: 82856
etag: "22847e3926db3e3d5f6b529297a4abe8b377c3a6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9221
Md5:    df4a4906103a8f409c066b1cded71384
Sha1:   22847e3926db3e3d5f6b529297a4abe8b377c3a6
Sha256: 84a14b73b2cc7f4641eaa5539cbee0a109ae2b05cf88d06797a2b00c8d4f0c43
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faab963dd-ee21-4e6c-866b-f8ea6bb88bd9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4863
x-amzn-requestid: 80518d3b-e049-429c-b67d-4f4897ded9c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foetPGPaIAMFlBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9ab21-00e41ad75acd71267a490f52;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 23:58:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Unsu1YKTCfvXjH8mQQXa-yupSZhwKznXaWyaRYAlThq32JbR4OZ0fA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 07:14:53 GMT
age: 50290
etag: "b793c3b6ca95d09a88635aec9eef99d12a1afe42"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4863
Md5:    df1930b96e7ab4f5d4cbf64e473cc957
Sha1:   b793c3b6ca95d09a88635aec9eef99d12a1afe42
Sha256: e5062168e5c4e1c11ebc9c653990e01546c3c60fbb59e49635934bc98e931ce0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0d335250-c4ff-42af-b9c2-48711573ab39.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4814
x-amzn-requestid: 90da23ab-2c54-40ec-8e26-bdf4eeb1e27b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKWFpvoAMFyPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-70c4cb89413ed6bd44731d76;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: htcecPD3kYwCPwPPCqgVuXnCuKo6TTKntzaB2xFID5fvBXpZQe463A==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:59:38 GMT
age: 83605
etag: "b8c7ef73101a497b6c78ad59aafe66a391fdc3fa"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4814
Md5:    86664b4d1fc27ba7b5bff8a245604326
Sha1:   b8c7ef73101a497b6c78ad59aafe66a391fdc3fa
Sha256: e4596faadf14051299036a79632951d90183dd0635293687edef11985799a752
                                        
                                            GET /assets/fonts/fa-regular-400.woff2 HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://189.127.173.52/assets/css/fontawesome.min.css

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:58 GMT
ETag: "34f0-5e1989c5a5e80"
Accept-Ranges: bytes
Content-Length: 13552
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 13552, version 329.-17761\012- data
Size:   13552
Md5:    e6257a726a0cf6ec8c6fec22821c055f
Sha1:   8583a4f0dd12e15a48b3395593307a84d971cc33
Sha256: ccf4db1eeb68c96e05e74f8ebfa75cc60c3a0fed862dae6b0ad85d4e1b5b4e4f

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/img/color-bg1.png HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/assets/css/style.css

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:58 GMT
ETag: "2ef6-5e1989c5a5e80"
Accept-Ranges: bytes
Content-Length: 12022
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1920 x 965, 8-bit/color RGBA, non-interlaced\012- data
Size:   12022
Md5:    621bce527606720e75833c42e16d58c9
Sha1:   00dff6608109a14c19d383fb6db8934f9afd80e8
Sha256: d1c1a40eb324b27dc5030d3d3f054197a15b273f4553e00d97747eb6dde6b1a2

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/fonts/fa-brands-400.woff2 HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://189.127.173.52/assets/css/fontawesome.min.css

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:58 GMT
ETag: "12410-5e1989c5a5e80"
Accept-Ranges: bytes
Content-Length: 74768
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 74768, version 329.-17761\012- data
Size:   74768
Md5:    5e2f92123d241cabecf0b289b9b08d4a
Sha1:   7f6c682ade204e641aed8f471064c56b6eddc263
Sha256: dc64d7192f84497cacad5c10aef682562c24aa6124270f85fe247e223607f3ed

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://189.127.173.52/assets/css/fontawesome.min.css

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:58 GMT
ETag: "12210-5e1989c5a5e80"
Accept-Ranges: bytes
Content-Length: 74256
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 74256, version 329.-17761\012- data
Size:   74256
Md5:    418dad87601f9c8abd0e5798c0dc1feb
Sha1:   a6b003ef506e92d05cde73adf67487d7fd7ec6df
Sha256: f18c486a80175cf02fee0e05c2b4acd86c04cdbaecec61c1ef91f920509b5efe

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/img/about-img1.png HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:58 GMT
ETag: "b79bb-5e1989c5a5e80"
Accept-Ranges: bytes
Content-Length: 752059
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 680 x 385, 8-bit/color RGBA, non-interlaced\012- data
Size:   752059
Md5:    29f52d159fb54cf0b309d3db4bf7d801
Sha1:   15a768e05e06cbaa687cb2958ca105d2109177c9
Sha256: a29b1695ada21d5f5385c39472cca4b99f5111ecd1c8df0aae3e22a1c06af966

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/img/black-bg3.png HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/assets/css/style.css

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 02 Feb 2023 21:13:04 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:58 GMT
ETag: "10644-5e1989c5a5e80"
Accept-Ranges: bytes
Content-Length: 67140
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1529 x 182, 8-bit/color RGB, non-interlaced\012- data
Size:   67140
Md5:    2bdb893e088979739751b103d8c7314f
Sha1:   cdee0a571d91538716675834355b53cfd1fec056
Sha256: a35db523ac664fe32e8cc8f62a2f267768ea4738aba37c4b69a8ec204d5892ee

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/img/banner-img1.png HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 02 Feb 2023 21:13:03 GMT
Server: Apache/2.4.53 (Debian)
Last-Modified: Thu, 16 Jun 2022 23:00:58 GMT
ETag: "5763b-5e1989c5a5e80"
Accept-Ranges: bytes
Content-Length: 357947
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 845 x 807, 8-bit/color RGBA, non-interlaced\012- data
Size:   357947
Md5:    89ca98b6468fcfefb5fd3aba91e865f1
Sha1:   77b34477005dd8f63c5c0ef84c30df78a93843ed
Sha256: d7d0e21037c311f3b5922ca1692f46a3143832a006f75d0e4e79f6734dae0a97

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/img/favicon.png HTTP/1.1 
Host: 189.127.173.52
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://189.127.173.52/

search
                                         189.127.173.52
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 02 Feb 2023 21:13:04 GMT
Server: Apache/2.4.53 (Debian)
Content-Length: 276
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   276
Md5:    bb5c91bdd5f8ed6a5cd3605a30edd933
Sha1:   440b3c139f0379d15d0d1387e231c2751e47d8c1
Sha256: 0e89c1aba391b50bcdedab074a29334e9c87cfc3ba45db8dfad7d60a7ae3c9b3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://189.127.173.52/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 21:13:02 GMT
date: Thu, 02 Feb 2023 21:13:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Nunito:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://189.127.173.52/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 21:13:02 GMT
date: Thu, 02 Feb 2023 21:13:02 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---