ocsp.pki.goog/gts1c3
472 B IP
Hash 72c6da94ee45fc2dd0f2b2fd8c51b649
e1f2b78c9d5d6c0da8f927dd9efbe4536fcf1eea
ea45a568cf670048ec1944643f14654716430bdc797c3aec2a89b2aeb7575817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 09 May 2023 15:38:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
respekt5567.com/css/linearicons.css
200 OK 1.7 kB URL GET HTTP/1.1 respekt5567.com/css/linearicons.css
IP
Hash 3d521f166004a36cd1fb211f51c7e02d
7f112ce30590dce0cbb3b17e9f0a5f705ead4682
f0767561c44fc65c14649e3a39539525178803e8b75dd7ca036f5fd717623402
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /css/linearicons.css HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:40 GMT
Content-Type: text/css
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-20aa"
Expires: Wed, 10 May 2023 15:38:40 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/css/font-awesome.min.css
200 OK 7.1 kB URL GET HTTP/1.1 respekt5567.com/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /css/font-awesome.min.css HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:40 GMT
Content-Type: text/css
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-7918"
Expires: Wed, 10 May 2023 15:38:40 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/css/owl.carousel.min.css
200 OK 912 B URL GET HTTP/1.1 respekt5567.com/css/owl.carousel.min.css
IP
File type ASCII text, with very long lines (2846)
Hash de0dfbabe627afa1b718d848b6b58e97
73d8a692734089983b00005d99ef8e5e5b0dadeb
016ab0bd0de4839680e4a717a57db9b182a8c2c5fdeec4c24db7a8df761fca4d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /css/owl.carousel.min.css HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:40 GMT
Content-Type: text/css
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-b78"
Expires: Wed, 10 May 2023 15:38:40 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
fonts.googleapis.com/css?family=Jura:600,700%7CRoboto:300,400,500,700
200 OK 1.4 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Jura:600,700%7CRoboto:300,400,500,700
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:3F:7F:CC:E7:90:DA:64:23:AC:13:1E:55:7A:62:1E:2B:E4:30:5C
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type gzip compressed data, max compression\012- data
Hash 53e0eec57dc63b4029c807b7b2ba1793
ac1bd05af9d645ea39179581fbc3a7cb25199bc5
7a2d429368f0b640b33a154372332fa7f41134422e7a6d53c01269e2be620975
GET /css?family=Jura:600,700%7CRoboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 09 May 2023 15:38:40 GMT
date: Tue, 09 May 2023 15:38:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
respekt5567.com/css/bootstrap.min.css
200 OK 20 kB URL GET HTTP/1.1 respekt5567.com/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Hash ec3bb52a00e176a7181d454dffaea219
6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68
f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /css/bootstrap.min.css HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:40 GMT
Content-Type: text/css
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-1d970"
Expires: Wed, 10 May 2023 15:38:40 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/css/magnific-popup.css
200 OK 1.8 kB URL GET HTTP/1.1 respekt5567.com/css/magnific-popup.css
IP
Hash 30b593b71d7672658f89bfea0ab360c9
d6963db6faa9294387bb3175813a61bc3f859437
45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /css/magnific-popup.css HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:40 GMT
Content-Type: text/css
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-1b27"
Expires: Wed, 10 May 2023 15:38:40 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
5.3 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (356)
Hash 91d07035f8b57ae6d636b6c4c9fdf14d
2d7053e49ac9d9e09538b4447cee6d5cfa631d0b
f73b347035cf4096310d0ebedc61764bc207c4cbd9261a489b66e84f0d9cb268
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET / HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip
respekt5567.com/css/main-color1.css
200 OK 6.9 kB URL GET HTTP/1.1 respekt5567.com/css/main-color1.css
IP
Hash b803057d6ee585156b15ead7406c470b
d348ec19e8c6956f44178427bc93f1e021055cc9
5c350fb925199773a7ce2bfaba1e0bdec877d7ac1d0a38c24fd3063b24ec879a
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /css/main-color1.css HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:40 GMT
Content-Type: text/css
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-c2ab"
Expires: Wed, 10 May 2023 15:38:40 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/css/animate.min.css
200 OK 2.7 kB URL GET HTTP/1.1 respekt5567.com/css/animate.min.css
IP
File type ASCII text, with very long lines (16755)
Hash 7da1b41592f039eecd65d604482c10e1
e966ec2885d74306b80253ef057ea77546b2c149
0add8fcb5a583b1c16238fbe9d0de17c6272726b42be17fdcd9b4686ef5287d1
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /css/animate.min.css HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: text/css
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-4238"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
471 B IP
Hash a6da0b8ec487c9ffd7bc4988e01ee646
f68270a827e68414eafb5ea37009e41de0890591
fe9d96f872b486de995156459e3005532ad6c6140975266bd43023286a6aa76e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 09 May 2023 15:38:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
respekt5567.com/js/bootstrap.min.js
200 OK 9.9 kB URL GET HTTP/1.1 respekt5567.com/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32033)
Hash 5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/bootstrap.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-90b5"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
471 B IP
Hash a6da0b8ec487c9ffd7bc4988e01ee646
f68270a827e68414eafb5ea37009e41de0890591
fe9d96f872b486de995156459e3005532ad6c6140975266bd43023286a6aa76e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 09 May 2023 15:38:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash a6da0b8ec487c9ffd7bc4988e01ee646
f68270a827e68414eafb5ea37009e41de0890591
fe9d96f872b486de995156459e3005532ad6c6140975266bd43023286a6aa76e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 09 May 2023 15:38:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash a6da0b8ec487c9ffd7bc4988e01ee646
f68270a827e68414eafb5ea37009e41de0890591
fe9d96f872b486de995156459e3005532ad6c6140975266bd43023286a6aa76e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 09 May 2023 15:38:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://respekt5567.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 06 May 2023 07:44:41 GMT
expires: Sun, 05 May 2024 07:44:41 GMT
cache-control: public, max-age=31536000
age: 287640
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash a6da0b8ec487c9ffd7bc4988e01ee646
f68270a827e68414eafb5ea37009e41de0890591
fe9d96f872b486de995156459e3005532ad6c6140975266bd43023286a6aa76e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 09 May 2023 15:38:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/jura/v29/z7NbdRfiaC4VXcRJUQ.woff2
200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/jura/v29/z7NbdRfiaC4VXcRJUQ.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 23960, version 1.0\012- data
Hash 313b4b894d548a8a99c65d11e5f28be7
0d9a307880bc731fb2dda245a0ecae89af4c3a10
4b652d4132b2cd01a8a239687d502f08d050266a4cbc662ba08925e3bbe7b694
GET /s/jura/v29/z7NbdRfiaC4VXcRJUQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://respekt5567.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 04 May 2023 13:22:56 GMT
expires: Fri, 03 May 2024 13:22:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:43:43 GMT
content-type: font/woff2
age: 440145
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://respekt5567.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 04 May 2023 05:00:02 GMT
expires: Fri, 03 May 2024 05:00:02 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
age: 470319
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/jura/v29/z7NbdRfiaC4VXcRJUQ.woff2
200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/jura/v29/z7NbdRfiaC4VXcRJUQ.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 23960, version 1.0\012- data
Hash 313b4b894d548a8a99c65d11e5f28be7
0d9a307880bc731fb2dda245a0ecae89af4c3a10
4b652d4132b2cd01a8a239687d502f08d050266a4cbc662ba08925e3bbe7b694
GET /s/jura/v29/z7NbdRfiaC4VXcRJUQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://respekt5567.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23960
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 04 May 2023 13:22:56 GMT
expires: Fri, 03 May 2024 13:22:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 02 May 2023 15:43:43 GMT
content-type: font/woff2
age: 440145
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://respekt5567.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 06 May 2023 03:11:48 GMT
expires: Sun, 05 May 2024 03:11:48 GMT
cache-control: public, max-age=31536000
age: 304013
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
respekt5567.com/js/owl.carousel.min.js
200 OK 11 kB URL GET HTTP/1.1 respekt5567.com/js/owl.carousel.min.js
IP
File type ASCII text, with very long lines (32000)
Hash b7b9c97cd68ec336d01a79d5be48c58d
1a99890b57c9859a622337ed0b2f989d6e30cc0e
b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/owl.carousel.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-a70e"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/js/jquery-2.2.4.min.js
200 OK 30 kB URL GET HTTP/1.1 respekt5567.com/js/jquery-2.2.4.min.js
IP
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/jquery-2.2.4.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-14e4a"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://respekt5567.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 08 May 2023 07:56:26 GMT
expires: Tue, 07 May 2024 07:56:26 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 114135
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
respekt5567.com/js/jquery.marquee.min.js
200 OK 2.0 kB URL GET HTTP/1.1 respekt5567.com/js/jquery.marquee.min.js
IP
File type ASCII text, with very long lines (516)
Hash f2619ff525e29847f931bdfe1c428e1f
09a10afba7ecdcba3d61de1dedc432bd8e306c28
23b9b39ea61308052256b9921bf1c0de6698bcf0c04e3e4f2978adc86168ff6e
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/jquery.marquee.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-1718"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/js/smooth-scroll.min.js
200 OK 2.0 kB URL GET HTTP/1.1 respekt5567.com/js/smooth-scroll.min.js
IP
File type ASCII text, with very long lines (4439)
Hash d6174c8c65e70a9a105908abf8a5f67c
9264b8fd11aaaed1857230be92bb86208379e411
30cb74ff6d46df3d19838113d642371c2f67a48b43a30922b510d5af41610b10
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/smooth-scroll.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-11cc"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/js/jquery.parallax.min.js
200 OK 2.7 kB URL GET HTTP/1.1 respekt5567.com/js/jquery.parallax.min.js
IP
File type ASCII text, with very long lines (6815), with no line terminators
Hash 38cf4791e24aeaa8101bd2c816400718
a519a611d3eb04cce2654b9831250e2665b4df2f
20d35c6bf03bd1b2f25c640474ea40fdec3cb0923bc0faf3eeadf2a95b85003f
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/jquery.parallax.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-1a9f"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
471 B IP
Hash a6da0b8ec487c9ffd7bc4988e01ee646
f68270a827e68414eafb5ea37009e41de0890591
fe9d96f872b486de995156459e3005532ad6c6140975266bd43023286a6aa76e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 09 May 2023 15:38:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
respekt5567.com/js/scrolla.jquery.min.js
200 OK 541 B URL GET HTTP/1.1 respekt5567.com/js/scrolla.jquery.min.js
IP
File type ASCII text, with very long lines (1078)
Hash 12936adcea486ebc10aa85f795f10c22
ef2658054f2fdfdc974662a3f64522423e6c352a
499ff3b7888bc44b4da9d8c215e328058852d985b86ccd1274b2f5c3dced8d1b
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/scrolla.jquery.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-466"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/js/jquery.waypoints.min.js
200 OK 2.8 kB URL GET HTTP/1.1 respekt5567.com/js/jquery.waypoints.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (8863)
Hash 7d05f92297dede9ecfe3706efb95677a
56bdb149d9baf64474a4c24ae66445769a28254e
368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/jquery.waypoints.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-2344"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/js/jquery.magnific-popup.min.js
200 OK 7.4 kB URL GET HTTP/1.1 respekt5567.com/js/jquery.magnific-popup.min.js
IP
File type ASCII text, with very long lines (20087)
Hash ba6cf724c8bb1cf5b084e79ff230626e
f455c5f153f872e52265f87a644ff89fe14a6fb6
3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/jquery.magnific-popup.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-4ef8"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/js/imagesloaded.pkgd.min.js
200 OK 1.8 kB URL GET HTTP/1.1 respekt5567.com/js/imagesloaded.pkgd.min.js
IP
File type ASCII text, with very long lines (5442)
Hash 9ae82f0efe3e33139fecb89cfee71c08
93f15dd89ef09486ef3097e428c44424fd59f225
f7b3dc94297cd47d4b2195477eff1acd681aa73851590061b58b32fc05a4a007
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/imagesloaded.pkgd.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-15b7"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/js/main.js
200 OK 1.1 kB URL GET HTTP/1.1 respekt5567.com/js/main.js
IP
Hash d731207964fefc20b01cba63e5f2dcff
296956f9f75aa31f3a028d03bfdc07f811a2d83d
8d8a5f37116a6b99f5f78819439f1e69ecf107add759c623d66529aa82b7dcee
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/main.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-f9d"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/img/logo.png
200 OK 2.9 kB URL GET HTTP/1.1 respekt5567.com/img/logo.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 5abe5ef16ef2a7b1d324d5d3548ac137
08d1c7e35cb92b7e9217a458549260eeda0809e9
1dcaf3d29eb3a8584b916b20026c0d320afe47096bb625deed13f5bd71e9fb91
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /img/logo.png HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: image/png
Content-Length: 2897
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-b51"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
respekt5567.com/img/about/wave.png
200 OK 21 kB URL GET HTTP/1.1 respekt5567.com/img/about/wave.png
IP
File type PNG image data, 1920 x 362, 8-bit/color RGBA, non-interlaced\012- data
Hash b5609dda89530d601c72eb81375d673e
02774e513b69f3c4454fabb773189fd726288af1
64e0d3e88198342f90fda310b3906b02f06db18d16a039b46c2ac20ed245b4f7
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /img/about/wave.png HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/css/main-color1.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: image/png
Content-Length: 21420
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-53ac"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
respekt5567.com/js/jquery.counterup.min.js
200 OK 852 B URL GET HTTP/1.1 respekt5567.com/js/jquery.counterup.min.js
IP
File type ASCII text, with very long lines (2181)
Hash 5b172bae8311e6a555130ed5c1f5d309
4a60e3f26cf36fad5f0877dc2c5f9fddacb1f5dd
b8985337c167aa4e6e5296ffa6fd288e65bcd4e0da8f82439726f961f6f733da
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /js/jquery.counterup.min.js HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: application/javascript
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Transfer-Encoding: chunked
Connection: close
ETag: W/"61386265-886"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
respekt5567.com/img/logo--dark.png
200 OK 2.2 kB URL GET HTTP/1.1 respekt5567.com/img/logo--dark.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash e8bf07d26aa4cf150ef3051fb60ea4c8
0cfb7fefd36ef0c6f0e2a2de5108dace55211dea
78f5be44e1669b8312dde1be604608ab7041d74335f047c6e141113c3df47ea5
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /img/logo--dark.png HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: image/png
Content-Length: 2220
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-8ac"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
respekt5567.com/img/1.png
200 OK 13 kB URL GET HTTP/1.1 respekt5567.com/img/1.png
IP
File type PNG image data, 394 x 249, 8-bit/color RGBA, non-interlaced\012- data
Hash 001a78d9ffa8163711d0ed8e2dd03ac5
361c5c1e910b919a98adbc36e9d89dc136a1dfd7
76c6d5e47dec5488c9516710136304e4452345a77e04bf3db89d101ed655f1ff
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /img/1.png HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: image/png
Content-Length: 12647
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-3167"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
respekt5567.com/fonts/Linearicons-Free.woff2?w118d
200 OK 22 kB URL GET HTTP/1.1 respekt5567.com/fonts/Linearicons-Free.woff2?w118d
IP
File type Web Open Font Format (Version 2), TrueType, length 21780, version 1.0\012- data
Hash 03e91f122aa5fd425abbe23c85546eb0
c87a3db06c5db4e75e639382f174eafa439aeb27
296945e5922e764eef17b1b4a3ee3e60dc202b3c7f074150b62158915bf74e33
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /fonts/Linearicons-Free.woff2?w118d HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/css/linearicons.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Length: 21780
Connection: close
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
ETag: "5514-5cb769b61a340"
Accept-Ranges: bytes
respekt5567.com/img/3.png
200 OK 6.9 kB URL GET HTTP/1.1 respekt5567.com/img/3.png
IP
File type PNG image data, 393 x 248, 8-bit/color RGBA, non-interlaced\012- data
Hash 46ab8676250a298f484fcaced0e50e0e
87080c5f01ceae310ad1a15def9bc402635d9071
67945198389086ba7d451c0be5ade19c7e757194029a8bd1779553e2c41fbc2b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /img/3.png HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: image/png
Content-Length: 6853
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-1ac5"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
respekt5567.com/img/4.png
200 OK 16 kB URL GET HTTP/1.1 respekt5567.com/img/4.png
IP
File type PNG image data, 396 x 286, 8-bit/color RGBA, non-interlaced\012- data
Hash 861c2e37351c8d26b4efd42bdd58ff04
be27a1be51f49767bc69d3754022730e3a20f172
6e5d40f89acf129f40b0f45102afea22e8733a0fb3e6f5cdad92c20cc113880f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /img/4.png HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: image/png
Content-Length: 16461
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-404d"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
respekt5567.com/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/1.1 respekt5567.com/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/css/font-awesome.min.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Length: 77160
Connection: close
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
ETag: "12d68-5cb769b61a340"
Accept-Ranges: bytes
respekt5567.com/img/home/slide.jpg
200 OK 161 kB URL GET HTTP/1.1 respekt5567.com/img/home/slide.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Size 161 kB (160950 bytes)
Hash edecd62acdb75a84571578a143a21224
daa258a77322de6deb1b12b8b8249163d5fbebd1
821b99b8eff8f487dd5c1e2e88b6b4edb19506908219d6647cbf2d30662cb873
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /img/home/slide.jpg HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:41 GMT
Content-Type: image/jpeg
Content-Length: 160950
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-274b6"
Expires: Wed, 10 May 2023 15:38:41 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
respekt5567.com/img/section-bg/side.png
200 OK 239 kB URL GET HTTP/1.1 respekt5567.com/img/section-bg/side.png
IP
File type PNG image data, 2000 x 1200, 8-bit colormap, non-interlaced\012- data
Size 239 kB (238763 bytes)
Hash 5c0eea2da8783bd83abbe8307416765f
8ea99733e07ea215f3097179a616c4c38a0da43c
fa0dbba0153a813f565394fc9063c564fa067fd43d366b98890852f77451cc67
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /img/section-bg/side.png HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:42 GMT
Content-Type: image/png
Content-Length: 238763
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-3a4ab"
Expires: Wed, 10 May 2023 15:38:42 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
respekt5567.com/icon/favicon-32x32.png
200 OK 2.9 kB URL GET HTTP/1.1 respekt5567.com/icon/favicon-32x32.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 5abe5ef16ef2a7b1d324d5d3548ac137
08d1c7e35cb92b7e9217a458549260eeda0809e9
1dcaf3d29eb3a8584b916b20026c0d320afe47096bb625deed13f5bd71e9fb91
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /icon/favicon-32x32.png HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:42 GMT
Content-Type: image/png
Content-Length: 2897
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-b51"
Expires: Wed, 10 May 2023 15:38:42 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
respekt5567.com/icon/apple-touch-icon-144x144.png
200 OK 2.9 kB URL GET HTTP/1.1 respekt5567.com/icon/apple-touch-icon-144x144.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 5abe5ef16ef2a7b1d324d5d3548ac137
08d1c7e35cb92b7e9217a458549260eeda0809e9
1dcaf3d29eb3a8584b916b20026c0d320afe47096bb625deed13f5bd71e9fb91
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
NIDS Severity Alert suricata high ThreatFox botnet C2 traffic (url - confidence level: 100%)
GET /icon/apple-touch-icon-144x144.png HTTP/1.1
Host: respekt5567.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://respekt5567.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 09 May 2023 15:38:42 GMT
Content-Type: image/png
Content-Length: 2897
Last-Modified: Wed, 08 Sep 2021 07:12:37 GMT
Connection: close
ETag: "61386265-b51"
Expires: Wed, 10 May 2023 15:38:42 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
193.233.134.80