opensea-io.us/
64.31.14.90301 Moved Permanently 162 B IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET / HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 07 Dec 2022 12:20:25 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://opensea-io.us/
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2821
Expires: Wed, 07 Dec 2022 13:07:26 GMT
Date: Wed, 07 Dec 2022 12:20:25 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6503
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:25 GMT
Etag: "638f19f6-1d7"
Last-Modified: Wed, 07 Dec 2022 10:32:02 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 11:20:28 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3597
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16201
Expires: Wed, 07 Dec 2022 16:50:26 GMT
Date: Wed, 07 Dec 2022 12:20:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: XTNHHWRS49GApMEKr4mYIid3dXouUYz+aUbfkZB5cDulrTMkUdkjifx8hl2FmKmZZ5VzgyeabYU=
x-amz-request-id: B8AC5VWGF41VKW10
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 11:47:29 GMT
age: 1976
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:25 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5a2d9d63b29c452534a9e6f9fdd9f550
cf5edb765880743511d3d43a1c1b88d6cfc71b0b
135afe80cedfa69981b8a48161f8ad0a6e660c64a0798cb72d3401bbdb653045
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "135AFE80CEDFA69981B8A48161F8AD0A6E660C64A0798CB72D3401BBDB653045"
Last-Modified: Tue, 06 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 07 Dec 2022 18:20:25 GMT
Date: Wed, 07 Dec 2022 12:20:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 12:08:58 GMT
cache-control: public,max-age=3600
age: 687
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6497
Cache-Control: max-age=167681
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 10:55:07 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
opensea-io.us/assets/images/media/trust.png
64.31.14.90200 OK 12 kB URL HTTP/2 opensea-io.us/assets/images/media/trust.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 512 x 247, 8-bit/color RGBA, non-interlaced\012- data
Hash f3ff07254b9994058d557ab3c86bb2bc
f2100a85293aa31fe7e0d14c1e058430099a161d
244793fb9439b1028ae8e4f2a1eb2649a9eb7faa67df04e30a0f5a1bc6c5966a
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/trust.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 12291
last-modified: Wed, 01 Dec 2021 10:53:36 GMT
etag: "61a75430-3003"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/media/safepal.png
64.31.14.90200 OK 12 kB URL HTTP/2 opensea-io.us/assets/images/media/safepal.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 514 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 1d236ae8ccc14622ad076cdb6d6835e5
9031913560b5c3db05d9561e80653fd82af2646a
d6381609621fae329a549e57d43432a7d7000c20a200d0f5388da078bc7c63e4
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/safepal.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 11867
last-modified: Thu, 02 Dec 2021 00:36:52 GMT
etag: "61a81524-2e5b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/media/math.png
64.31.14.90200 OK 7.2 kB URL HTTP/2 opensea-io.us/assets/images/media/math.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 340 x 183, 8-bit colormap, non-interlaced\012- data
Hash 4473ff9c2c057d6ac4240bd6e7759349
e17b560f53974ef252fbb322e7c8d034aebd6690
b0b38756b915f03c8070087f049eccac8a0a7e80e7d6aafedfc2bf87946c68ee
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/math.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 7158
last-modified: Thu, 02 Dec 2021 00:09:18 GMT
etag: "61a80eae-1bf6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
142.250.74.106200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js
IP 142.250.74.106:0
File type ASCII text, with very long lines (32061)
Hash b90b3d2618cce9d766152cd3092b5c27
496339457cd00caab8118e2e1f30ea18dc05b9f4
b7b155aa8c6b5db28f9a6b41e88c96e9462c196c700add426f8ef32c9ce1ed41
GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29671
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 18:43:41 GMT
expires: Thu, 30 Nov 2023 18:43:41 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 581805
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/images/media/walletconnect-logo.png
64.31.14.90200 OK 3.4 kB URL HTTP/2 opensea-io.us/assets/images/media/walletconnect-logo.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 286 x 176, 8-bit colormap, non-interlaced\012- data
Hash 509cd98112fdc9b7a07e516fecce320e
8fc19b5b4ab53036f479124499677398d15f11f8
ec2eada2aace5a4e51644986b6b4fa0e750dcba4390d9bb1a8ec3fd378049ee3
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/walletconnect-logo.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 3415
last-modified: Thu, 02 Dec 2021 04:30:24 GMT
etag: "61a84be0-d57"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
opensea-io.us/assets/images/media/binance.png
64.31.14.90200 OK 40 kB URL HTTP/2 opensea-io.us/assets/images/media/binance.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 1024 x 232, 8-bit/color RGBA, non-interlaced\012- data
Hash 6ac926b828ca0430d7103bacd062b086
595d827a956b675299b0190468c602c7d66a5a7f
7ffb4dce58b9714be95d1627ebe80e420ca58e489d95f371b19927e0493ec31f
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/binance.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 40053
last-modified: Thu, 02 Dec 2021 00:58:34 GMT
etag: "61a81a3a-9c75"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/media/coin98.png
64.31.14.90200 OK 37 kB URL HTTP/2 opensea-io.us/assets/images/media/coin98.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 1004 x 293, 8-bit/color RGBA, non-interlaced\012- data
Hash 65c8e1ac373c711c710c994c3f19b2ae
a8e5540ee20d94721e5ba575685c1d97264a8f32
1908c3f5b1976cd9801caf8c9ada40ab10e2551106b8c637d54baa99d9e6da06
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/coin98.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 36575
last-modified: Thu, 02 Dec 2021 02:54:42 GMT
etag: "61a83572-8edf"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/media/metamask-fox.svg
64.31.14.90200 OK 3.2 kB URL HTTP/2 opensea-io.us/assets/images/media/metamask-fox.svg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3231), with no line terminators
Hash c06f3a3e804ebc7343949fdca3fdd7f8
d96957b5a42c4f69e11a55e388234a26daf4a039
b855851451c3eb7220bc7331d6cf7f19dad4580ebc35610211f028848ba7fc34
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/media/metamask-fox.svg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/svg+xml
content-length: 3231
last-modified: Thu, 02 Dec 2021 03:35:54 GMT
etag: "61a83f1a-c9f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/opensea.svg
64.31.14.90200 OK 3.9 kB URL HTTP/2 opensea-io.us/assets/images/opensea.svg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3905), with no line terminators
Hash c7c3ed10e5c602fba31f6e93a6fbc957
3fa948ddaa2c1aa91fbb94527a7908f39896a887
8ae5fefbaeebd874dfebfc4b5ef2a251005ae26b0a7cb9bd531a1c131c44f6ad
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/opensea.svg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/svg+xml
content-length: 3905
last-modified: Fri, 17 Dec 2021 08:26:06 GMT
etag: "61bc499e-f41"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/media/math-2.png
64.31.14.90200 OK 13 kB URL HTTP/2 opensea-io.us/assets/images/media/math-2.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash a2e66b93a02f261b86bc5758166ef555
7b04f1275ee6be75af8acacaf9e56c620baa8e8a
d358840e3efc571222edc8fba26f0a7def6a0e413fc0daf07c2b110225966db6
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/math-2.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 12631
last-modified: Thu, 23 Dec 2021 11:03:08 GMT
etag: "61c4576c-3157"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
opensea-io.us/assets/images/wallet/metamask-alternative.webp
64.31.14.90200 OK 62 kB URL HTTP/2 opensea-io.us/assets/images/wallet/metamask-alternative.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Hash f67565450ff9a3c29c5a73f01a58ea72
9632ff494b58def54782d1d19218107283dcc836
5e45e1bc3b0e1c17fc51b0cc145a1f99bb0dd93959afa62d7166204dbcecdd3c
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet/metamask-alternative.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 62154
last-modified: Thu, 23 Dec 2021 06:48:56 GMT
etag: "61c41bd8-f2ca"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
52.39.62.124101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.39.62.124:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: t6RTLp4NL+ai0rP8cGfmZQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ELDo4+3zAreyXAL+G+kjpEF0hvk=
opensea-io.us/assets/images/avatar.jpg
64.31.14.90200 OK 4.0 kB URL HTTP/2 opensea-io.us/assets/images/avatar.jpg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x53, components 3\012- data
Hash 8db3346b4c7661ebd80d60d30f2376c3
92b7db5fd615fe69f8feacfe0b6c475d3ce90842
4c0d06d64a8c7b7e628df806e068ca0993f6bc0eda6e6bd949b8e267b12443e1
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/avatar.jpg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/jpeg
content-length: 4023
last-modified: Tue, 21 Dec 2021 09:22:40 GMT
etag: "61c19ce0-fb7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/4.png
64.31.14.90200 OK 4.1 kB URL HTTP/2 opensea-io.us/assets/images/nft/4.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e1a49a417f8b9d62a662f9114f85aa10
6743f2cbfcc78f6f4d5850054d131daa874e5854
896d3d489f353b7b4f3995e0ec155ac30e0a76f5d02e2a2d4cfdc728d2db982f
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/4.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 4149
last-modified: Wed, 22 Dec 2021 06:23:42 GMT
etag: "61c2c46e-1035"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/5.png
64.31.14.90200 OK 22 kB URL HTTP/2 opensea-io.us/assets/images/nft/5.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 9374e0e5ef2709b1e36b80f4df1939e6
00df4b7c5f571ed5658b9caecbeeb7838840859d
b8d6db569f4b3d492427b9b1f340f5d748cd5069dbd32058f15118efda9d8f5e
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/5.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 22249
last-modified: Wed, 22 Dec 2021 06:23:48 GMT
etag: "61c2c474-56e9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/media/binance-2.png
64.31.14.90200 OK 26 kB URL HTTP/2 opensea-io.us/assets/images/media/binance-2.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash bb44e9b6506daab9507f1914762c4da7
e40f2cf474778dcbe4767937c04df9222fa93e18
14722564bad5407c92440fca9dc43c708e5c4ee350f72a08b4bbdc6ff8b0f966
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/binance-2.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 25833
last-modified: Thu, 23 Dec 2021 11:00:14 GMT
etag: "61c456be-64e9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/2.jpg
64.31.14.90200 OK 3.0 kB URL HTTP/2 opensea-io.us/assets/images/nft/2.jpg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 5f65d917c27e533b0027eb43700ff3b9
6e88f5cd8b42ebe39e8a228c3702fcfb2e334632
987545c8c5dd5389df9617568ca4fdda0916c3a6c4b0a46ef93676a0371355f8
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/2.jpg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/jpeg
content-length: 2970
last-modified: Wed, 22 Dec 2021 06:23:26 GMT
etag: "61c2c45e-b9a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/wallet/walletconnect-alternative.webp
64.31.14.90200 OK 1.8 kB URL HTTP/2 opensea-io.us/assets/images/wallet/walletconnect-alternative.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Hash bc79cf15ae946361ea45f926480b8906
4c596a3a3bc8bf270f3c2520558522b7caba9358
56f27987ad3ced2c98776375e3e0554ec3e49d9d30585eb3274723963eed3d70
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet/walletconnect-alternative.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 1750
last-modified: Thu, 23 Dec 2021 06:49:10 GMT
etag: "61c41be6-6d6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/1.png
64.31.14.90200 OK 3.7 kB URL HTTP/2 opensea-io.us/assets/images/nft/1.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 1209d911b32dc2147b94d606b63cd4f0
c04dac737ecc115472f8825baacc9dcced062a7a
dd96bc841f3ea99e844d79b4af86eabf5626eae058c784a6237aa1136655a814
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/1.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 3716
last-modified: Wed, 22 Dec 2021 06:23:16 GMT
etag: "61c2c454-e84"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/13.png
64.31.14.90200 OK 7.9 kB URL HTTP/2 opensea-io.us/assets/images/nft/13.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0bdfba71540624b348d9175b2e0d6e22
998e712d22141d691403202d2c3cd38c89d4e9ef
d2869ac97772c8fd23ccbf6c47b503dbf132e07960fb053ad37425d718ed2464
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/13.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 7925
last-modified: Thu, 23 Dec 2021 04:11:30 GMT
etag: "61c3f6f2-1ef5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/9.png
64.31.14.90200 OK 5.3 kB URL HTTP/2 opensea-io.us/assets/images/nft/9.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 98 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash ec5b51eb59932287963751ba5e75cd98
0a0175c8fae2c2462e9db457c95406e0825059a0
cafcd535a573c4e34e658dab37955414f6aa171255e7201273231aebb2f88ebb
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/9.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 5317
last-modified: Thu, 23 Dec 2021 04:11:06 GMT
etag: "61c3f6da-14c5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/restless-promocard.webp
64.31.14.90200 OK 93 kB URL HTTP/2 opensea-io.us/assets/images/restless-promocard.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 784x784, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 79ec48a392a0ebb6fe5411c07d424fe7
c85a82ec45043d261186ddfbf9be1110437c71cc
d377595e910904dafaa69e0e189b8f26ee248e3ce8459be73cdc58944c6c6ad0
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/restless-promocard.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 93226
last-modified: Wed, 22 Dec 2021 03:44:36 GMT
etag: "61c29f24-16c2a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
opensea-io.us/assets/images/nft/14.jpg
64.31.14.90200 OK 5.0 kB URL HTTP/2 opensea-io.us/assets/images/nft/14.jpg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 9fede95006b696d4cb4ce6eb808ef8cb
e3778157a13851fc087eb893266bc39fef18b0aa
190c5b2c6b34a26461c43c8d0b30b5132b2e928b09702b81d5b546117a304adb
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/14.jpg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/jpeg
content-length: 5020
last-modified: Thu, 23 Dec 2021 04:11:38 GMT
etag: "61c3f6fa-139c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/box-round-2.jpg
64.31.14.90200 OK 3.3 kB URL HTTP/2 opensea-io.us/assets/images/box-round-2.jpg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash f4395c8ac4ac54a65f56aa7a69b43bd0
606050f665bfec3a725c7cf4e8687eb9679535cd
e4736f079ba8ebb7c4439bd7d3bebb8579c4eebde23288396f6ebaf3e25f7b74
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-round-2.jpg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/jpeg
content-length: 3315
last-modified: Wed, 22 Dec 2021 09:48:14 GMT
etag: "61c2f45e-cf3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/eth.svg
64.31.14.90200 OK 684 B URL HTTP/2 opensea-io.us/assets/images/nft/eth.svg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 6f8e2979d428180222796ff4a33ab929
49244279a17bc96f6760112da740103f6bf5aa76
c88a7b74c4d55a5b8080b148da4010b4d35f7e3aa178eab4f9b312e9b4e16547
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/nft/eth.svg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/svg+xml
content-length: 684
x-accel-version: 0.01
last-modified: Wed, 22 Dec 2021 07:59:04 GMT
etag: "2ac-5d3b77ed64200"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
opensea-io.us/assets/images/media/safepal-2.png
64.31.14.90200 OK 8.4 kB URL HTTP/2 opensea-io.us/assets/images/media/safepal-2.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash c9e253f7ac54c785a8e52b092d7cd5b5
d5cfe3a6b8c560c7dcf49f88b45a0991f120397b
c8ff5d607114ee0434fcc6a23047b04fbe9e7465a2c6d7d70c1dbf501ba0c277
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/safepal-2.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 8438
last-modified: Thu, 23 Dec 2021 11:02:04 GMT
etag: "61c4572c-20f6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/box-3.jpg
64.31.14.90200 OK 32 kB URL HTTP/2 opensea-io.us/assets/images/box-3.jpg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 371x200, components 3\012- data
Hash fec4631e12cc4141e1e2635ef44084b6
a7e9561dd810991f71bae0314a1ca92c451650df
2c558695c9958eaaca5c9f6ac5bb1a079f8980de4963693bf831f68577ac8812
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-3.jpg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/jpeg
content-length: 32446
last-modified: Wed, 22 Dec 2021 09:47:56 GMT
etag: "61c2f44c-7ebe"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/6.png
64.31.14.90200 OK 1.5 kB URL HTTP/2 opensea-io.us/assets/images/nft/6.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash bb6a788b5b6fe3130c5dcc982636532b
2ea62313ebbefbedb58aeaf8f136c754b5c31380
0ab3b532fe6146c7a8a2b5c8d8c9aa855824715ea8194784d75c5b56a7208425
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/6.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 1500
last-modified: Thu, 23 Dec 2021 04:10:40 GMT
etag: "61c3f6c0-5dc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/15.png
64.31.14.90200 OK 5.8 kB URL HTTP/2 opensea-io.us/assets/images/nft/15.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash c92a879c154730c5ac23ce546a142bab
7e65de6c54d6763a7ccdc394b64ca77d49e8ac21
4c06d3913bfdd7221e44618347b81655cf2f86d4cfbe71f7b7b827e051e22104
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/15.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 5771
last-modified: Thu, 23 Dec 2021 04:11:44 GMT
etag: "61c3f700-168b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/7.png
64.31.14.90200 OK 4.1 kB URL HTTP/2 opensea-io.us/assets/images/nft/7.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 98a561436ae37cf62368739c2b2d0ab3
cb633d6ef0c36f4963df9c34725174ffaf1b7f65
51f8e39428b85eb68838441f98ae3dc70a5afb7d07a9efa3518e5cfca40d5ad2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/7.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 4130
last-modified: Thu, 23 Dec 2021 04:10:52 GMT
etag: "61c3f6cc-1022"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.youtube.com/s/player/ac058a09/www-player.css
142.250.74.142200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/ac058a09/www-player.css
IP 142.250.74.142:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5a5b8eb5d8a3df4b72089b611a5e7deb
9eb088fd709aba51fcc2261764df57ddb6df1498
3e06a6dbf24b719e85dac71b46a939a516c246dee204817e5aee68f580b83406
GET /s/player/ac058a09/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49862
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 16:00:52 GMT
expires: Tue, 05 Dec 2023 16:00:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 01:22:00 GMT
content-type: text/css
age: 159574
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/images/collection.svg
64.31.14.90200 OK 1.1 kB URL HTTP/2 opensea-io.us/assets/images/collection.svg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1090), with no line terminators
Hash 7bb57bdac85951065b5c528f747fc538
4f7ffba9056a1aeb138b10bb1df80d54b93fcf46
0304371ce0adc28148c52f73da46c6aa04a81a906a40ef51a8dc3824b4a27459
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/collection.svg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/svg+xml
content-length: 1090
last-modified: Fri, 17 Dec 2021 08:25:54 GMT
etag: "61bc4992-442"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/box-round-1.png
64.31.14.90200 OK 4.3 kB URL HTTP/2 opensea-io.us/assets/images/box-round-1.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4efa7376add61639fbbf50684c70c8ab
44b377818eed2ce42f077c7214d19d1ecd708499
aec9cb69da734d6838e551235a9447816316186c76cdfc68cd134e1ded0e9b70
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-round-1.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 4268
last-modified: Wed, 22 Dec 2021 09:48:08 GMT
etag: "61c2f458-10ac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/wallet/trust-alternative.webp
64.31.14.90200 OK 5.5 kB URL HTTP/2 opensea-io.us/assets/images/wallet/trust-alternative.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Hash c9e78fe6c6e121908c1d04fdb68a8934
4460f24fadc7bf575ec84bf6022daca434947c8b
dbc6b5512ca6a2fc08f2af7f246d300c7b0ffce7da57bed015f2830a4239f515
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet/trust-alternative.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 5498
last-modified: Thu, 23 Dec 2021 06:49:40 GMT
etag: "61c41c04-157a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft.svg
64.31.14.90200 OK 966 B URL HTTP/2 opensea-io.us/assets/images/nft.svg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (966), with no line terminators
Hash 2d0a07dc21e172de5e86a7528a57c697
49fc96114ee20c1dad2f496413a284cf3ccfae9b
70af639883560c3e224a542b07775556966feedc29ee188ba0e2e97574f5f075
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/nft.svg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/svg+xml
content-length: 966
x-accel-version: 0.01
last-modified: Fri, 17 Dec 2021 08:25:52 GMT
etag: "3c6-5d35349798400"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/10.png
64.31.14.90200 OK 12 kB URL HTTP/2 opensea-io.us/assets/images/nft/10.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 99, 8-bit/color RGB, non-interlaced\012- data
Hash af6b6c4bcaf2214f3c45fde6f99f94b5
4eb18bf98ba3ddde19e752641b3ab88e7a8202dc
571ef4a6a96c9926a20ef6e316802d92f2e522752135cb0f0a62264f59c556ef
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/10.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 11838
last-modified: Thu, 23 Dec 2021 04:11:12 GMT
etag: "61c3f6e0-2e3e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/sale.svg
64.31.14.90200 OK 1.1 kB URL HTTP/2 opensea-io.us/assets/images/sale.svg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1062), with no line terminators
Hash 0edec9905d8191838fa507442c7cd037
d9456d5baf1f2e2466d907ce0a93daf8283f190f
cd1e6c82fc02dfac88bede7cc326200f97213b362c6e5715d2b5d48f6cc9b2d7
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/sale.svg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/svg+xml
content-length: 1062
last-modified: Fri, 17 Dec 2021 08:25:50 GMT
etag: "61bc498e-426"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/11.png
64.31.14.90200 OK 3.6 kB URL HTTP/2 opensea-io.us/assets/images/nft/11.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash fb9b3c121dfcbf3b76076efa623de8ff
b0eb6869edadd978adeee69a1df24cd42c251f24
418620ef156fbb8c60a73be5f804fd5088afcd5a7403e19da9b980441ee938c2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/11.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 3609
last-modified: Thu, 23 Dec 2021 04:11:18 GMT
etag: "61c3f6e6-e19"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/categories/collectibles.webp
64.31.14.90200 OK 52 kB URL HTTP/2 opensea-io.us/assets/images/categories/collectibles.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Hash 476ce7100d248414d01ebe385b9a3699
036cc014ba812783bd079e04bbc828ecd1f1094d
ccf8d844fce53f496903e474f331d318e9498ea957126a2152afee889f4a60ea
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/collectibles.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 52248
last-modified: Fri, 17 Dec 2021 08:25:36 GMT
etag: "61bc4980-cc18"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/box-round-3.png
64.31.14.90200 OK 4.3 kB URL HTTP/2 opensea-io.us/assets/images/box-round-3.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4efa7376add61639fbbf50684c70c8ab
44b377818eed2ce42f077c7214d19d1ecd708499
aec9cb69da734d6838e551235a9447816316186c76cdfc68cd134e1ded0e9b70
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-round-3.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 4268
last-modified: Wed, 22 Dec 2021 09:48:20 GMT
etag: "61c2f464-10ac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/12.png
64.31.14.90200 OK 8.0 kB URL HTTP/2 opensea-io.us/assets/images/nft/12.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash c536d8d155a861f787d58a373f3ec93d
5f77ba5bad3968fa2ea76c7ab32f9853bddd95a8
b74078c917bd7f31a0a657be970f735663eab535a3fc47df90d99fd363e6a7b2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/12.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 8002
last-modified: Thu, 23 Dec 2021 04:11:24 GMT
etag: "61c3f6ec-1f42"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/media/coin98-2.png
64.31.14.90200 OK 35 kB URL HTTP/2 opensea-io.us/assets/images/media/coin98-2.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash 2f313667fbc9863ff992ab52869d7d81
8d73df9c64d1569260ee1ba054d378c892ee61fd
dc3deafae6ec83a38bab73557b4eb2276296cb35ca79876fff24d3a9e3ac5a4e
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/coin98-2.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 35290
last-modified: Thu, 23 Dec 2021 11:01:20 GMT
etag: "61c45700-89da"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/3.png
64.31.14.90200 OK 2.6 kB URL HTTP/2 opensea-io.us/assets/images/nft/3.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 096ff4156dffe840fa815d6caf9ff5e7
8871d70770ce4e1677b01160d1c00182328896f4
3aa8c59639a748328ada5ef2189b4a565cd0e3571c8fb38cd19c8de6a3304dc2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/3.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 2612
last-modified: Wed, 22 Dec 2021 06:23:34 GMT
etag: "61c2c466-a34"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/creating.png
64.31.14.90200 OK 32 kB URL HTTP/2 opensea-io.us/assets/images/creating.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 1500 x 1000, 8-bit/color RGB, non-interlaced\012- data
Hash 1db4d001bcd7641dfe5e3d076d1e499f
823bd5d86805d0157595338e8d28c67f2786ef22
0634513d55647004e621086940cf2dff4d363896da7f5d4b5b3926e60ae6f942
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/creating.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 32011
last-modified: Wed, 22 Dec 2021 19:30:10 GMT
etag: "61c37cc2-7d0b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/unnamed.jpg
64.31.14.90200 OK 12 kB URL HTTP/2 opensea-io.us/assets/images/unnamed.jpg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 550x412, components 3\012- data
Hash 599cddfc4613c25bc82a841d16692d0c
cf636374fa9f5bb32bfba073b2208e3667ea6f89
bf2641ed08fa35710dbc7d1aba685d70187ebf19656ab7473d68fdfb36423f71
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/unnamed.jpg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/jpeg
content-length: 11969
last-modified: Sat, 24 Sep 2022 22:08:32 GMT
etag: "632f7fe0-2ec1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/wallet.svg
64.31.14.90200 OK 1.2 kB URL HTTP/2 opensea-io.us/assets/images/wallet.svg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1173), with no line terminators
Hash 8e6b9c9f0e09b53b9e75bd934cdce204
4f543d6415fb147b11280bbd295cda76e5f706de
d7c3db2bddf3110dcff83280a91ec357268a3e2adcf2cad7f5c2f1c59a4736c8
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet.svg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/svg+xml
content-length: 1173
last-modified: Fri, 17 Dec 2021 08:25:56 GMT
etag: "61bc4994-495"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/opensea-white.svg
64.31.14.90200 OK 2.9 kB URL HTTP/2 opensea-io.us/assets/images/opensea-white.svg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2931), with no line terminators
Hash 270535333a04e0f7c6c352a4f2eba9ca
cbc9913a2608de3e31025ed329d7e3be4987b977
d79ac289a5efb3158ff63a02ee4dbe102a69890f69302bce8ef05c989d4d4e76
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/opensea-white.svg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/svg+xml
content-length: 2931
last-modified: Fri, 17 Dec 2021 08:25:26 GMT
etag: "61bc4976-b73"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/nft/8.jpg
64.31.14.90200 OK 2.3 kB URL HTTP/2 opensea-io.us/assets/images/nft/8.jpg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash ba47f9e14523f4fe2942eb76cd687ce0
4b2ed4b84b96dc1a8eabadc98e6e996cfa787707
6e50b34fc59004ea8e733203eaaed4d7fd5e2aeb2c812e82d6488a626ac44266
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/8.jpg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/jpeg
content-length: 2313
last-modified: Thu, 23 Dec 2021 04:11:00 GMT
etag: "61c3f6d4-909"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/safety.png
64.31.14.90200 OK 26 kB URL HTTP/2 opensea-io.us/assets/images/safety.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 1500 x 1000, 8-bit/color RGB, non-interlaced\012- data
Hash 2083686d34342fb331aa1af9f060e66c
f156340f8e8c4325d228f3713f75899f3541f161
450ba6bba349c42a6abb95e79cb90a49671d01a9eb52b879c7d74d24662a36c5
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/safety.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 26166
last-modified: Wed, 22 Dec 2021 19:29:58 GMT
etag: "61c37cb6-6636"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/categories/domain-names.webp
64.31.14.90200 OK 52 kB URL HTTP/2 opensea-io.us/assets/images/categories/domain-names.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Hash 13f3061ad278717cf185a4e3be105d35
037ecd16b1646de7690a1a2b8c15c4260a5b0f19
84092dbeee0c446ec5a3fb0aa65b244c1d92ced4d0ed39f4e4e65f548e8f0fca
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/categories/domain-names.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 51922
last-modified: Fri, 17 Dec 2021 08:25:42 GMT
etag: "61bc4986-cad2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/box-1.png
64.31.14.90200 OK 82 kB URL HTTP/2 opensea-io.us/assets/images/box-1.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 300 x 200, 8-bit/color RGB, non-interlaced\012- data
Hash 3e06ec023fc7753a29b0932295607804
2208d29f1c53644ea180d1912433abb8e3480c2f
2f0141fb9e98a18432e5a477ac1a9b24fe33e7f67bd74ca7fb53fa41463eb448
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-1.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 81577
last-modified: Wed, 22 Dec 2021 09:47:46 GMT
etag: "61c2f442-13ea9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/ac058a09/www-embed-player.vflset/www-embed-player.js
142.250.74.142200 OK 99 kB URL HTTP/2 www.youtube.com/s/player/ac058a09/www-embed-player.vflset/www-embed-player.js
IP 142.250.74.142:0
File type ASCII text, with very long lines (679)
Hash f87416e031d065a607bd0ef62fc7b0c6
667338b85fa358e402b548e423a917f7495a2575
d837a92b57b61e18f1ef785093ebb065cc0b4ba588d6e609c4cfcb26763dc63d
GET /s/player/ac058a09/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 99188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 16:05:50 GMT
expires: Tue, 05 Dec 2023 16:05:50 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 01:22:00 GMT
content-type: text/javascript
age: 159276
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/images/security.png
64.31.14.90200 OK 97 kB URL HTTP/2 opensea-io.us/assets/images/security.png
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type PNG image data, 1500 x 1000, 8-bit/color RGB, non-interlaced\012- data
Hash ee348f630a972f4a0cc2cc74fcb7db7a
90d0abd95ac53fcbada5434087c2c5d132990c92
965ac99b7a9ec5202b90564257b53640604925f49e1ef00f47ea0764db9b13ca
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/security.png HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/png
content-length: 97399
last-modified: Wed, 22 Dec 2021 19:29:36 GMT
etag: "61c37ca0-17c77"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/css/metamask.css
64.31.14.90200 OK 64 kB URL HTTP/2 opensea-io.us/assets/css/metamask.css
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type Unicode text, UTF-8 text, with CRLF, CR line terminators
Hash 920fd07ba1dd507fba00004d81c86c05
c07ef2333cfd5eb7d63bb430ef85cf03a6b3d31d
2c7d7e1b3353f25116a21df31c61dab8e78452df3c67c12396999e9ae1d5dca2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/css/metamask.css HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: text/css
last-modified: Fri, 17 Dec 2021 01:17:32 GMT
etag: W/"61bbe52c-c1ba1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
opensea-io.us/assets/images/bg.jpg
64.31.14.90200 OK 20 kB URL HTTP/2 opensea-io.us/assets/images/bg.jpg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x188, components 3\012- data
Hash aa331232ad832346d5db79873b37a2ae
d1af876cde2c0f9ec94ac6b2a16b84efbd0d6778
0e7376c2fc48fb6f9a17a08401faebacc1d644bfb92daf7e3784f5e260d6b8f5
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/bg.jpg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/assets/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/jpeg
content-length: 20494
last-modified: Tue, 21 Dec 2021 09:13:16 GMT
etag: "61c19aac-500e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:48:03 GMT
expires: Fri, 01 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 484343
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/images/box-2.jpg
64.31.14.90200 OK 76 kB URL HTTP/2 opensea-io.us/assets/images/box-2.jpg
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x200, components 3\012- data
Hash 851af398c54ff59f88dd8215bdea0c90
a81dda1ee709655349067fc62658614bd99ee020
c64cdfc26418b1acac4e70e8bad3c3b301195327ce066dea7367be8d77a4ccf1
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-2.jpg HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/jpeg
content-length: 76434
last-modified: Wed, 22 Dec 2021 09:47:50 GMT
etag: "61c2f446-12a92"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:40:43 GMT
expires: Fri, 01 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 502783
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/images/categories/virtual-worlds.webp
64.31.14.90200 OK 97 kB URL HTTP/2 opensea-io.us/assets/images/categories/virtual-worlds.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Hash bd88b2dc4a25e15e246d200396492836
fdf5d8ea368487a3554cf4caba2a17a82a28e8a7
3b337c5115eccc66bbfebd7fc08aab4f6200c4f4a3773b680d42804aae1f4351
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/virtual-worlds.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 97424
last-modified: Fri, 17 Dec 2021 08:25:40 GMT
etag: "61bc4984-17c90"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
216.58.207.227200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://opensea-io.us
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:28:50 GMT
expires: Thu, 30 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 579096
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/images/categories/music.webp
64.31.14.90200 OK 131 kB URL HTTP/2 opensea-io.us/assets/images/categories/music.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Size 131 kB (130734 bytes)
Hash b74b0a9e12d5194fabe6686e6cd36fbe
483164561faed595318dddbabf17678eeaa7a78a
a336a33e8d6a3b74fee191121a0c950229bc6097f9018983181b730b875c741d
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/music.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 130734
last-modified: Fri, 17 Dec 2021 08:25:44 GMT
etag: "61bc4988-1feae"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/categories/sports.webp
64.31.14.90200 OK 129 kB URL HTTP/2 opensea-io.us/assets/images/categories/sports.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Size 129 kB (129352 bytes)
Hash 9a0077fded7f3fb9b2618594ebc859e4
d8149685f5d0c6fe66311dee6e606f2e2c13d8b9
ebac54aa2f93a252975e3ca96d62dec0caa9a01e1f33668620aac442a0036ce7
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/sports.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 129352
last-modified: Wed, 22 Dec 2021 20:02:56 GMT
etag: "61c38470-1f948"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/categories/utility.webp
64.31.14.90200 OK 141 kB URL HTTP/2 opensea-io.us/assets/images/categories/utility.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Size 141 kB (140854 bytes)
Hash 77290dadd246bda015753085a7c755fe
c04973aabbe7c8925766c84c0bf88c7a820f8949
46441628c5e6b667e374d0fd5b4688efb15be39524e608bb20765f2274e38526
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/utility.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 140854
last-modified: Fri, 17 Dec 2021 08:26:08 GMT
etag: "61bc49a0-22636"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/categories/trading-cards.webp
64.31.14.90200 OK 180 kB URL HTTP/2 opensea-io.us/assets/images/categories/trading-cards.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Size 180 kB (179596 bytes)
Hash a995601de89992960cb18f1ba89479d2
110346a4d12b8e47c3ad44385f85a916d15ee206
ecf70633eab5862ce8d0097d47f1c075be220c716a2a2e44930d2acca6c19811
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/trading-cards.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 179596
last-modified: Fri, 17 Dec 2021 08:25:38 GMT
etag: "61bc4982-2bd8c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
216.58.207.227200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://opensea-io.us
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 12:29:21 GMT
expires: Fri, 01 Dec 2023 12:29:21 GMT
cache-control: public, max-age=31536000
age: 517865
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0f3e88a653b59f535d9945d21e08b680
1b5b19fcd37539e85af71c656c83688ff98be390
b56b3006f9251298eb66ef4bf143fb4da78f8fcf516590ba59a4fc657aa92408
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "B56B3006F9251298EB66EF4BF143FB4DA78F8FCF516590BA59A4FC657AA92408"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2934
Expires: Wed, 07 Dec 2022 13:09:20 GMT
Date: Wed, 07 Dec 2022 12:20:26 GMT
Connection: keep-alive
opensea-io.us/assets/images/categories/art.webp
64.31.14.90200 OK 257 kB URL HTTP/2 opensea-io.us/assets/images/categories/art.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Size 257 kB (257268 bytes)
Hash 5306867e611ccf4ae4870f2a397ac666
05ddd42571a601d60d4fdef8539bc6e827d4d724
9a1d2967a227349ee6e2a778ff87f336b77cd406bac35dea39a05345d9a2fa04
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/art.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 257268
last-modified: Wed, 22 Dec 2021 19:54:10 GMT
etag: "61c38262-3ecf4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/js/app.js
64.31.14.90200 OK 4.2 kB URL HTTP/2 opensea-io.us/assets/js/app.js
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type ASCII text, with very long lines (9314), with CRLF line terminators
Hash 2c3a0a95f35b7708a99cad195b154104
17eadd71a4d17d04026924ac57b58698d115b1d5
da5e5af5e046f1b8b09e690d6e648c248eeff3a7b7ec82e9776929fd2cf2f7eb
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/js/app.js HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: application/javascript
last-modified: Sun, 26 Dec 2021 09:47:00 GMT
etag: W/"61c83a14-24ad"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
opensea-io.us/assets/images/sturec-promocard.webp
64.31.14.90200 OK 536 kB URL HTTP/2 opensea-io.us/assets/images/sturec-promocard.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Size 536 kB (536108 bytes)
Hash 863f2eb63172027722ee6f6eee7c8fe3
77e91efb5e9dddc9f76d9c28597b0ca1b022f903
df48c77c9af155bfa7d0a40747c67ced85ba3b4b76be1cb949909e49e15c535b
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/sturec-promocard.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 536108
last-modified: Wed, 22 Dec 2021 03:44:24 GMT
etag: "61c29f18-82e2c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/theweeknd-promocard.webp
64.31.14.90200 OK 549 kB URL HTTP/2 opensea-io.us/assets/images/theweeknd-promocard.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Size 549 kB (549248 bytes)
Hash 7943e86715fbcefd5796f2d6c1b0c1c7
8fb31d5a0b0d22f05c4ac6b0f522fe8bab022e5d
041a3bb1cf6615f09801ac1badbccc2a3a314d54a726f94ff083991b0a0cf69e
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/theweeknd-promocard.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 549248
last-modified: Wed, 22 Dec 2021 03:44:06 GMT
etag: "61c29f06-86180"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
216.58.207.227200 OK 128 kB URL HTTP/2 fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://opensea-io.us
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 20:33:17 GMT
expires: Fri, 01 Dec 2023 20:33:17 GMT
cache-control: public, max-age=31536000
age: 488829
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/css/fonts/EuclidCircularB-Bold-WebXL.ttf
64.31.14.90200 OK 151 kB URL HTTP/2 opensea-io.us/assets/css/fonts/EuclidCircularB-Bold-WebXL.ttf
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type TrueType Font data, 19 tables, 1st "BASE", 16 names, Macintosh, language 0x2, type 1 string, otCopyright (c) 2018 Swiss Typefaces Sarl. All rights reserved.\266Version 3.001FontEuclid is a \012- data
Size 151 kB (150928 bytes)
Hash cd393be20accd12b36efefde5bb590db
df1ac0dc8cc96d6ef9f5be99fa7addf30984dbd8
df4f17393abc2d0e8ea15d6b55644cfdee10d34445d6c26204f427554f3754de
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/css/fonts/EuclidCircularB-Bold-WebXL.ttf HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/assets/css/metamask.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:27 GMT
content-type: application/font-sfnt
content-length: 150928
last-modified: Sun, 20 Jun 2021 05:38:22 GMT
etag: "60ced44e-24d90"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2
216.58.207.227200 OK 155 kB URL HTTP/2 fonts.gstatic.com/s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), CFF, length 155276, version 1.0\012- data
Size 155 kB (155276 bytes)
Hash 0ba49c096a77b67734434cebcaf2e14d
2f9e28ab559782402f27332633c843c40209d95a
35dca8a7145a17c8d1306f25a3ca091578e15396f0b22d61eb8e73262ac75577
GET /s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://opensea-io.us
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 155276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 04:55:39 GMT
expires: Fri, 01 Dec 2023 04:55:39 GMT
cache-control: public, max-age=31536000
age: 545087
last-modified: Thu, 11 Aug 2022 01:57:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
216.58.207.227200 OK 7.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://opensea-io.us
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:28:50 GMT
expires: Thu, 30 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 579097
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/css/fonts/Roboto-Bold.ttf
64.31.14.90200 OK 167 kB URL HTTP/2 opensea-io.us/assets/css/fonts/Roboto-Bold.ttf
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data
Size 167 kB (167336 bytes)
Hash 9ece5b48963bbc96309220952cda38aa
013f1bbcbbd80991a5f00fca52a90d0d7ab8b81f
baf44ce81636cc927fc27768437e5da853bac699e8aaf832d042f0dfed29b4b4
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/css/fonts/Roboto-Bold.ttf HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/assets/css/metamask.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:27 GMT
content-type: application/font-sfnt
content-length: 167336
last-modified: Wed, 09 Jan 2013 02:30:00 GMT
etag: "50ecd628-28da8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
opensea-io.us/assets/images/32x32.webp
64.31.14.90200 OK 422 B URL HTTP/2 opensea-io.us/assets/images/32x32.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9ba41886d6ada0a2620317827a729606
bc53be78ad9418abaf8225b7f49f28baa77a3c98
e4bd91072de073dd0a39ad4f7ac4afd25bdb6051d224005eafc19bd28e384b45
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/32x32.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:27 GMT
content-type: image/webp
content-length: 422
x-accel-version: 0.01
last-modified: Fri, 17 Dec 2021 08:26:02 GMT
etag: "1a6-5d3534a121a80"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
static.opensea.io/gas-free/video-background.svg
104.18.17.184200 OK 8.3 kB URL HTTP/2 static.opensea.io/gas-free/video-background.svg
IP 104.18.17.184:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (12235)
Hash d135a9184239bebd143f3865d262c5d4
24d1fa26a5b65de3685cbb5898fa3eb33a2775bc
ca1829d901ce17dc0ee027315ccb4e8044bac34d7698d1c5779e444f40fe9133
GET /gas-free/video-background.svg HTTP/1.1
Host: static.opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 12:20:27 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdsv4zeXqUuap7ZHtxBQ21htxixgBfJlRFfz6TZdvVkxamQCb5XxIxGi0GI401w11xqjWWSS-ncaCkPSUhPaR3Qg
x-goog-generation: 1630524348914119
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 20064
x-goog-hash: crc32c=8vorDw==, md5=9AtoCsBIAExuRya7g4YFUA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
last-modified: Wed, 01 Sep 2021 19:25:48 GMT
etag: W/"f40b680ac048004c6e4726bb83860550"
cache-control: public,max-age=3600
cf-cache-status: REVALIDATED
set-cookie: __cf_bm=No9sL9tH42EKTIC8CR5dJkWu40cVGzkwQjm6qWHL8OY-1670415627-0-AVbnTx4ulIMxZPv75P0E2deBeHGIv2AmwOGNZDHOMNQ5NjSf7GOmn7ien41yjtoy1hRgmWIr3pGfaeZ/fXFwYCM=; path=/; expires=Wed, 07-Dec-22 12:50:27 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 775d37251ac7b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 81a7e0ed8b45460991a7d9b719423d48
fa4824b64d5484b955cecebbeea06710ced4fba5
2fb356139722003d5c83566b936968a5ce9ba3756f69ace50a53bea6c1b9f7eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
opensea-io.us/assets/css/fonts/EuclidCircularB-Regular-WebXL.ttf
64.31.14.90200 OK 29 B URL HTTP/2 opensea-io.us/assets/css/fonts/EuclidCircularB-Regular-WebXL.ttf
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/css/fonts/EuclidCircularB-Regular-WebXL.ttf HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/assets/css/metamask.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: application/font-sfnt
content-length: 154192
last-modified: Sun, 20 Jun 2021 05:38:20 GMT
etag: "60ced44c-25a50"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
142.250.74.66302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 142.250.74.66:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 07 Dec 2022 12:20:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 38d1c089860ce360f5266ae101ab05ca
31705702b50e1c818c052b6d2a23f22583aa07d1
097ac1bb8edd3ef2e02fa551d824a0104c6995e130f9cdc4bcfa65583a9785d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 81a7e0ed8b45460991a7d9b719423d48
fa4824b64d5484b955cecebbeea06710ced4fba5
2fb356139722003d5c83566b936968a5ce9ba3756f69ace50a53bea6c1b9f7eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.170200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 07 Dec 2022 12:20:27 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.170200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.170:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 7a35bf614517d7c7181da11d52f88d12
e2266c5238b43285a1d575700a77a1831eb841c3
805ffd13ee6d0e019662761decf73539f6be1f300010dafaf4e9bb5c420d21b6
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 07 Dec 2022 12:20:27 GMT
server: ESF
cache-control: private
content-length: 31150
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9084a518c70ad57bb3226fb519b648fd
79348ebe6f5900a035d4d65e08a7409fd9708f15
f0c6b0f66c31aa7cb2d2808eb4c04c3681d48e731efc8cbba0f3fef1d218ce7b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c2bc646545bfb8251d6d5061622e92f9
b14bf36b5bc259fe2429b8521f73f14703195fba
521f345ee743d506ed3b636023dbd6942238d94d7a0dbda7575c15eb659edfb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js
216.58.207.228200 OK 14 kB URL HTTP/2 www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js
IP 216.58.207.228:0
File type ASCII text, with very long lines (36162)
Hash e9bf756aa2fac02f3307febffa242635
d0da1ab271c03a49fe6499a38e6f3c34d396c5d4
12655f58f30c13fae1942aae99ace0d8e450ead33ec120b89d78fd98a279e0bb
GET /js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14349
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 15:46:54 GMT
expires: Wed, 06 Dec 2023 15:46:54 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
age: 74013
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/gfGuPd1CELo/maxresdefault.webp
142.250.74.150200 OK 24 kB URL HTTP/2 i.ytimg.com/vi_webp/gfGuPd1CELo/maxresdefault.webp
IP 142.250.74.150:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 94d015ce62cec9dc2c61420a977da42b
c657a723c06ab007f5dd99b12bcbc500f534bded
cc374be9c2cde17b898c0a88a66162c972adf073e335828e60555b699c76b58e
GET /vi_webp/gfGuPd1CELo/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 24130
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 11:27:55 GMT
expires: Wed, 07 Dec 2022 13:27:55 GMT
cache-control: public, max-age=7200
age: 3152
etag: "1633564202"
content-type: image/webp
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash c2bc646545bfb8251d6d5061622e92f9
b14bf36b5bc259fe2429b8521f73f14703195fba
521f345ee743d506ed3b636023dbd6942238d94d7a0dbda7575c15eb659edfb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9e83e23c9303fc167d2b23bceba4f304
cc712e67770a00bcc9901a6881f5b1cd343cf054
16378fd60ce4fb8ead3bbc313e6ae0166f68d532d40c586f8c71cb6cd1a91f50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/uPCDZ2LTlORkwQ8e_cj5B-ax9KBoVZA0xxp6wWiUH2deSV8uoaV6gjvr7pL1-0sGrPr_5yK7_ww=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 2.2 kB URL HTTP/2 yt3.ggpht.com/uPCDZ2LTlORkwQ8e_cj5B-ax9KBoVZA0xxp6wWiUH2deSV8uoaV6gjvr7pL1-0sGrPr_5yK7_ww=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 184161ae4a7d95a66d334b8e86b5c138
177f1960c06ecd54e8b15728d5e8491b9e049abf
f4cd6bdb68a11d75123376a8d84333fd2e97059aa3185ca07ae443378bb2d47d
GET /uPCDZ2LTlORkwQ8e_cj5B-ax9KBoVZA0xxp6wWiUH2deSV8uoaV6gjvr7pL1-0sGrPr_5yK7_ww=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2154
x-xss-protection: 0
date: Wed, 07 Dec 2022 08:24:51 GMT
expires: Wed, 07 Dec 2022 20:42:54 GMT
cache-control: public, max-age=86400, no-transform
age: 14136
etag: "v2"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 9e83e23c9303fc167d2b23bceba4f304
cc712e67770a00bcc9901a6881f5b1cd343cf054
16378fd60ce4fb8ead3bbc313e6ae0166f68d532d40c586f8c71cb6cd1a91f50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 12:20:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4925
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 12:20:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4925
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 12:20:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4925
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 12:20:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4925
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 12:20:28 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4925
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 12:20:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 06:11:41 GMT
age: 22127
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.170200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 07 Dec 2022 12:20:28 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9257f2e3b9bd1b3aa262b0f4bf57968
4bcdd6ecd63834aa1010faf19457a97f37ae99fa
9afd592279c51b533b3bf72a860cf4a8f2bc6cf01b07d1ab6f11f0ff302e0ef6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7392
x-amzn-requestid: f4b6890a-7a8f-48f8-b2af-365cb5f681e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwREFiXoAMFSMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-009e524f30c72d0629c877bb;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C0-H0LUbxaxMEXoDf6PXEFAvVTj2D9K2M7eshRo39QzAAWSk2ubepA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 03:27:19 GMT
age: 31989
etag: "4bcdd6ecd63834aa1010faf19457a97f37ae99fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 604a4132da78a0c013b5818644adb121
ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566
eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8701
x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cm3-2HRWIAMFjfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EpyIdH9YEXjxbGhZpBIfzoZHQxMvAKl0eCFQsgMt0e1SSeWsiuey7g==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:15:06 GMT
age: 50722
etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e95ebce9d79ba46cb96af9a45af1762f
985c6761675e6bcc0186f64d55f94cf09352f05c
5837d6bf31e57f955ba2577f112281cc33a5502b358c83192f4e396b57042ac0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8438
x-amzn-requestid: 0f5d1b0e-1193-4006-8a54-555681d9f62e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlqVGMjoAMFS6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb641-6366ea6464122d857407cdff;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:38:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2j9gqNvWYRFM-li9Nj4nLAWe_eKWMSwagPgU3eAtk0pjcJUX4Q8XEA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:40 GMT
etag: "985c6761675e6bcc0186f64d55f94cf09352f05c"
content-type: image/jpeg
age: 51888
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
opensea-io.us/assets/js/words.js
64.31.14.90200 OK 15 kB URL HTTP/2 opensea-io.us/assets/js/words.js
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
File type ASCII text, with CRLF line terminators
Hash f83f937ec9c75d5322610b58900dc1d9
55d5b23b42546d9b31152155c04df5568206f6c0
f0188461d864aa28503d286a362900fd14e989d64fb2f03a16b1ffbc65e68a7d
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/js/words.js HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: application/javascript
last-modified: Fri, 19 Nov 2021 22:49:54 GMT
etag: W/"61982a12-5395"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ViuPsZBEVJ-aGOcsfrl3nXu244mzMUMQVhpPeNlO7W3sBrrfuUfXpA==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:32:04 GMT
age: 49704
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Round
142.250.74.106200 OK 472 B URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Round
IP 142.250.74.106:0
Hash ee6549750ab2eab12a8f7e7680d32479
8903de5fa711d5872c211705712e8b0f619494d4
6a0fcba68dfb5b8f44e4dfaf8d65f5af658d26a6c7c7194cd95d63b57ff3cbe2
GET /css2?family=Material+Icons+Round HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 12:20:26 GMT
date: Wed, 07 Dec 2022 12:20:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Two+Tone
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Two+Tone
IP 142.250.74.106:0
GET /css2?family=Material+Icons+Two+Tone HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 12:20:26 GMT
date: Wed, 07 Dec 2022 12:20:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/images/categories/photography-category.webp
64.31.14.90200 OK 0 B URL HTTP/2 opensea-io.us/assets/images/categories/photography-category.webp
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/photography-category.webp HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: image/webp
content-length: 215364
last-modified: Wed, 22 Dec 2021 20:02:42 GMT
etag: "61c38462-34944"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap
IP 142.250.74.106:0
GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 12:20:26 GMT
date: Wed, 07 Dec 2022 12:20:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Outlined
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Outlined
IP 142.250.74.106:0
GET /css2?family=Material+Icons+Outlined HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 12:20:26 GMT
date: Wed, 07 Dec 2022 12:20:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons
IP 142.250.74.106:0
GET /css2?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 12:20:26 GMT
date: Wed, 07 Dec 2022 12:20:26 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/assets/css/style.css
64.31.14.90200 OK 0 B URL HTTP/2 opensea-io.us/assets/css/style.css
IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/css/style.css HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:26 GMT
content-type: text/css
last-modified: Sun, 26 Dec 2021 09:11:38 GMT
etag: W/"61c831ca-105ad"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Sharp
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Sharp
IP 142.250.74.106:0
GET /css2?family=Material+Icons+Sharp HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea-io.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 12:20:26 GMT
date: Wed, 07 Dec 2022 12:20:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea-io.us/
64.31.14.90200 OK 0 B IP 64.31.14.90:0
ASN #46475 LIMESTONENETWORKS
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET / HTTP/1.1
Host: opensea-io.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 12:20:25 GMT
content-type: text/html
last-modified: Tue, 06 Dec 2022 15:25:00 GMT
etag: W/"638f5ecc-229fe"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2