Report - 212.59.240.192/

Report Overview

Submitted URL
212.59.240.192/
IP
212.59.240.192
ASN
#59491 Livenet Sp. z o.o.
Submitted
2022-09-26 13:21:56
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	662 B	1.4 kB	142.250.74.3
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	72 kB	142.250.74.163
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	61 kB	34.120.237.76
code.ionicframework.com	14473	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	722 B	120 kB	172.67.69.29
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	303 B	923 B	142.250.74.10
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.49
maps.googleapis.com	33876	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	365 B	55 kB	216.58.207.202
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	34.214.17.205
212.59.240.192	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.8 kB	590 kB	212.59.240.192
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-26	medium	212.59.240.192/	Malware
2022-09-26	medium	212.59.240.192/js/jquery.lwtCountdown-1.0.js	Malware
2022-09-26	medium	212.59.240.192/js/vendor/modernizr-2.6.2.min.js	Malware
2022-09-26	medium	212.59.240.192/js/bootstrap.min.js	Malware
2022-09-26	medium	212.59.240.192/js/jquery.validate.min.js	Malware
2022-09-26	medium	212.59.240.192/js/owl.carousel.min.js	Malware
2022-09-26	medium	212.59.240.192/js/jquery.form.js	Malware
2022-09-26	medium	212.59.240.192/js/jquery.sticky.js	Malware
2022-09-26	medium	212.59.240.192/js/jquery.nav.js	Malware
2022-09-26	medium	212.59.240.192/js/plugins.js	Malware
2022-09-26	medium	212.59.240.192/js/wow.min.js	Malware
2022-09-26	medium	212.59.240.192/js/main.js	Malware
2022-09-26	medium	212.59.240.192/js/vendor/jquery-1.10.2.min.js	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (16)

	URL	Size	First Seen	Last Seen
	212.59.240.192/js/plugins.js	733 B	2023-03-07	2024-04-23
Pretty URL 212.59.240.192/js/plugins.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:03 Last Seen2024-04-23 21:50:14 Times Seen880 Hash e2679049e95a7201b815c3cf004aefc4 ea250a66815d0665a9b5677991eaaba789bfc125 267f86b986829cb9a3c46b9fcdbc56783bb923005ba5ef5b27efce504e72ecfa Loading...

	212.59.240.192/js/vendor/modernizr-2.6.2.min.js	15 kB	2023-03-07	2024-04-26
Pretty URL 212.59.240.192/js/vendor/modernizr-2.6.2.min.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:49 Last Seen2024-04-26 01:15:02 Times Seen2868 Hash 42306a279a9e831515347ae319181cd1 d069641242e4fe1beb6de8f53a77dd964c98bce0 cf25ec18f223f4c51ce1128a42e644cdc2244d88f89d1a51440d9dbe51f4efe8 Loading...

	maps.googleapis.com/maps/api/js?sensor=false	165 kB	2023-03-08	2023-03-08
Pretty URL maps.googleapis.com/maps/api/js?sensor=false IP 216.58.207.202 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:42:59 Last Seen2023-03-08 01:53:39 Times Seen1 Hash a9dbae81cc4563d77934f7e504d571c4 6467a8b5d32d1b7f544df9bad48ae7897fb89612 adc396732165cbb1f60d3060c0d63f183313b28842afa0d140a04ca307cd0ab7 Loading...

	212.59.240.192/js/vendor/jquery-1.10.2.min.js	93 kB	2023-03-07	2024-04-26
Pretty URL 212.59.240.192/js/vendor/jquery-1.10.2.min.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-26 17:39:08 Times Seen10179 Hash 628072e7212db1e8cdacb22b21752cda 0511abe9863c2ea7084efa7e24d1d86c5b3974f1 0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988 Loading...

	212.59.240.192/js/jquery.nav.js	5.1 kB	2023-03-07	2024-04-25
Pretty URL 212.59.240.192/js/jquery.nav.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:33:05 Last Seen2024-04-25 08:07:55 Times Seen1128 Hash a33571eb2591514e45765696e5d92c9f e680863a86670bf2d8e0b1f5b33c267f0ddc5cd1 707a967916ff7ca8411b995ff078ee44fcbb627bbb11f067643f7a6ab7f99806 Loading...

	212.59.240.192/js/main.js	4.9 kB	2023-03-07	2024-04-23
Pretty URL 212.59.240.192/js/main.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:03 Last Seen2024-04-23 21:50:14 Times Seen820 Hash 8a7f1358e65bad790f1f1c24da310aea aa44e2bb61cdbc57271759d77d4b7803e1ef95a0 bd6808f1443357a7c2208297567f99f4a8ba54a538d0283e105721e42b40ddbc Loading...

	maps.googleapis.com/maps-api-v3/api/js/50/6/common.js	252 kB	2023-03-07	2023-03-08
Pretty URL maps.googleapis.com/maps-api-v3/api/js/50/6/common.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:47:31 Last Seen2023-03-08 03:11:05 Times Seen1 Hash d3fd1f634c6bb18b363f3d03b7b3925e a2a082e3a12138256cc67310c21e4378d4378508 f37f4f2ac2c66956043d95284071e516a633f7113819e8a675a68577c82b29ad Loading...

	212.59.240.192/	146 B	2023-03-07	2024-04-23
Pretty URL 212.59.240.192/ IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:29:57 Last Seen2024-04-23 21:50:14 Times Seen744 Hash c4cffc0349a21ca64eb83f0ac33270e6 a6bf8c2c85c24465a0867475ceb6ee89a528676a 05a4b0e51b6395fa2bc718532912915e4b649ecf6c298b193dc77c09ab8ba66e Loading...

	212.59.240.192/js/bootstrap.min.js	29 kB	2023-03-07	2024-04-25
Pretty URL 212.59.240.192/js/bootstrap.min.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:01 Last Seen2024-04-25 14:39:14 Times Seen1661 Hash e1d08589ec26bec3a81625ce274d76d9 c6a8a0f02ee0ecd975226ae4b38e9660750d1f93 03bf371e3ca4739cfe6bea61f0126b7cbb94e4713e970651f9acd5acb3d9e399 Loading...

	212.59.240.192/js/jquery.sticky.js	5.7 kB	2023-03-07	2024-04-23
Pretty URL 212.59.240.192/js/jquery.sticky.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:03 Last Seen2024-04-23 21:50:14 Times Seen960 Hash 1207f10dca0217442912cb14dfcac518 341a3c047fbb6916ef9f27026c239682286acea4 e2625c28848cbca930c42cf94c85201372302f87978932e468d75466addc23e6 Loading...

	212.59.240.192/js/jquery.validate.min.js	22 kB	2023-03-07	2024-04-23
Pretty URL 212.59.240.192/js/jquery.validate.min.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:55 Last Seen2024-04-23 21:50:14 Times Seen958 Hash d7342d64b483db4cdc836047765c07f3 e1085fb6185d0c47ccd1f202d197ba626f017e15 f0f5373ad203101ea91bf826c5a7ef8f7cd74887f06bad2cb9277a504503b9e2 Loading...

	212.59.240.192/js/jquery.lwtCountdown-1.0.js	5.2 kB	2023-03-07	2024-04-23
Pretty URL 212.59.240.192/js/jquery.lwtCountdown-1.0.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08:03 Last Seen2024-04-23 21:50:14 Times Seen859 Hash 2356a2380e099ee017e2800dc1448509 e2ff5607657bd0a45c0b7765d87d502cb16bd141 47ab023691eeed8f1eff1479fb882b115dd905ca3dabd01171f0896c6a2e52dc Loading...

	212.59.240.192/js/owl.carousel.min.js	40 kB	2023-03-07	2024-04-24
Pretty URL 212.59.240.192/js/owl.carousel.min.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06:47 Last Seen2024-04-24 18:20:57 Times Seen4707 Hash ffaa3c82ad2c6e216e68aca44746e1be 2fa7c468110fa68f1f3df6718daf971871623ee9 83553d22ccd56e5576d544f6ba93475c712b3c02d312893eea2acc16de5fcf91 Loading...

	212.59.240.192/js/wow.min.js	8.2 kB	2023-03-07	2024-04-26
Pretty URL 212.59.240.192/js/wow.min.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:44 Last Seen2024-04-26 16:10:10 Times Seen1373 Hash ed4b12ef0f7e4bf5d5ff3555d18718cb 258fa26dec8fcf4769d49eaca6712ef56923673e 3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461 Loading...

	212.59.240.192/js/jquery.form.js	39 kB	2023-03-07	2024-04-23
Pretty URL 212.59.240.192/js/jquery.form.js IP 212.59.240.192 ASN #59491 Livenet Sp. z o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:02 Last Seen2024-04-23 21:50:14 Times Seen894 Hash 529b65010afdc2aac6389b647908f5b8 96828fd4ab8a75a96338df88f986b36c7e754fef 800c1c83a86f7fe665ac6d49c6370e2f045f70f5c7859ef4a0e686b4759e46b3 Loading...

	maps.googleapis.com/maps-api-v3/api/js/50/6/util.js	162 kB	2023-03-07	2023-03-08
Pretty URL maps.googleapis.com/maps-api-v3/api/js/50/6/util.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:47:31 Last Seen2023-03-08 03:11:05 Times Seen1 Hash d025c70ff0f9d652f7f2588550a50655 7ccc317814e37ffd3b56c9b4319f7800ccd734fe 7c57756950e7e2a4219d67ac9f6822c57a3bd19484e7cd197e7c3b35fccaa05f Loading...

HTTP Transactions (54)

URL IP Response Size

212.59.240.192/

212.59.240.192

200 OK

16 kB

URL HTTP/1.1
212.59.240.192/
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
16 kB (16435 bytes)
Hash
b476ce761c1500c31c50362aa2e2b001
4ccbcf65215adebbf1a736063a50269085c648f6
4221242c1db13887821ed4600a955addd90c5ae57c8a770a628f0ff96976d597

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET / HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
X-Powered-By: PHP/7.1.33
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

firefox.settings.services.mozilla.com/v1/

143.204.55.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 12:35:15 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: y5rN-fX1MSyNpNzpU49113VfRSMlKrv0ftrjXJaiswJo8AWXgOTTQw==
Age: 2790

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5529
Expires: Mon, 26 Sep 2022 14:53:54 GMT
Date: Mon, 26 Sep 2022 13:21:45 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

143.204.55.49

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
143.204.55.49:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ay-X3xPXV2LjzUdY2msYSdi-TAmpPZoRFTvNBR3rfXQY-jym9us2bw==
age: 31590
X-Firefox-Spdy: h2

code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css

172.67.69.29

200 OK

8.3 kB

URL HTTP/1.1
code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css
IP
172.67.69.29:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 text, with very long lines (50806)
Size
8.3 kB (8313 bytes)
Hash
652781f3156417c4958cf88f5b0fd946
d7549932680e6e63ff005cf094e27f30762cc2d9
91696649e6ea1e5e2f0a1ac990482eaa301465d8302eb4a24ea8996fc2409dbc

HTTP Headers

GET /ionicons/2.0.1/css/ionicons.min.css HTTP/1.1
Host: code.ionicframework.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Content-Type: text/css; charset=utf-8
Content-Length: 8313
Connection: keep-alive
Last-Modified: Tue, 28 Jun 2022 16:06:13 GMT
Access-Control-Allow-Origin: *
ETag: W/"62bb26f5-c854"
expires: Sat, 24 Sep 2022 17:54:49 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
x-proxy-cache: HIT
X-GitHub-Request-Id: 8374:37EF:120AABD:1862577:632F427A
Via: 1.1 varnish
Age: 39035
X-Served-By: cache-bma1636-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1664159471.982844,VS0,VE1
Vary: Accept-Encoding
X-Fastly-Request-ID: 52ae5d9b90dcab5a7240cd7f4835b4ef7440a20d
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xB0%2Bn2W2c4lYT4IkKikGfVh25EphBvWdiltOU3GqR%2BAJo3cKqBLJvg2hhIdn2tYWdoUh9UMc5fIWVCxwimwQlObotJRHmxim2GgPLR%2FKuNKBAgVYDo%2FVFBbREz%2FR47wWIAd4SYbscA5E"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750c4df3fb3e0b02-OSL
alt-svc: h2=":443"; ma=60

fonts.googleapis.com/css?family=Lato:400,300,700

142.250.74.10

200 OK

386 B

URL HTTP/1.1
fonts.googleapis.com/css?family=Lato:400,300,700
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
386 B (386 bytes)
Hash
88aba26970ea41ba4a8d4a0ec987d39e
d81dcd9677b15fd128f3b06a1e4c8047e19a659b
55040a618035f8ebaffe610905b981b9f9334ec7928395e20a0cfbdb720da3ee

HTTP Headers

GET /css?family=Lato:400,300,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 26 Sep 2022 13:21:45 GMT
Date: Mon, 26 Sep 2022 13:21:45 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 13:21:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

212.59.240.192/css/owl.carousel.css

212.59.240.192

200 OK

4.6 kB

URL HTTP/1.1
212.59.240.192/css/owl.carousel.css
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text
Size
4.6 kB (4614 bytes)
Hash
b51416af9e8adbe3d16f5f2526aba221
097c8d67412f44534449ed4cadc6dd22b025801d
dd7b97c7ad9d7b3eb79bdc728bcbc6a7ab8e3d5db0421fb0dd16d34f3dc88277

HTTP Headers

GET /css/owl.carousel.css HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "1206-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 4614
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

212.59.240.192/css/responsive.css

212.59.240.192

200 OK

2.1 kB

URL HTTP/1.1
212.59.240.192/css/responsive.css
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text
Size
2.1 kB (2063 bytes)
Hash
e1d0cd3c8d6d29d24aef915cb4da5b29
0dd2140da190e7f9ca4bf9eec42cf6af9e268484
a6c274f085ba8d281e715ae0dfcdddee04f76196cdc71d9dc1403e91fa5c0123

HTTP Headers

GET /css/responsive.css HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "80f-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 2063
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

212.59.240.192/css/bootstrap.min.css

212.59.240.192

200 OK

114 kB

URL HTTP/1.1
212.59.240.192/css/bootstrap.min.css
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text, with very long lines (65371)
Size
114 kB (114011 bytes)
Hash
78e7f91c0c4cca415e0683626aa23925
35e0b4e5ac71901d9919b1a32b5ae69cc660d470
96b126417447a9c5d415f06e00e2e6372248c9857f5ff60b6477f8c6f55c449a

HTTP Headers

GET /css/bootstrap.min.css HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "1bd5b-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 114011
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

212.59.240.192/css/font-awesome.min.css

212.59.240.192

200 OK

22 kB

URL HTTP/1.1
212.59.240.192/css/font-awesome.min.css
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text, with very long lines (21822)
Size
22 kB (21984 bytes)
Hash
feda974a77ea5783b8be673f142b7c88
b71d1c7c315b67c614563382d1c2a868ac14d729
0fb1bbca73646e8e2b93c82e8d8b219647b13d4b440c48e338290b9a685b8de1

HTTP Headers

GET /css/font-awesome.min.css HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "55e0-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 21984
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

212.59.240.192/css/main.css

212.59.240.192

200 OK

18 kB

URL HTTP/1.1
212.59.240.192/css/main.css
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text
Size
18 kB (17490 bytes)
Hash
976a85850fd9c2dc8b9f67c975ee08b0
ecd2dfde1e7c5b90ddc116b8d38f14cf0c361c64
b218230494c356941b5afcb3e1f2fb8d03950b02bd79d76a935276503a53ab5e

HTTP Headers

GET /css/main.css HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "4452-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 17490
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 13:21:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

212.59.240.192/css/animate.css

212.59.240.192

200 OK

74 kB

URL HTTP/1.1
212.59.240.192/css/animate.css
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text, with CRLF line terminators
Size
74 kB (74361 bytes)
Hash
3a5e1fcbbef53d830e580efc7b32d0b1
619625d017eadd7f30156ae2237f23ae7cc3b68d
668b90c3bed422fa7ce2453a294ceb2fd81419d2ad13813d53e8501072d79f16

HTTP Headers

GET /css/animate.css HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "12279-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 74361
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

212.59.240.192/js/jquery.lwtCountdown-1.0.js

212.59.240.192

200 OK

5.2 kB

URL HTTP/1.1
212.59.240.192/js/jquery.lwtCountdown-1.0.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text, with CRLF line terminators
Size
5.2 kB (5188 bytes)
Hash
2356a2380e099ee017e2800dc1448509
e2ff5607657bd0a45c0b7765d87d502cb16bd141
47ab023691eeed8f1eff1479fb882b115dd905ca3dabd01171f0896c6a2e52dc

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/jquery.lwtCountdown-1.0.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "1444-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 5188
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

212.59.240.192/js/vendor/modernizr-2.6.2.min.js

212.59.240.192

200 OK

15 kB

URL HTTP/1.1
212.59.240.192/js/vendor/modernizr-2.6.2.min.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
HTML document, ASCII text, with very long lines (14756)
Size
15 kB (15414 bytes)
Hash
42306a279a9e831515347ae319181cd1
d069641242e4fe1beb6de8f53a77dd964c98bce0
cf25ec18f223f4c51ce1128a42e644cdc2244d88f89d1a51440d9dbe51f4efe8

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/vendor/modernizr-2.6.2.min.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "3c36-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 15414
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

212.59.240.192/js/bootstrap.min.js

212.59.240.192

200 OK

29 kB

URL HTTP/1.1
212.59.240.192/js/bootstrap.min.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text, with very long lines (28928)
Size
29 kB (29097 bytes)
Hash
e1d08589ec26bec3a81625ce274d76d9
c6a8a0f02ee0ecd975226ae4b38e9660750d1f93
03bf371e3ca4739cfe6bea61f0126b7cbb94e4713e970651f9acd5acb3d9e399

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/bootstrap.min.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "71a9-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 29097
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

maps.googleapis.com/maps/api/js?sensor=false

216.58.207.202

200 OK

54 kB

URL HTTP/2
maps.googleapis.com/maps/api/js?sensor=false
IP
216.58.207.202:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2590)
Size
54 kB (54089 bytes)
Hash
64bf4b8d21a78df123f978563772fe09
1ddcba26bfe406de5c64644739fea68c38001223
589eb7e87d4e6d605414721ee5a76e3bffa44ae89937abb20f7540589477c63b

HTTP Headers

GET /maps/api/js?sensor=false HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://212.59.240.192/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Mon, 26 Sep 2022 13:21:45 GMT
expires: Mon, 26 Sep 2022 13:51:45 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 54089
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=13
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

212.59.240.192/js/jquery.validate.min.js

212.59.240.192

200 OK

22 kB

URL HTTP/1.1
212.59.240.192/js/jquery.validate.min.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
Unicode text, UTF-8 text, with very long lines (21445)
Size
22 kB (21584 bytes)
Hash
d7342d64b483db4cdc836047765c07f3
e1085fb6185d0c47ccd1f202d197ba626f017e15
f0f5373ad203101ea91bf826c5a7ef8f7cd74887f06bad2cb9277a504503b9e2

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/jquery.validate.min.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "5450-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 21584
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

212.59.240.192/js/owl.carousel.min.js

212.59.240.192

200 OK

40 kB

URL HTTP/1.1
212.59.240.192/js/owl.carousel.min.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text, with very long lines (32068)
Size
40 kB (40401 bytes)
Hash
ffaa3c82ad2c6e216e68aca44746e1be
2fa7c468110fa68f1f3df6718daf971871623ee9
83553d22ccd56e5576d544f6ba93475c712b3c02d312893eea2acc16de5fcf91

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/owl.carousel.min.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "9dd1-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 40401
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

212.59.240.192/js/jquery.form.js

212.59.240.192

200 OK

39 kB

URL HTTP/1.1
212.59.240.192/js/jquery.form.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text
Size
39 kB (39236 bytes)
Hash
529b65010afdc2aac6389b647908f5b8
96828fd4ab8a75a96338df88f986b36c7e754fef
800c1c83a86f7fe665ac6d49c6370e2f045f70f5c7859ef4a0e686b4759e46b3

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/jquery.form.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "9944-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 39236
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript

212.59.240.192/js/jquery.sticky.js

212.59.240.192

200 OK

5.7 kB

URL HTTP/1.1
212.59.240.192/js/jquery.sticky.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text
Size
5.7 kB (5654 bytes)
Hash
1207f10dca0217442912cb14dfcac518
341a3c047fbb6916ef9f27026c239682286acea4
e2625c28848cbca930c42cf94c85201372302f87978932e468d75466addc23e6

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/jquery.sticky.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "1616-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 5654
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

212.59.240.192/js/jquery.nav.js

212.59.240.192

200 OK

5.1 kB

URL HTTP/1.1
212.59.240.192/js/jquery.nav.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text
Size
5.1 kB (5138 bytes)
Hash
a33571eb2591514e45765696e5d92c9f
e680863a86670bf2d8e0b1f5b33c267f0ddc5cd1
707a967916ff7ca8411b995ff078ee44fcbb627bbb11f067643f7a6ab7f99806

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/jquery.nav.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "1412-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 5138
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

212.59.240.192/js/plugins.js

212.59.240.192

200 OK

733 B

URL HTTP/1.1
212.59.240.192/js/plugins.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text
Size
733 B (733 bytes)
Hash
e2679049e95a7201b815c3cf004aefc4
ea250a66815d0665a9b5677991eaaba789bfc125
267f86b986829cb9a3c46b9fcdbc56783bb923005ba5ef5b27efce504e72ecfa

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/plugins.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "2dd-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 733
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

212.59.240.192/js/wow.min.js

212.59.240.192

200 OK

8.2 kB

URL HTTP/1.1
212.59.240.192/js/wow.min.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text, with very long lines (8152), with CRLF line terminators
Size
8.2 kB (8183 bytes)
Hash
ed4b12ef0f7e4bf5d5ff3555d18718cb
258fa26dec8fcf4769d49eaca6712ef56923673e
3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/wow.min.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "1ff7-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 8183
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript

code.ionicframework.com/ionicons/2.0.1/fonts/ionicons.ttf?v=2.0.1

172.67.69.29

200 OK

110 kB

URL HTTP/1.1
code.ionicframework.com/ionicons/2.0.1/fonts/ionicons.ttf?v=2.0.1
IP
172.67.69.29:0
ASN
#13335 CLOUDFLARENET

File type
TrueType Font data, 15 tables, 1st "FFTM", 14 names, Macintosh\012- data
Size
110 kB (110019 bytes)
Hash
fe88542d0c98a10d8c70c958d82541f8
b2c7d8fc28d6126a758378aa22bcb252e1bb2a34
0f69b635b4b7749aa0e52d46b21a3610adf40618ee1e83dc2c0653c29432c80d

HTTP Headers

GET /ionicons/2.0.1/fonts/ionicons.ttf?v=2.0.1 HTTP/1.1
Host: code.ionicframework.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://212.59.240.192
Connection: keep-alive
Referer: http://code.ionicframework.com/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Content-Type: font/ttf
Content-Length: 110019
Connection: keep-alive
x-origin-cache: HIT
Last-Modified: Tue, 28 Jun 2022 16:06:13 GMT
Access-Control-Allow-Origin: *
ETag: W/"62bb26f5-2e05c"
expires: Sun, 25 Sep 2022 23:01:07 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
x-proxy-cache: HIT
X-GitHub-Request-Id: 22F0:54AC:1773037:1848B4F:6330DC34
Via: 1.1 varnish
X-Served-By: cache-bma1629-BMA
X-Cache: HIT
X-Cache-Hits: 2
X-Timer: S1664198506.892361,VS0,VE1
Vary: Accept-Encoding
X-Fastly-Request-ID: deacc7af7e970c67857df6bfc90feba951e8266e
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GGAwUDR5aleufeZDwh6lUMvmsDSMFVSHFFg7ev4RgJ6olPoWUffoa8kWUlrVRgqaNdyHMTjJkPHY%2FVIW5TZ0YQCO%2Fk0VcIXOD7AxqNx%2BmUiOBlSLk9sG%2FRdyrgFA5nIi%2FgWz8jHgUJei"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750c4df5b981fac4-OSL
alt-svc: h2=":443"; ma=60

fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2

142.250.74.163

200 OK

23 kB

URL HTTP/1.1
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Size
23 kB (23040 bytes)
Hash
de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49

HTTP Headers

GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://212.59.240.192
Connection: keep-alive
Referer: http://fonts.googleapis.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23040
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 20 Sep 2022 17:26:13 GMT
Expires: Wed, 20 Sep 2023 17:26:13 GMT
Cache-Control: public, max-age=31536000
Age: 503732
Last-Modified: Tue, 26 Apr 2022 15:56:42 GMT
Content-Type: font/woff2

fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2

142.250.74.163

200 OK

24 kB

URL HTTP/1.1
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size
24 kB (23580 bytes)
Hash
e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537

HTTP Headers

GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://212.59.240.192
Connection: keep-alive
Referer: http://fonts.googleapis.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23580
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 20 Sep 2022 18:18:58 GMT
Expires: Wed, 20 Sep 2023 18:18:58 GMT
Cache-Control: public, max-age=31536000
Age: 500567
Last-Modified: Tue, 26 Apr 2022 15:48:56 GMT
Content-Type: font/woff2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 13:21:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2

142.250.74.163

200 OK

23 kB

URL HTTP/1.1
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data
Size
23 kB (23236 bytes)
Hash
716309aab2bca045f9627f63ad79d0bf
38804233a29aaf975d557fe14e762c627bef76e0
115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429

HTTP Headers

GET /s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://212.59.240.192
Connection: keep-alive
Referer: http://fonts.googleapis.com/

HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23236
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 16:53:38 GMT
Expires: Sun, 24 Sep 2023 16:53:38 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 26 Apr 2022 16:04:12 GMT
Content-Type: font/woff2
Age: 160087

212.59.240.192/js/main.js

212.59.240.192

200 OK

4.9 kB

URL HTTP/1.1
212.59.240.192/js/main.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
ASCII text, with very long lines (624)
Size
4.9 kB (4851 bytes)
Hash
8a7f1358e65bad790f1f1c24da310aea
aa44e2bb61cdbc57271759d77d4b7803e1ef95a0
bd6808f1443357a7c2208297567f99f4a8ba54a538d0283e105721e42b40ddbc

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/main.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 08 Aug 2019 08:49:46 GMT
ETag: "12f3-58f9723bd5e80"
Accept-Ranges: bytes
Content-Length: 4851
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript

212.59.240.192/images/about/2.jpg

212.59.240.192

200 OK

35 kB

URL HTTP/1.1
212.59.240.192/images/about/2.jpg
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 677x448, components 3\012- data
Size
35 kB (34974 bytes)
Hash
0469883b7145c611a0c8e6b35c36c47a
5968d37e9b010abce7310ea7f1269f5a86a3bb8b
ac159666c682b3bb62b42ef7c40e5a8d4cac710023c8fa9cef3a2904ad21e0ae

HTTP Headers

GET /images/about/2.jpg HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "889e-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 34974
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg

212.59.240.192/images/logo.png

212.59.240.192

200 OK

2.9 kB

URL HTTP/1.1
212.59.240.192/images/logo.png
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
PNG image data, 120 x 41, 8-bit/color RGBA, non-interlaced\012- data
Size
2.9 kB (2919 bytes)
Hash
f1cedb063e892e4a6fc28debab3991d3
7aaa53e578ee41eaa3386f4ba46d1b743cac33a7
cafcc94334619aa80a69e0f636d141a077a6637baa5d1c91a1c69754e103ad29

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "b67-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 2919
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

212.59.240.192/images/about/3.jpg

212.59.240.192

200 OK

20 kB

URL HTTP/1.1
212.59.240.192/images/about/3.jpg
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 677x448, components 3\012- data
Size
20 kB (19536 bytes)
Hash
013f04fd325d58987e2c4e08e932520d
b0a8fce45b78e22ec107795c8d17d201330c10c6
c949f61bddcf29f511f03c50ec73191ff88b9349ede7a1439aaaa98488d535ba

HTTP Headers

GET /images/about/3.jpg HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "4c50-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 19536
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg

212.59.240.192/images/about/1.jpg

212.59.240.192

200 OK

51 kB

URL HTTP/1.1
212.59.240.192/images/about/1.jpg
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 677x448, components 3\012- data
Size
51 kB (51399 bytes)
Hash
2665cd813006e24a2a6ae8c2f712cd54
da891a3ffd405924b416c0baddaa8ba120f87fb8
7b648a032b5291681b1c74bf00403374e6954f08ef8e1e691c5d26bcd950dc3e

HTTP Headers

GET /images/about/1.jpg HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "c8c7-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 51399
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg

212.59.240.192/images/call-to-action.jpg

212.59.240.192

200 OK

43 kB

URL HTTP/1.1
212.59.240.192/images/call-to-action.jpg
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1300x244, components 3\012- data
Size
43 kB (42561 bytes)
Hash
1e9c6392580fd69806cb33c660db4400
4390b6bb6ef3defa933440bfb724154fd3a86736
38095634a28976784e0261cb081847145b97c910b510b86ead6e46c7abf71435

HTTP Headers

GET /images/call-to-action.jpg HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/css/main.css

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "a641-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 42561
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg

212.59.240.192/images/logo-2.png

212.59.240.192

200 OK

3.1 kB

URL HTTP/1.1
212.59.240.192/images/logo-2.png
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
PNG image data, 120 x 41, 8-bit/color RGBA, non-interlaced\012- data
Size
3.1 kB (3120 bytes)
Hash
34313a55d45b5d3dc82e66375ba40959
4c069abfa6830afc1f3bdcac91a578305bf724ff
1d852dd760d6559755a02a425f4c04eb324c5527aa7399a5caebdcbdc440fe63

HTTP Headers

GET /images/logo-2.png HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "c30-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 3120
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 26 Sep 2022 13:10:46 GMT
Expires: Mon, 26 Sep 2022 13:29:45 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1DzSoFSBbXf8uUJ9LgCcF0-jhExJxmw5iwJG3m3Z8xP0ux7RBx2abg==
Age: 660

212.59.240.192/favicon.ico

212.59.240.192

200 OK

766 B

URL HTTP/1.1
212.59.240.192/favicon.ico
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type
MS Windows icon resource - 1 icon, 32x32, 16 colors, 4 bits/pixel\012- data
Size
766 B (766 bytes)
Hash
338abbb5ea8d80b9869555eca253d49d
63e4879d10467b4bc481a208c3a64649242a1420
36a6f4ba02692dd0d4f25aa288e598a8f36d5e1a18513f0bdbbc0ada9f5b729d

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:46 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "2fe-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 766
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
5adb7eb1d103eadeeafac36e663ffdd3
23b784388dd634fa736cd60aed71570661e73d02
5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1755
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 13:21:46 GMT
Last-Modified: Mon, 26 Sep 2022 12:52:31 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

34.214.17.205

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.214.17.205:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0LcDzTisF1NHQ3oon38XAw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YIqGrS6GxxLRb22JVr1NBD3Nv7Y=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8046
Expires: Mon, 26 Sep 2022 15:35:53 GMT
Date: Mon, 26 Sep 2022 13:21:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8046
Expires: Mon, 26 Sep 2022 15:35:53 GMT
Date: Mon, 26 Sep 2022 13:21:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8046
Expires: Mon, 26 Sep 2022 15:35:53 GMT
Date: Mon, 26 Sep 2022 13:21:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8046
Expires: Mon, 26 Sep 2022 15:35:53 GMT
Date: Mon, 26 Sep 2022 13:21:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8046
Expires: Mon, 26 Sep 2022 15:35:53 GMT
Date: Mon, 26 Sep 2022 13:21:47 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bfaf0f-e716-4cf7-9785-ffcd146aed68.jpeg

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bfaf0f-e716-4cf7-9785-ffcd146aed68.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7648 bytes)
Hash
75a459d4f554d38a1701e727185c7e91
042d4b6927f80c5a44bb7baf77b763577c19ed36
c01b0d3a28ed31ec9432d879310cffa313260f97044f1ed473aa0331bdba5607

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bfaf0f-e716-4cf7-9785-ffcd146aed68.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7648
x-amzn-requestid: 359116cc-4e08-4c57-8aba-0aa7bd232c98
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSKWG2BIAMFlHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca42-2130239f2dab781c0f49f0e4;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: caqLwNG92a0CRHwZLzFYIndWri6UOUyN9Bm8pqEytrumcpAMAo0WmQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:47:32 GMT
age: 56055
etag: "042d4b6927f80c5a44bb7baf77b763577c19ed36"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a7e9af9-ebe4-49ea-9af4-d118f2ef0b43.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8851 bytes)
Hash
431ff1171a3d7c60a31cc1c3f62164ee
4b32113aaf50132b38c8034017a6eb5a32d7040b
65d598db252fb3979d3df3cb8d052861bb31d6187552f9c694ec27a322b308c9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a7e9af9-ebe4-49ea-9af4-d118f2ef0b43.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8851
x-amzn-requestid: dbe6ba4c-3d38-48e8-9d08-088d8e26e7a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUDAE23oAMF_yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd46-4f3b85952fa3109d2921d0e1;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wbbfzE5nQkhK_nsXX8XGJbOl3Yf6NDA1r_AC-0dOzqJDkLQ2BLxK9A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:32:20 GMT
age: 53367
etag: "4b32113aaf50132b38c8034017a6eb5a32d7040b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Size
13 kB (12826 bytes)
Hash
b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: W6ZD1652Yn1xqZG7ehDcirlYoG8Hcsrdj11Fzfgj7zb-OiU8xHj1gw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:37:19 GMT
age: 56668
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5157 bytes)
Hash
2fe8c4f0c70fb6c1f4259eabedc7015e
85e378d0fff856832a8dd01743516b9476fed8c6
508a1c7d350fcf82d1ece0b99f8557b2f300c7c1148f28c3ae9fece20530e4b6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5157
x-amzn-requestid: b5748f49-693f-4bc3-a850-cb68e770de24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUG9GUHIAMF7pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd5f-5d2aaa212cf1be2506593746;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4h9lb_7egxb2hBbxjcS_cpZ5lDq6Lx-c_WUZyRHdUA0YTwr6kgDuiQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:10:16 GMT
age: 54691
etag: "85e378d0fff856832a8dd01743516b9476fed8c6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11728 bytes)
Hash
968b9c138702fb5994d1d9eab1a697fa
9660bb2d38079182efbd11d7a687bfc7f9d30751
5ba74820ad451747c8ed25529f06b037bebf4c0616a1f2165c9197c1171db7a6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11728
x-amzn-requestid: bf60e58f-c4f4-45c7-923b-0d1539f720f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUCGGw7oAMF3wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd40-32043c1b1411544f5d00edc0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:50:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZRG0Axnhc5RY5rDbnnbauco9dpPeFdkP01UxkpNYI5pgSbfGKWcikw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:16:26 GMT
age: 54321
etag: "9660bb2d38079182efbd11d7a687bfc7f9d30751"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8637 bytes)
Hash
d02ede0c964f3346fd53ae2950bf2a62
e49306a3713cb724be024a4ddb5e90645718a718
c0e653d89656016c55aca9b198b9191620f1ae9a3c45742a90744bd74c4f9505

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8637
x-amzn-requestid: 07dc23e0-000f-4f6c-8d2b-0e65d88be270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvvEenoAMFr0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-520803124760abc216152d7b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mToVKJcSAtJB1AOuQ-Y9o_EZzyhUuZJivVa3DLql5FwzK4NC82kh5Q==
via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:06:17 GMT
age: 54930
etag: "e49306a3713cb724be024a4ddb5e90645718a718"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

212.59.240.192/img/header-overlay.png

212.59.240.192

200 OK

0 B

URL HTTP/1.1
212.59.240.192/img/header-overlay.png
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /img/header-overlay.png HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/css/main.css

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
X-Powered-By: PHP/7.1.33
Content-Length: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

212.59.240.192/js/vendor/jquery-1.10.2.min.js

212.59.240.192

200 OK

0 B

URL HTTP/1.1
212.59.240.192/js/vendor/jquery-1.10.2.min.js
IP
212.59.240.192:0
ASN
#59491 Livenet Sp. z o.o.

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/vendor/jquery-1.10.2.min.js HTTP/1.1
Host: 212.59.240.192
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://212.59.240.192/

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 13:21:45 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.1.33
Last-Modified: Thu, 11 Aug 2016 04:38:52 GMT
ETag: "16bb3-539c457be0f00"
Accept-Ranges: bytes
Content-Length: 93107
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (16)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations