firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 03 Oct 2022 02:03:24 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9f698c14e6527accab310c26bfca2030.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: JT9A6nCcX5UFzNRNU_zP65dZh4xgvccCrWyF6KcKaHMYn6XhZ4WC2A==
Age: 873
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2725
Expires: Mon, 03 Oct 2022 03:03:22 GMT
Date: Mon, 03 Oct 2022 02:17:57 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 04:13:32 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 16ddb516eb340cc6c204abda31318bf8.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P2
x-amz-cf-id: btN8cs-cqLdnS1tOPjNFFLlL1Nwz798HiPSaXz73eO3aKKRfNqVmRw==
age: 81881
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 03 Oct 2022 02:17:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
coin-vestltd.biz/
302 Found 20 B IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/5.6.40
set-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
PHPSESSID=jsn77mvk67nn30aqls2mlgrtf2; path=/; domain=coin-vestltd.biz; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
location: https://coin-vestltd.biz/
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
content-length: 20
content-encoding: gzip
date: Mon, 03 Oct 2022 02:17:57 GMT
server: LiteSpeed
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 03 Oct 2022 01:32:53 GMT
Expires: Mon, 03 Oct 2022 01:44:30 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a455b0542ae02d17ddbe081579777502.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: GlIfCr2LGwiX1wzyg_L9kvXYRU3TBaV-M5wiJ29yWe_kEbdyOt5g2w==
Age: 2705
ocsp.digicert.com/
200 OK 471 B IP
Hash 4eb30b4a4234809cf7d5f89fa1f6ceeb
797242aab2f13c820050aa9accd11b7b950cd177
ce9d833a0ac321a908184b655d6632c481f758a04a9c936a7c303bb253444146
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5520
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 02:17:58 GMT
Last-Modified: Mon, 03 Oct 2022 00:45:59 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: e5+Xkz1qj6u6Z0pWvuZIng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nncMeKbQJtMv8flseMLdQr7T08I=
coin-vestltd.biz/website-widget/v1/widget.js?widgetId=ytWidget&pageLang=en&widgetTheme=light&autoMode=true
404 Not Found 708 B URL HTTP/2 coin-vestltd.biz/website-widget/v1/widget.js?widgetId=ytWidget&pageLang=en&widgetTheme=light&autoMode=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 2382378378c002d88b9a507c712c3349
2e894db3808b554abadc8b144338ad9e2ea937ba
37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa
GET /website-widget/v1/widget.js?widgetId=ytWidget&pageLang=en&widgetTheme=light&autoMode=true HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 708
date: Mon, 03 Oct 2022 02:17:58 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/animate.css/animate.min.css
200 OK 3.7 kB URL HTTP/2 coin-vestltd.biz/assets/libs/animate.css/animate.min.css
IP
File type ASCII text, with very long lines (52592)
Hash b606d51f1e44ac7a9b4f38e09f5a5965
e9ac97db4764f36287d6c63e5ad511b4f22e9093
d0c04f623dcb3a1b54b1d9d02c60d8408e09bc55313b7421946ddadcbaebab0b
GET /assets/libs/animate.css/animate.min.css HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:58 GMT
content-type: text/css
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3733
date: Mon, 03 Oct 2022 02:17:58 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/bootstrap-sweetalert/sweetalert.css
200 OK 2.3 kB URL HTTP/2 coin-vestltd.biz/assets/libs/bootstrap-sweetalert/sweetalert.css
IP
Hash 031ad768aef40b4f0a94976b99b8e77d
f0ff67e1e16e817a7f20f625bed7b9759f4595b9
62cc855fb5c23b537898d84f22356b42bb753130f8aaede75fae77bc28edc225
GET /assets/libs/bootstrap-sweetalert/sweetalert.css HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:58 GMT
content-type: text/css
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2258
date: Mon, 03 Oct 2022 02:17:58 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/ResponsiveTables/ng_responsive_tables.css
200 OK 267 B URL HTTP/2 coin-vestltd.biz/assets/libs/ResponsiveTables/ng_responsive_tables.css
IP
Hash bc1c1bbe15a3b33c165b6c70ac7568ef
bc4f46577da5ebfac01763f82ff5360c4695ec3b
0158aa87c2c018a1ad226f0e55d164c12e3df37811f97bbf471528adb4579dbe
GET /assets/libs/ResponsiveTables/ng_responsive_tables.css HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:58 GMT
content-type: text/css
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 267
date: Mon, 03 Oct 2022 02:17:58 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/
200 OK 24 kB IP
Hash 3e329c6b439be32b6f80ff6d18c6218a
dabe6b90f2088f391094bf939ce66b0c49752e9b
5f01a538f3f790959f7c4997eea118b6be63feadb7cdaf82c1ff19d3ce4d2ee8
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-powered-by: PHP/5.6.40
set-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure
PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2; path=/; domain=coin-vestltd.biz; HttpOnly; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Mon, 03 Oct 2022 02:17:58 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/css/pmain.css
200 OK 12 kB URL HTTP/2 coin-vestltd.biz/assets/css/pmain.css
IP
Hash b48ceaa096a42b58e8fb7dda125f090c
19f718ca1f1505864b004b0b1891fd2fba883c0e
ed926cc19bc5f3fef0d3bfe72ffe44ac8e4a5312b99498f1fccfe36453402efe
GET /assets/css/pmain.css HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:58 GMT
content-type: text/css
last-modified: Sun, 05 Jun 2022 08:39:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11844
date: Mon, 03 Oct 2022 02:17:58 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/magnific-popup/magnific-popup.css
200 OK 1.7 kB URL HTTP/2 coin-vestltd.biz/assets/libs/magnific-popup/magnific-popup.css
IP
Hash 03b0f3835745934343c47a2156262fe1
e99d28783482b3944d07ff3c68e18355c7887ff9
0ebf9903106fcf5bf718fa026aedb96decc0a48a7a9ec2e0dc1cad43119ad9ff
GET /assets/libs/magnific-popup/magnific-popup.css HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:58 GMT
content-type: text/css
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1660
date: Mon, 03 Oct 2022 02:17:58 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/css/custom.css
200 OK 1.2 kB URL HTTP/2 coin-vestltd.biz/assets/css/custom.css
IP
File type ASCII text, with CRLF line terminators
Hash 109852113754aeec051fe636a4c5b290
61c590a69842502d1f53a39e9e0156474858e257
a8b07f13f43e964cc9388e51665622c3287c90bd4c831518a311d827e1896215
GET /assets/css/custom.css HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:58 GMT
content-type: text/css
last-modified: Fri, 15 Dec 2017 05:19:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1237
date: Mon, 03 Oct 2022 02:17:58 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/css/fonts.css
200 OK 312 B URL HTTP/2 coin-vestltd.biz/assets/css/fonts.css
IP
File type ASCII text, with very long lines (307)
Hash 2fdf394fae60bd07ce65b140861e08bd
3a5ba89473675ec5ce93dda41d2518fb77e6c3fc
e85b819f936822308eef07af9a82c1838da37fc47b8c10451cff7dc18b704673
GET /assets/css/fonts.css HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:58 GMT
content-type: text/css
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 312
date: Mon, 03 Oct 2022 02:17:58 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/jquery/dist/jquery.min.js
200 OK 29 kB URL HTTP/2 coin-vestltd.biz/assets/libs/jquery/dist/jquery.min.js
IP
File type ASCII text, with very long lines (32019)
Hash 306a34488241b430e39e7e85999b06a5
0532844489276646f4055e88d362d4b700579ed3
87432fc2b69f766d4e96911a6ca68f0ed23732f40a4e99fde8a2faec9440ffcc
Analyzer Verdict Alert fortinet Phishing
GET /assets/libs/jquery/dist/jquery.min.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2017 03:12:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 29237
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/bootstrap/js/bootstrap.min.js
200 OK 9.6 kB URL HTTP/2 coin-vestltd.biz/assets/libs/bootstrap/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32004)
Hash c6a8edf047d2cc0d0e9083a8e729b358
12b94dc87e5af9c80114388a43b5ac9e90a59f03
2ab5b96d15b9a677e201dd14c9381928e8312fd9c9a24cc37a5ef81d917c9bea
Analyzer Verdict Alert fortinet Phishing
GET /assets/libs/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2017 03:12:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 9611
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/clipboard.js/clipboard.min.js
200 OK 3.2 kB URL HTTP/2 coin-vestltd.biz/assets/libs/clipboard.js/clipboard.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (10491)
Hash 81971b3b110b0ea5315064c51a1cfaf5
2f893e6a655c78c9b28239cba0e4a78645790313
712b86a2d507bdaa49fca78b6017e2b334dc27ac4f473b058630713fbb1691a2
Analyzer Verdict Alert fortinet Phishing
GET /assets/libs/clipboard.js/clipboard.min.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3194
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3d467adf1a87d47c379201eea193d09f
f0d3bb7cd24b2a1c8558bf4fd0a01abfa5adfe7c
c075bcafad83013f1c9f86fde8ed2134b3e556a37a4796bbf8c83e729387d731
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3401
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 03 Oct 2022 02:17:59 GMT
Last-Modified: Mon, 03 Oct 2022 01:21:18 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
coin-vestltd.biz/assets/libs/magnific-popup/jquery.magnific-popup.min.js
200 OK 7.0 kB URL HTTP/2 coin-vestltd.biz/assets/libs/magnific-popup/jquery.magnific-popup.min.js
IP
File type ASCII text, with very long lines (20087)
Hash f5e275bd34668dca4972a4cceccd7907
cba188e35681cd77cfcbd026aac16315747fab12
7874f3927ffd30d189723404d3fb9699e728955b083abeccc9a988890b4b2ede
Analyzer Verdict Alert fortinet Phishing
GET /assets/libs/magnific-popup/jquery.magnific-popup.min.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7043
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/wow/dist/wow.min.js
200 OK 2.5 kB URL HTTP/2 coin-vestltd.biz/assets/libs/wow/dist/wow.min.js
IP
File type ASCII text, with very long lines (8152)
Hash 6dc4028b2e5b31e1b88ff633bc06640a
424ddb4c1753d119ea89def7b949b893fe4e816a
6ae7c97daced295a05d06d1b1cad71823ac97a228303209dced32ee391d9eff3
Analyzer Verdict Alert fortinet Phishing
GET /assets/libs/wow/dist/wow.min.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2017 03:12:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2524
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/matchheight/jquery.matchHeight-min.js
200 OK 1.3 kB URL HTTP/2 coin-vestltd.biz/assets/libs/matchheight/jquery.matchHeight-min.js
IP
File type ASCII text, with very long lines (521)
Hash 67c8c173d91a026e228d36ad0baee4c8
227efe978617466753aabec9caff66ff21e2c889
29ab4ffa9fcdc405834d18364ceecd810ca1e1ca286505342dccb15f9e7ceddd
Analyzer Verdict Alert fortinet Phishing
GET /assets/libs/matchheight/jquery.matchHeight-min.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1254
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/parallax.min.js
200 OK 5.1 kB URL HTTP/2 coin-vestltd.biz/assets/parallax.min.js
IP
File type ASCII text, with very long lines (17272)
Hash 5fbd809f45c165718b9693661e3dc884
068db1cb5677a58b4a69db460b8b1c9dc10196a6
83340c0bc89b2ec3850b9d93e6b7c3824edddcb0d3c337e9b226f3d81436b04c
Analyzer Verdict Alert fortinet Phishing
GET /assets/parallax.min.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Fri, 01 Dec 2017 19:40:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5057
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/img/icons/btc-big.png
200 OK 1.4 kB URL HTTP/2 coin-vestltd.biz/assets/img/icons/btc-big.png
IP
File type PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash 70bc608171248084c07af5cc4ad71754
e79877258780ff2814dd1f4c01ad5d32d35ae3a6
5c2f3790c772e4c01d3f309c800cd230a5d084cb4b1e4dd43e841273eeac8d3b
GET /assets/img/icons/btc-big.png HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: image/png
last-modified: Sun, 26 Nov 2017 03:12:36 GMT
accept-ranges: bytes
content-length: 1447
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/img/logo.png
200 OK 2.1 kB URL HTTP/2 coin-vestltd.biz/assets/img/logo.png
IP
File type PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced\012- data
Hash 4de0408212b8884b1e5816c71fd6a5d3
54013e3a2014b9349260896fbc532c9b00a5288b
139d014bfe8a45d4dd8198da04080b079d0351bb9fc5a2cf1d37bdce045ef520
GET /assets/img/logo.png HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: image/png
last-modified: Sun, 26 Nov 2017 03:12:36 GMT
accept-ranges: bytes
content-length: 2074
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/ResponsiveTables/ng_responsive_tables.js
200 OK 542 B URL HTTP/2 coin-vestltd.biz/assets/libs/ResponsiveTables/ng_responsive_tables.js
IP
Hash 5ba9a34be7e28dd4c228c4f1aac6f9b5
0997461afcefa0c510a0b7fce15e84ce5b4b6ca9
fc84549e08127e928e31246a3f3fde0f761a52357d7e1a957ffcbac24d45679e
Analyzer Verdict Alert fortinet Phishing
GET /assets/libs/ResponsiveTables/ng_responsive_tables.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 542
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/images/1006.gif
200 OK 3.3 kB URL HTTP/2 coin-vestltd.biz/images/1006.gif
IP
File type PNG image data, 178 x 37, 8-bit colormap, non-interlaced\012- data
Hash 8db4c60e8b9e5fb1a6d6fa580bddb37c
3d5487e5b7b734a10e2dabeeadfe20728ba10662
577af4b0bd7763b7205826e1335b3b64f4e45f7da3f3bd0c41bc5037b0af5060
GET /images/1006.gif HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: image/gif
last-modified: Sun, 26 Nov 2017 03:12:00 GMT
accept-ranges: bytes
content-length: 3331
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/images/1007.gif
200 OK 2.4 kB URL HTTP/2 coin-vestltd.biz/images/1007.gif
IP
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 48697e98f332b56ce0aa55edab58755f
ec264771cb83bb145ce2ec87aee0b88778c343d7
0b08f11e6d05adbfc61efe2d1f9b20d76ab3cfca7481f2d9c89891a02032b26b
GET /images/1007.gif HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: image/gif
last-modified: Thu, 12 May 2022 15:49:48 GMT
accept-ranges: bytes
content-length: 2441
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/js/common.js
200 OK 2.3 kB URL HTTP/2 coin-vestltd.biz/assets/js/common.js
IP
Hash 42d919ff4a9dba1973fdd5d62f4df88a
15c8b247728bd89e8e9a9979a44d086e901b2a07
512b2985c2114d1e2253210180ef5f276f7a2acaea92b4c88d86260a1f9890c2
Analyzer Verdict Alert fortinet Phishing
GET /assets/js/common.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 17 Dec 2017 06:11:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2288
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/waypoints/jquery.waypoints.min.js
200 OK 2.6 kB URL HTTP/2 coin-vestltd.biz/assets/libs/waypoints/jquery.waypoints.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (8863)
Hash 9ac7d06d536f08f1b22abc2e4d53f85a
2f7809be662e8b60690e9c93bc57e46ae06e906c
ac26b8d1e1df8be26af42c290e9ecc4bd0afc655f88e6bec2f73e87bf6ca6474
Analyzer Verdict Alert fortinet Phishing
GET /assets/libs/waypoints/jquery.waypoints.min.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2592
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/images/48.gif
200 OK 3.3 kB URL HTTP/2 coin-vestltd.biz/images/48.gif
IP
File type PNG image data, 178 x 37, 8-bit colormap, non-interlaced\012- data
Hash 8db4c60e8b9e5fb1a6d6fa580bddb37c
3d5487e5b7b734a10e2dabeeadfe20728ba10662
577af4b0bd7763b7205826e1335b3b64f4e45f7da3f3bd0c41bc5037b0af5060
GET /images/48.gif HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: image/gif
last-modified: Mon, 06 Jun 2022 02:24:21 GMT
accept-ranges: bytes
content-length: 3331
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/libs/bootstrap-sweetalert/sweetalert.min.js
200 OK 4.9 kB URL HTTP/2 coin-vestltd.biz/assets/libs/bootstrap-sweetalert/sweetalert.min.js
IP
File type ASCII text, with very long lines (16651), with no line terminators
Hash 082f942caf19e361cd032b96699a9cad
5c738837142bdec48dbcfccfac65896dfce11339
dde0d5d449c2c981cd313970676797dbd83b1af2e3776958837ea4208e141071
Analyzer Verdict Alert fortinet Phishing
GET /assets/libs/bootstrap-sweetalert/sweetalert.min.js HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2017 03:12:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4939
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/img/pay/bitcoin.png
200 OK 3.3 kB URL HTTP/2 coin-vestltd.biz/assets/img/pay/bitcoin.png
IP
File type PNG image data, 178 x 37, 8-bit colormap, non-interlaced\012- data
Hash 8db4c60e8b9e5fb1a6d6fa580bddb37c
3d5487e5b7b734a10e2dabeeadfe20728ba10662
577af4b0bd7763b7205826e1335b3b64f4e45f7da3f3bd0c41bc5037b0af5060
GET /assets/img/pay/bitcoin.png HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: image/png
last-modified: Sun, 26 Nov 2017 03:12:36 GMT
accept-ranges: bytes
content-length: 3331
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
coin-vestltd.biz/assets/img/certificate.png
200 OK 33 kB URL HTTP/2 coin-vestltd.biz/assets/img/certificate.png
IP
File type PNG image data, 442 x 623, 8-bit/color RGBA, non-interlaced\012- data
Hash 9d6fe2676ce610bf1e77cffe3a3c03a5
b400ab52cbae7aa0f7ddc06a1a231d816d86ee86
4f00138ba864196cf88d0f607bae9bfb91496888eca1ad6cd72d533dcf605f6f
GET /assets/img/certificate.png HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 10 Oct 2022 02:17:59 GMT
content-type: image/png
last-modified: Sat, 04 Jun 2022 21:18:11 GMT
accept-ranges: bytes
content-length: 33187
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10913
Expires: Mon, 03 Oct 2022 05:19:52 GMT
Date: Mon, 03 Oct 2022 02:17:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10913
Expires: Mon, 03 Oct 2022 05:19:52 GMT
Date: Mon, 03 Oct 2022 02:17:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10913
Expires: Mon, 03 Oct 2022 05:19:52 GMT
Date: Mon, 03 Oct 2022 02:17:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5e503471cc78b95c0a3e75785615e5f
145b1e4d850c145a78577b5d7d4fadae9658d7a4
61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10913
Expires: Mon, 03 Oct 2022 05:19:52 GMT
Date: Mon, 03 Oct 2022 02:17:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb166fe-e146-46cf-a93b-905deefbae87.jpeg
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb166fe-e146-46cf-a93b-905deefbae87.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a96da552b7ddb23b1f2fb506de2aed4
2926163d332abfb70f9565a45f7546f2efdc7716
2da0e160e0e8a116ab76614e29609e43d132cc9e56636ad91399f33e53346a23
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb166fe-e146-46cf-a93b-905deefbae87.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3272
x-amzn-requestid: b2ace456-0abd-416c-9c1c-799eb5c73269
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWabG8zIAMF-PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a0442-3e61e1e9283bd78e76731b47;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:36:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oHEIG44XMoSu6XEYOPW8LNkvZPbIrgo6KuLHluknV7Hgfv-3IOWL2A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:44:42 GMT
age: 16397
etag: "2926163d332abfb70f9565a45f7546f2efdc7716"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 206fb65e75dbadf119512f71e0b78402
58ff0bf8ce7528b303d28bab01a80ad721705569
56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:00 GMT
age: 77819
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F954ddf3b-951c-46b3-a8ce-00e3bd3ef239.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F954ddf3b-951c-46b3-a8ce-00e3bd3ef239.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bed17699f6b123b33b8df416b23c4cac
36458cca636c4ffc873df8acd254ff726b1a9544
65dac85ddf2d9918696ea270a5a3d034e07e43ca5714f169747feee09fc4b897
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F954ddf3b-951c-46b3-a8ce-00e3bd3ef239.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10490
x-amzn-requestid: a7e4d6b4-be77-41a9-94dd-83167d5b002e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y5tUrE72oAMFZYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632d5c1d-1ba0805b629e657b60ff1b85;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 07:11:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UnHrBSOKrX4XRjDOtvi6MEMUF9BgrHqn4_2zFpaaKh4X3e-lFzA-2A==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 17:03:43 GMT
age: 33256
etag: "36458cca636c4ffc873df8acd254ff726b1a9544"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 721a8d8f94c3796abf021978fcdbc831
3fc3aeae907a0ce0db21753c67c1000681e48b8e
cb497b15e7c2e49930b99f8d6659f0394acefb7b11613ca04397ee782dac759d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8158
x-amzn-requestid: 424c8c6c-7075-4ace-97e6-2b0a609d1b7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXDxGRlIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-046d963a345c15e81dc74e4d;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: AM8Ox9ObWGoXI-QnnoI7QkY5mOh8j6xBPetTrhyVktVO40ekk4X2Eg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:45:27 GMT
age: 16352
etag: "3fc3aeae907a0ce0db21753c67c1000681e48b8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3056f6d6-1a08-46ac-94a1-eb08e1b784e1.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3056f6d6-1a08-46ac-94a1-eb08e1b784e1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9bbdad67489e993cebd23ffb04ebd02c
3a69c08b4d25d1dae1abbabd103d6d295a2f5425
ee3839246f3bada3e3190c240c8ac64d8012a87c062c5e006ed80a7edcd773a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3056f6d6-1a08-46ac-94a1-eb08e1b784e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7404
x-amzn-requestid: ef623ade-f397-40a9-b88d-0394f22a8d8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YpOJPGYyoAMFVEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6326c3d4-2da73ceb54b36ade5bf4ce1a;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 07:08:04 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: V5gPTaA3YWN6_EQLUMFySw3ntMsh4qsxw46KcIbSYuY0t_WF_Db9yg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 11:48:59 GMT
age: 52140
etag: "3a69c08b4d25d1dae1abbabd103d6d295a2f5425"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e6c9691e104001fe54d3c6273b7b8596
481ec2135ca0a96484c36cced30776c871aedf8f
f9e5e087d8b6e9b357c9f93b00c5919d89d90ac9b48d2dcd1ac72bf775a5cf49
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5383
x-amzn-requestid: 19106579-5727-4220-82ca-e9b7887d9896
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZM7OfEwuoAMFnXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63350bf6-2d80c27d185f114c4c512edb;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 03:07:34 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gWL6QKfR02p9RhhXL9Sn8Jw19qRKcJM5uW4u2Cv5nZvH2FkTJQ9gTw==
via: 1.1 6785379936d15b44a779e5f13a6567de.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 02:10:48 GMT
age: 431
etag: "481ec2135ca0a96484c36cced30776c871aedf8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 13af95ff2272933bbfe9d5b37c7b1df7
ac04f2ee9ec547d6f4e852065817f5945cb186a4
204a0d34d08ae0821251c1483bd0671f64603ce2f876e396d989af96f0bcaedf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 02:17:59 GMT
Last-Modified: Mon, 03 Oct 2022 01:46:39 GMT
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 19d5615c4d307c11803beb015d8f6562.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: Q3ooVEf7IzPzNp59AFYA6aAc1jC2fm8717j7rr6-5qNw7fFzKQs-tA==
Age: 1880
coin-vestltd.biz/
200 OK 8.6 kB IP
Hash 72fa65eaa3f036da8d4150fd50d4c4f6
584550daff6fe4f465383216544c29e27c9fc1bc
9a78e2c84de9d9a7fa4019aaac4ff301c0721e9c25b57aedfd12817e13e0d98d
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: coin-vestltd.biz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Cookie: PHPSESSID=vpgv5vou5ofvs80r87tq19o3c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.6.40
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Mon, 03 Oct 2022 02:17:59 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3572582e0c88aa52b7ea5fceaa2e105e
3e85358b1bf642868a7399440a19c41841fb0074
7f6b19d2c993f46963347b214395818f176b29651cfc37523d70b8438591400b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 02:18:00 GMT
Last-Modified: Mon, 03 Oct 2022 01:06:08 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 19d5615c4d307c11803beb015d8f6562.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: EuCjU5kC3m0ugE6v65GH2hw_a53PGj6SR6ZiGtxcXl7YgeMfFwhSCA==
Age: 4312
widget-v2.smartsuppcdn.com/translates/en.json?v=40dc5d66667b97efcc02e6c0aff17d1954e58a21
200 OK 1.5 kB URL HTTP/2 widget-v2.smartsuppcdn.com/translates/en.json?v=40dc5d66667b97efcc02e6c0aff17d1954e58a21
IP
ASN #60068 Datacamp Limited
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (647)
Hash 9ebc068d4e56c07a1cbeb2337542b3b3
a0728cdfe3d718a8b68e0d6fd2f947683af1a6a0
3d2054af967830fb3369084699629fc77d579c32f26e07bb5bce0224d36bb6c3
GET /translates/en.json?v=40dc5d66667b97efcc02e6c0aff17d1954e58a21 HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coin-vestltd.biz/
Origin: https://coin-vestltd.biz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 03 Oct 2022 02:18:00 GMT
content-type: application/json
last-modified: Thu, 29 Sep 2022 17:18:40 GMT
etag: W/"6335d370-fc9"
expires: Fri, 29 Sep 2023 20:02:47 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1696017767
server: CDN77-Turbo
x-77-nzt: AblMCQ061Ef/cUwEAA
x-77-nzt-ray: t7veRqcD+RA
x-cache: HIT
x-age: 281713
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/6.0e1e87c0.chunk.js
200 OK 156 kB URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/6.0e1e87c0.chunk.js
IP
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (65462)
Size 156 kB (155760 bytes)
Hash 08520765e5a83abb5863b6331e7521f8
1c049586b4744e596760ec0f0ba0f4e166d4579c
b77f7128ec5a3a85b0d229afd07489127aeca2668216bdeead61223305567784
GET /static/js/6.0e1e87c0.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 02:18:00 GMT
content-type: application/javascript
last-modified: Thu, 29 Sep 2022 17:19:37 GMT
etag: W/"6335d3a9-81d5c"
expires: Fri, 29 Sep 2023 20:02:46 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1696017766
server: CDN77-Turbo
x-77-nzt: AblMCQ0+hND/ckwEAA
x-77-nzt-ray: kW4Ln2GwxXo
x-cache: HIT
x-age: 281714
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dcf393f-77c1-48ed-9c3e-ab160d7b4829.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dcf393f-77c1-48ed-9c3e-ab160d7b4829.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7660e05c8a7b32db05f8c56693bc774
b64aff132fdfc91cf59f70170b3d4bd3fc025294
e1d523c385cf05ae2d432526a387f43443d14b4b68129aa76229687366938805
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dcf393f-77c1-48ed-9c3e-ab160d7b4829.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9721
x-amzn-requestid: 1825bd73-4760-43e8-97f7-c9d2c06a119f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZXXxRHYkoAMFaHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633939a1-4e92f3265ead21e876cfb556;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 07:11:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l-YyB6m2kDzmbo7Mo4vBedg5_c_N4U3PrCkpNlicpARH0-BrwjnEOA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 07:44:09 GMT
age: 66837
etag: "b64aff132fdfc91cf59f70170b3d4bd3fc025294"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bootstrap.smartsuppchat.com/widget/3438b1234961eed317ab9a18ca68213f076baa04.json
200 OK 0 B URL HTTP/2 bootstrap.smartsuppchat.com/widget/3438b1234961eed317ab9a18ca68213f076baa04.json
IP
GET /widget/3438b1234961eed317ab9a18ca68213f076baa04.json HTTP/1.1
Host: bootstrap.smartsuppchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://coin-vestltd.biz
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 02:17:59 GMT
content-type: application/json; charset=utf-8
x-version: 40abd74f2935f2a6d1a2667e53c08501d31c5c2e
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: private, max-age=0, must-revalidate
x-hit: redis
etag: "4dd-Vn0FfRjyh6vuvwbl/xSFO44DKTM"
content-encoding: br
X-Firefox-Spdy: h2
www.smartsuppchat.com/loader.js?
200 OK 0 B URL HTTP/2 www.smartsuppchat.com/loader.js?
IP
ASN #60068 Datacamp Limited
GET /loader.js? HTTP/1.1
Host: www.smartsuppchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 02:17:59 GMT
content-type: application/javascript
last-modified: Tue, 22 Mar 2022 17:52:27 GMT
etag: W/"623a0cdb-4792"
expires: Mon, 23 May 2022 11:09:44 GMT
cache-control: max-age=300, public, s-maxage=60
x-accel-expires: @1664763500
server: CDN77-Turbo
x-77-nzt: AblMCQ2/cVb/JwAAAA
x-77-nzt-ray: lKhN8YEv5FM
x-cache: HIT
x-age: 39
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/asset-manifest.json
200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/asset-manifest.json
IP
ASN #60068 Datacamp Limited
GET /asset-manifest.json HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://coin-vestltd.biz
Connection: keep-alive
Referer: https://coin-vestltd.biz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 02:18:00 GMT
content-type: application/json
last-modified: Thu, 29 Sep 2022 17:19:37 GMT
etag: W/"6335d3a9-6ce"
expires: Thu, 29 Sep 2022 20:07:45 GMT
cache-control: max-age=300, public, s-maxage=60
access-control-allow-origin: *
x-accel-expires: @1664763536
server: CDN77-Turbo
x-77-nzt: AblMCQ0GiNX/BAAAAA
x-77-nzt-ray: Pu67ZzrJ3eo
x-cache: HIT
x-age: 4
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/runtime-main.4e049abd.js
200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/runtime-main.4e049abd.js
IP
ASN #60068 Datacamp Limited
GET /static/js/runtime-main.4e049abd.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 02:18:00 GMT
content-type: application/javascript
last-modified: Thu, 29 Sep 2022 17:19:37 GMT
etag: W/"6335d3a9-9bd"
expires: Fri, 29 Sep 2023 20:02:46 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1696017766
server: CDN77-Turbo
x-77-nzt: AblMCQ2lG1P/ckwEAA
x-77-nzt-ray: vvFPDpJKx1Q
x-cache: HIT
x-age: 281714
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/main.2b685341.chunk.js
200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/main.2b685341.chunk.js
IP
ASN #60068 Datacamp Limited
GET /static/js/main.2b685341.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 03 Oct 2022 02:18:00 GMT
content-type: application/javascript
last-modified: Thu, 29 Sep 2022 17:19:37 GMT
etag: W/"6335d3a9-1cba4"
expires: Fri, 29 Sep 2023 20:02:46 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1696017766
server: CDN77-Turbo
x-77-nzt: AblMCQ2m1FT/ckwEAA
x-77-nzt-ray: Oby2fdl4ong
x-cache: HIT
x-age: 281714
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
198.252.98.89
23.36.77.32
185.76.9.17
93.184.220.29
3.65.143.70