Overview

URL captaincosta.es/vub-banka/
IP192.124.249.139
ASNSUCURI-SEC
Location United States
Report completed2022-10-02 20:57:58 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-10-02 2 captaincosta.es/vub-banka/ Intesa Sanpaolo
2022-10-02 2 captaincosta.es/vub-banka/ Intesa Sanpaolo
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-02 2 captaincosta.es/vub-banka/ Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/1(1) Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9 Phishing
2022-10-02 2 captaincosta.es/vub-banka/ Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9(2) Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9(5) Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9(3) Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9(4) Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/documents Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/f5278935e5d452dabe1f3ea40ddb94f9.woff2 Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/94d37ef1dd0d7e7312a3d06bea4df36a.ttf Phishing
2022-10-02 2 captaincosta.es/vub-banka/page/92ddf6b1d7b9c73d1e800f5b79d5bea6.woff2 Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (11)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-02 15:44:45 UTC 93.184.220.29
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-02 05:00:42 UTC 13.33.243.115
mnemonic passive DNS ocsp.entrust.net (2) 1208 2013-07-24 12:09:14 UTC 2022-10-02 10:32:58 UTC 104.110.10.32
mnemonic passive DNS r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-10-02 05:33:45 UTC 23.36.76.226
mnemonic passive DNS ocsp.godaddy.com (1) 698 2012-05-20 19:28:57 UTC 2022-10-02 05:06:10 UTC 192.124.249.36
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-02 04:45:21 UTC 34.117.237.239
mnemonic passive DNS ib.vub.sk (3) 836970 2014-01-18 09:13:11 UTC 2022-10-01 09:33:41 UTC 193.227.213.42
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-02 10:20:02 UTC 44.237.51.86
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-02 11:24:29 UTC 34.120.237.76
mnemonic passive DNS captaincosta.es (15) 0 2019-12-25 18:12:08 UTC 2022-10-02 16:56:16 UTC 192.124.249.139 Unknown ranking
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-10-02 16:25:36 UTC 65.9.86.127


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 192.124.249.139

Date UQ / IDS / BL URL IP
2022-10-14 06:24:38 +0000
0 - 0 - 2 austindentalplusny.com/5m5f6/krobb-25.zip 192.124.249.139
2022-10-12 22:01:31 +0000
0 - 0 - 1 yourtownebuilders.com/wp-admin/css/sumary/aut (...) 192.124.249.139
2022-10-12 17:40:06 +0000
0 - 0 - 2 austindentalplusny.com/5m5f6/olivia.jones-37.zip 192.124.249.139
2022-10-12 13:17:10 +0000
0 - 0 - 3 visual-technology.com/lotw/avagarcia-31.zip 192.124.249.139
2022-10-12 11:31:29 +0000
0 - 0 - 1 yourtownebuilders.com/wp-admin/css/sumary/aut (...) 192.124.249.139

Last 5 reports on ASN: SUCURI-SEC

Date UQ / IDS / BL URL IP
2022-11-27 09:07:23 +0000
0 - 0 - 4 integra-eg.com/ 192.124.249.125
2022-11-27 06:03:07 +0000
0 - 0 - 2 powercontinuity.co.uk/0/xathen2019/PayPal/app (...) 192.124.249.104
2022-11-26 22:53:14 +0000
0 - 0 - 18 www.7starservice.com/ 192.124.249.52
2022-11-26 16:07:14 +0000
0 - 0 - 2 miamijetskirental.com/ 192.124.249.18
2022-11-26 00:29:09 +0000
0 - 0 - 18 israelandantisemitism.com/ 192.124.249.62

Last 1 reports on domain: captaincosta.es

Date UQ / IDS / BL URL IP
2022-10-02 20:57:58 +0000
0 - 0 - 14 captaincosta.es/vub-banka/ 192.124.249.139

Last 1 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-10-01 09:33:51 +0000
0 - 0 - 13 challenge-eg.org/wp-content/vub/ 192.254.234.51


JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (38)


Request Response
                                        
                                            GET /vub-banka/ HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         192.124.249.139
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 02 Oct 2022 20:57:47 GMT
Content-Length: 162
Connection: keep-alive
X-Sucuri-ID: 19039
Location: https://captaincosta.es/vub-banka/


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Alerts:
  Blocklists:
    - openphish: Intesa Sanpaolo
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         65.9.86.127
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 20:16:50 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 2bf8812c27f5e451eba4aef5c1aff6ae.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: YnXVmklLjcXKwrn4T6uRHIV_f_pGZtDxbjUG9T7Q4hs0e_azCJROhw==
Age: 2457


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2259
Expires: Sun, 02 Oct 2022 21:35:26 GMT
Date: Sun, 02 Oct 2022 20:57:47 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.33.243.115
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 6e524269fea3a56b0e037fecde237b36.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL50-C1
x-amz-cf-id: 2BK77JVykhPZ1e68g7LHKdeNoaXlOAbeJi2ylblx_vHpha1ZwUrp7g==
age: 55760
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         192.124.249.36
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 02 Oct 2022 20:57:47 GMT
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 01 Oct 2022 22:53:13 GMT
Expires: Sun, 02 Oct 2022 22:53:13 GMT
ETag: "7d9e8e375e939ef03836563ba63f37b112a6fdb3"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    e5dcfb38117a105ee72c58af2305f9e7
Sha1:   7d9e8e375e939ef03836563ba63f37b112a6fdb3
Sha256: 1a68f5de4bc3edc28c7e3cf40d09e10fc13d3df5557ee75b6986c016e439d1f0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:47 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /vub-banka/page/external.css HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 32761
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:12:00 GMT
etag: "6b80090-4e0ed-5e99a23e50400-br"
vary: Accept-Encoding
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   32761
Md5:    9a89401a2e317ac93c4982919faca1dd
Sha1:   026a0b70c5a0cdf31b4b6dfa1e4567e6ff7eda77
Sha256: 838f5320f3a0205e1b04013fc9caa212161062fabc3e92c73bb225973df413a5
                                        
                                            GET /vub-banka/page/entrust_site_seal_xs.png HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 2371
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:12:00 GMT
etag: "6b8008c-943-5e99a23e50400"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 52 x 52, 8-bit/color RGBA, interlaced\012- data
Size:   2371
Md5:    11e62d4b07a356b2efb2fc2cc0a4ad23
Sha1:   704ce5f8d6af20f3a6b8923d96ce7be89a70ce0f
Sha256: a0df655a3bd1e698354e98709c2d10bce146ebfadbef75e95a8fc7c96ea79f40
                                        
                                            GET /vub-banka/page/1(1) HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 1
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:12:02 GMT
etag: "6b80067-0-5e99a24038880-br"
vary: Accept-Encoding
content-encoding: br
x-sucuri-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1
Md5:    eccbc87e4b5ce2fe28308fd9f2a7baf3
Sha1:   77de68daecd823babbb58edb1c8e14d7106e83bb
Sha256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9 HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 1
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:12:02 GMT
etag: "6b8006c-0-5e99a24038880-br"
vary: Accept-Encoding
content-encoding: br
x-sucuri-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1
Md5:    eccbc87e4b5ce2fe28308fd9f2a7baf3
Sha1:   77de68daecd823babbb58edb1c8e14d7106e83bb
Sha256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /vub-banka/ HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         192.124.249.139
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
vary: Accept-Encoding
x-sucuri-cache: HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4722), with CRLF line terminators
Size:   37211
Md5:    fe9eb976d3526afbc1571ffab87f3a4a
Sha1:   a01ff5aa3d4de622ae41f2ccce605652303e102c
Sha256: 95a353901d9a65fae352d74aaa0183a51a8cdcd5d799d06a354ae33d3785d8b4

Alerts:
  Blocklists:
    - openphish: Intesa Sanpaolo
    - fortinet: Phishing
                                        
                                            GET /vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9(2) HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 1
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:12:02 GMT
etag: "6b8006f-0-5e99a24038880-br"
vary: Accept-Encoding
content-encoding: br
x-sucuri-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1
Md5:    eccbc87e4b5ce2fe28308fd9f2a7baf3
Sha1:   77de68daecd823babbb58edb1c8e14d7106e83bb
Sha256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9(5) HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 1
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:12:02 GMT
etag: "6b8007b-0-5e99a24038880-br"
vary: Accept-Encoding
content-encoding: br
x-sucuri-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1
Md5:    eccbc87e4b5ce2fe28308fd9f2a7baf3
Sha1:   77de68daecd823babbb58edb1c8e14d7106e83bb
Sha256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9(3) HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 1
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:12:02 GMT
etag: "6b80072-0-5e99a24038880-br"
vary: Accept-Encoding
content-encoding: br
x-sucuri-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1
Md5:    eccbc87e4b5ce2fe28308fd9f2a7baf3
Sha1:   77de68daecd823babbb58edb1c8e14d7106e83bb
Sha256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /vub-banka/page/2c994055703f0ed6d63ad4c1aaf893c9(4) HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 1
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:12:02 GMT
etag: "6b80075-0-5e99a24038880-br"
vary: Accept-Encoding
content-encoding: br
x-sucuri-cache: EXPIRED
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1
Md5:    eccbc87e4b5ce2fe28308fd9f2a7baf3
Sha1:   77de68daecd823babbb58edb1c8e14d7106e83bb
Sha256: 4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /vub-banka/page/documents HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:12:00 GMT
etag: "6b8008b-6ee30-5e99a23e50400-br"
vary: Accept-Encoding
content-encoding: br
x-sucuri-cache: EXPIRED
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 675 x 450\012- data
Size:   904043
Md5:    49d01fd51cd395f4b8fc16ed8ba8bfc4
Sha1:   2f01d1bc3e00eea343e30dc0bd2c3ae3648433ff
Sha256: c57005f4ada7a1709c8e83d461655b1b0dc75222ebe4b7b3de309aa639cd45e4

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /vub-banka/page/f5278935e5d452dabe1f3ea40ddb94f9.woff2 HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/page/vub.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
content-type: font/woff2
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 46616
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:29:56 GMT
etag: "6b80094-b618-5e99a64077900"
vary: Accept-Encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 46616, version 1.655\012- data
Size:   46616
Md5:    f5278935e5d452dabe1f3ea40ddb94f9
Sha1:   4aa053946ae1cb540942cca71ca7ef584336136a
Sha256: 45f65ae82107427f1dbaf04abff5f997f8c6253409bad7e0db8f4d8be4feac85

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /vub-banka/page/94d37ef1dd0d7e7312a3d06bea4df36a.ttf HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/page/vub.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
content-type: font/ttf
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 57135
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:30:20 GMT
etag: "6b80082-1a8ec-5e99a6575af00-br"
vary: Accept-Encoding
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Size:   57135
Md5:    6ae301d7a450a81a40a61b0f1591a627
Sha1:   55f52658a78447cd26f2806b2ccaa4a5bc8f5531
Sha256: b61c9c81f3525fadc7addb8fc58a18575249464a237ba075a8add2f835f2cc3d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /vub-banka/page/92ddf6b1d7b9c73d1e800f5b79d5bea6.woff2 HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/page/vub.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
content-type: font/woff2
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
content-length: 36484
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 Sep 2022 20:30:06 GMT
etag: "6b80080-8e84-5e99a64a00f80"
vary: Accept-Encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 36484, version 1.655\012- data
Size:   36484
Md5:    92ddf6b1d7b9c73d1e800f5b79d5bea6
Sha1:   8a3750ebcccc551a69459d4c773901f8110e5a23
Sha256: 1a359520a00657c09d7a3ff7bfcd6cb0fbc131b3fa1b71910b6c174f9fc9895e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         65.9.86.127
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Sun, 02 Oct 2022 20:29:34 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 02 Oct 2022 20:57:58 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5e828cc6ff056cb59ec35c3467ec45f4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: AMS1-C1
X-Amz-Cf-Id: 4I-QQlfP1bgPVw2py8mBYjH3Z6JxmT0g7DADeAL5pIc4NdKpYPAf-w==
Age: 1695


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "BBF35B072A805C6421B6FFB0988B97CBFA86876717C2A6E070B5E9513DBA05B6"
Last-Modified: Sun, 02 Oct 2022 11:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3592
Expires: Sun, 02 Oct 2022 21:57:40 GMT
Date: Sun, 02 Oct 2022 20:57:48 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1588
Md5:    c5a7bb76876442e073afcfdf41c80ae6
Sha1:   37284ff36e2c7ac1bedc46db5d179dd559d93110
Sha256: bbf35b072a805c6421b6ffb0988b97cbfa86876717c2a6e070b5e9513dba05b6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.entrust.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.110.10.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
ETag: "013289646FB0418E65143BD964A725401FE323994B607DAB50E1F591EBB439D2"
Last-Modified: Sun, 02 Oct 2022 10:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=2415
Expires: Sun, 02 Oct 2022 21:38:03 GMT
Date: Sun, 02 Oct 2022 20:57:48 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1585
Md5:    187121ebf7ab837434da3533d6b22dea
Sha1:   45c0bdfbb43882a6061b1016743be738b8176243
Sha256: 013289646fb0418e65143bd964a725401fe323994b607dab50e1f591ebb439d2
                                        
                                            GET /pmchc/in/e7f6f095126abacc08bb6ce05a488c80/8/2c994055703f0ed6d63ad4c1aaf893c9 HTTP/1.1 
Host: ib.vub.sk
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         193.227.213.42
HTTP/1.1 200 OK
Content-Type: text/plain
                                        
Date: Sun, 02 Oct 2022 20:57:48 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, no-store, proxy-revalidate, no-transform, must-revalidate
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5937
Cache-Control: 'max-age=158059'
Date: Sun, 02 Oct 2022 20:57:48 GMT
Last-Modified: Sun, 02 Oct 2022 19:18:51 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /nibr/public/45.5.0.53-181573/favicon_vub.ico HTTP/1.1 
Host: ib.vub.sk
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         193.227.213.42
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sun, 02 Oct 2022 20:57:48 GMT
Last-Modified: Fri, 09 Sep 2022 09:20:58 GMT
ETag: "57e-5e83b1050d280"
Accept-Ranges: bytes
Content-Length: 1406
Cache-control: public,max-age=31536000
Vary: Accept-Encoding
Server-Timing: dtSInfo;desc="0", dtRpid;desc="1641896201"
Keep-Alive: timeout=30, max=1200
Connection: Keep-Alive
X-Frame-Options: Sameorigin
Set-Cookie: dtCookie=v_4_srv_1_sn_410120291D8937518674A50D415C015F_perc_100000_ol_0_mul_1_app-3A53f12d3afb172789_0; Path=/; Domain=.vub.sk nib=rd4o00000000000000000000ffffc0a86626o443; path=/; Httponly; Secure f5avraaaaaaaaaaaaaaaa_session_=DGOBPIKBHBHCAMEKBGOIGBDGAOCKOCNCCJHEINNAEMJIJJBHDEOHNLINDKNMDEDODPEDBNGILKCNKBBPAFMAFBBFGPMLLDDPIPAAMNBBKKJDELODBOBPKJMOEJKIONIB; HttpOnly; secure TS019ac156=01a17e8488ab7f91e49d001d4f91ee385adf438a6ce5fbe8ac43bf083f8f39fbcd8417f0aa7a862662a6582a7ca3d686b1e95e34707c1802be4d1eddafc92c01053d85f033cf362944744e7851f074b476a367d9b9f9e8cb612cfc9d87f5bf6e9eef6e55a0; Path=/; Domain=.ib.vub.sk; Expires=Sun, 02-Oct-2022 21:07:48 GMT


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Size:   1406
Md5:    991223f12383607c4717de27c561180b
Sha1:   d52f5028319565bec36e729bf9d899b5e68e2c1d
Sha256: bed01858c7ebdba86158e42179033eb53c1dcdf93d2967cce83d1f6e25d4f2a9
                                        
                                            GET /nibr/public/45.5.0.53-181573/apple-touch-icon_vub.png HTTP/1.1 
Host: ib.vub.sk
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         193.227.213.42
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 02 Oct 2022 20:57:48 GMT
Last-Modified: Fri, 09 Sep 2022 09:20:58 GMT
ETag: "6185-5e83b1050d280"
Accept-Ranges: bytes
Content-Length: 24965
Cache-control: public,max-age=31536000
Vary: Accept-Encoding
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-377164822"
Keep-Alive: timeout=30, max=1199
Connection: Keep-Alive
X-Frame-Options: Deny
Set-Cookie: dtCookie=v_4_srv_1_sn_9340CF22C38EB79294E4F388036B8B4E_perc_100000_ol_0_mul_1_app-3A53f12d3afb172789_0; Path=/; Domain=.vub.sk nib=rd4o00000000000000000000ffffc0a86625o443; path=/; Httponly; Secure f5avraaaaaaaaaaaaaaaa_session_=IDLMDCDKEDIDHBIILCDCBFHMEGOHLNIEALLHIHIINMGLKALNNDHOBNANCIOLPPNCEGCDOGJDLKPDCAAAKNFAIPFNGPHHMDGIJEKCLDKIPADJAOFIANMCKNPNFOJFNGPE; HttpOnly; secure TS019ac156=01a17e8488702a6ad5c085af31ffce84d20276d730b109b530723f473effb5f58ff84c2c8b712e5e522a79d156379a9b94bec7c396ddad9d13c1e0bb9d5fb04ebeb499496f94705b858d185eef554745c0477b1db8f9920969a3fd0d22808bd4cd72362595; Path=/; Domain=.ib.vub.sk; Expires=Sun, 02-Oct-2022 21:07:48 GMT


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   24965
Md5:    0dbf60ec3227ee81fef6e0328aaa1a84
Sha1:   d0df0db83f9500e702dd3f4b42ae5a9548ef58fc
Sha256: 604503fb474ceb86efac999e757f303c02b225bd9cbc68f9825f8b5ceef2a09b
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IobIolD0zwWYpUUe2LYYAQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         44.237.51.86
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: shk2U6QGsfooeo358Q4C9NavwKo=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9766
Expires: Sun, 02 Oct 2022 23:40:35 GMT
Date: Sun, 02 Oct 2022 20:57:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9766
Expires: Sun, 02 Oct 2022 23:40:35 GMT
Date: Sun, 02 Oct 2022 20:57:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9766
Expires: Sun, 02 Oct 2022 23:40:35 GMT
Date: Sun, 02 Oct 2022 20:57:49 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9766
Expires: Sun, 02 Oct 2022 23:40:35 GMT
Date: Sun, 02 Oct 2022 20:57:49 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11083
x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHRFWfIAMFhlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:53:35 GMT
etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff"
age: 83054
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11083
Md5:    edded48f558f739287a040151349ef67
Sha1:   d63b6ba630736d32c364b0e6a369274b2389b7ff
Sha256: 33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:39 GMT
age: 58570
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F589e050c-3794-45f2-a218-269b944ae739.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9600
x-amzn-requestid: e83a86d3-f5ab-4645-92df-4b2da3d4afa3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDgmFdlIAMFzQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2d0-48c3fa150800475c790b95bd;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: f1aqkuvCub_vq9gBDgA4VL8hNf16FXzXhQjSHC1yDLISm85uOqJF9w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:54:50 GMT
etag: "fa7e61b4f2864b8e51acb2cc887c15d5cb41ef38"
age: 82979
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9600
Md5:    11f2e40823827b62bca89d18ee279cb2
Sha1:   fa7e61b4f2864b8e51acb2cc887c15d5cb41ef38
Sha256: c7811cb947483a033f31ff1e93b813f1bbc49b03ed78fcedab2090c71e5c4d1f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4987
x-amzn-requestid: 763edd04-7f8d-42ae-8864-482be3549958
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHpFs4oAMFbqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ca-2f7b67e85aa83b69183e62b5;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2Zoggf30lA-Kvt5QYa-IdhGePHCNiphR7pfFiOaFvL8ZkWZIaiK4pA==
via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:54:45 GMT
etag: "2e533332ee5c49143e58dad32ee3717a39179532"
age: 82984
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4987
Md5:    463bdcfbec5426e18ecef83b1c373b71
Sha1:   2e533332ee5c49143e58dad32ee3717a39179532
Sha256: 2c40befd28781482b9be249a792571612d68d7045324083d2c832fa5ec42f04b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18b1ba6d-ca56-4474-afa8-cd3b53cce28e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9340
x-amzn-requestid: e892265e-836d-4638-871f-0548eda57745
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf8FCEoAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-7f39bb92066a75a90868dd03;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Sk1Dahp1gliiBIghSCZselE7-Fy45svrCk7TdmunOwNefSNqY1P1jA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:47:23 GMT
age: 83426
etag: "6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9340
Md5:    6047192460abf4afd600948abb5e6ee1
Sha1:   6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4
Sha256: d1fd21a5913f6831d2128c8e9e84767d9730bf9e779da5395dc31b82a10e32e9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d657f8a-70bc-42c6-9aae-1127c4403047.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8602
x-amzn-requestid: 89329169-bc7a-46b1-85fc-20383a85cae8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf9GxzoAMFg0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-27952f8357fa25c956b1cd72;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: YDfn3Xd8m6jaBrj_M9hs4dePku_eEhJbYv3NJSHjCdAWifhBkiKUhw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:53:38 GMT
age: 83051
etag: "5d3389a965cfa45dab2202d89b40264368674e8a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8602
Md5:    94d82ad8d70761f6ee1384b4183335f3
Sha1:   5d3389a965cfa45dab2202d89b40264368674e8a
Sha256: ad495dc0ede3bfcbaebfd3bf2eb55fc5596cd7643a539e030ccce0b8a3bcf8dd
                                        
                                            GET /vub-banka/page/vub.css HTTP/1.1 
Host: captaincosta.es
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://captaincosta.es/vub-banka/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         192.124.249.139
HTTP/2 200 OK
content-type: text/css
                                        
server: nginx
date: Sun, 02 Oct 2022 20:57:48 GMT
x-sucuri-id: 19039
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
last-modified: Tue, 27 Sep 2022 17:06:50 GMT
etag: "6b8009f-da66d-5e9abab873e80-br"
vary: Accept-Encoding
content-encoding: br
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: HIT
X-Firefox-Spdy: h2


--- Additional Info ---