flokbaby.it/mymet/bd750
77.83.64.33 240 B IP 77.83.64.33:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da897cb5fed7e69fbdda1cbef870b0b0
0d3a3c7fd82eedd6a91bc45df0ee91ee704ba19c
f2f30850340455fdc1da6793e8a440b728e24930f7e0188796c80e6090e17624
Analyzer Verdict Alert OpenPhish phishing Crypto/Wallet
GET /mymet/bd750 HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 16 Aug 2023 09:31:34 GMT
content-type: text/html; charset=iso-8859-1
content-length: 240
location: https://flokbaby.it/mymet/bd750/
x-powered-by: PleskLin
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/normalize.css
77.83.64.33200 OK 2.9 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/normalize.css
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash 4951cc88307c632cf285d3ba988ab283
031d58bc40b4242b27d8171a01bb0ecb5f9d22d7
5c4a6fe64efc5d07833c35af9630d0f9b3d4d09a63f9358e441374e9102c9e81
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/normalize.css HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: text/css
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-1e5c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/mm-logo.svg
77.83.64.33200 OK 12 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/mm-logo.svg
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1001)
Hash 51bcea2625eb2c6e9268a7377a792c86
5eeb306e6584eed1747c36c11724f193711d430e
5e722754f038988ba4b6d7f380d60191eba3b6e01d4a00749a28b79c53521f5b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/mm-logo.svg HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: image/svg+xml
content-length: 12019
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
etag: "64dbd402-2ef3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/jsonp
77.83.64.33200 OK 278 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/jsonp
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 278 kB (278382 bytes)
Hash 7efac8c0fa8e30db7a423500ef59abab
be73717f776f24dd31498c27a1b02b784570d5bb
102411780270584690575675e14e574ef8a16cf6fdd5700d5682e68a8d2cc00d
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/jsonp HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: application/octet-stream
content-length: 278382
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
etag: "64dbd402-43f6e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/js
77.83.64.33200 OK 34 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/js
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (1815)
Hash fb2ab9b8632250b0d7aa50c08150cfe1
73b3f266ac08c9fb07e1de1664fed384ccd5bc86
5d419e0ff614b331e4f8fed2ba7c1380b1f5983f98d820a6a0f7040b55f60b5b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/js HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: text/plain
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-168a5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/webflow.js.download
77.83.64.33200 OK 135 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/webflow.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type Unicode text, UTF-8 text, with very long lines (50020)
Size 135 kB (135020 bytes)
Hash 9758f7e3aa0c79ea7a3cadb16d10087b
07f3c4e552e28eba6172f53d6dcf981a55f42031
0bb0c326dfc33136ad88e7454f06d22398a75f57f5eef79a30b218c171136f0d
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/webflow.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-92c10"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/v2.js.download
77.83.64.33200 OK 179 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/v2.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 179 kB (179401 bytes)
Hash d3b2366c9977c975fc6abdc6a119c361
ed6031ba0b0efe5b77acd0382f8d647f2cc88018
7f82030e7f8b2956fcb539a7cf3f1d80907d28d02c2696ac0560daf3cfafaa25
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/v2.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-8d511"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/EuclidCircularB-Regular-WebXL.woff2
77.83.64.33200 OK 45 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/EuclidCircularB-Regular-WebXL.woff2
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type Web Open Font Format (Version 2), TrueType, length 45196, version 3.66\012- data
Hash 2d75957df3bb3aa6ed84f6591b0d5a1a
906424e75625f63b0188471067065794d0348536
8ff3b303322168b49a14878f195dbaf76d9da16e35094d1f83fa23245450155b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/meta/metamask-staging-2.webflow.css
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: font/woff2
content-length: 45196
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
etag: "64dbd402-b08c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/enterprise.js.download
77.83.64.33200 OK 8.4 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/enterprise.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (1008), with no line terminators
Hash d07e7630bc23cbdd7520d0a4f086c922
b50685923a96d55109959fdf21f369d902971b2a
15c0f679abecff8fba48dbe673343f3e0f2a07c439d3f631722fccd2af2e1df2
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/enterprise.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: application/javascript
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
etag: W/"3f0-602fb4fc0b575"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/wpp.gif
77.83.64.33 4.6 kB URL flokbaby.it/mymet/bd750/meta/wpp.gif
IP 77.83.64.33:0
File type gzip compressed data, max speed, from Unix\012- data
Hash 06d3337e4a24c22809b178257e097610
1f024fcfe07362b013ee9a88e1bfcad96ba99810
bf15aebe335b0581e44752d76ba6c84b06de74dcb8734037e495f3f1481c8730
GET /mymet/bd750/meta/wpp.gif HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: image/gif
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-f25"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 24b167b364d24336abf63b0f2102a528
8f76705926a857e25a47a102bf4d90c2f896ddac
6779d23d8cfa5f6599b33907f4c3f8f4070d779046fa4483b66e7ce95e4144d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Aug 2023 09:31:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
flokbaby.it/mymet/bd750/meta/saved_resource(1).html
77.83.64.33200 OK 8.6 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/saved_resource(1).html
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 938be7d50aa827110de3ba6d24f24ceb
499a6b9239bbf79c2363a2ecf3cc405a957b24ec
58092d87121c0af28a0ae8ad3e9afcfb4c50156ca369a9a2dfafc8d516a25d5c
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/saved_resource(1).html HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: text/html
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
etag: W/"1f8-602fb4fc0b18d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash c0cd8bc88704cab01d56a7e7f7c830fa
82478af9121cfcbe1eeed4bed603fa02193e05b8
abf44838baba94f8b51991aec6e3892e5d0139abdb84a33ad85ed961977933ef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Aug 2023 09:31:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit&isolated=true
216.58.207.228200 OK 894 B URL GET HTTP/3 www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit&isolated=true
IP 216.58.207.228:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type ASCII text, with very long lines (1380), with no line terminators
Hash de68b3546a4ed350ab5b3dde1bb4a93f
aa43c39f93d2689dbcb72d5aa96bce653720c499
059ab1993deca7b001f97a84183d36ace8a95f815988b876766d24214bafd413
GET /recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit&isolated=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Wed, 16 Aug 2023 09:31:36 GMT
date: Wed, 16 Aug 2023 09:31:36 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 894
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=eemsn1lz01yb
216.58.207.228 29 kB URL www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=eemsn1lz01yb
IP 216.58.207.228:0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (44646)
Hash 74ec23b7ee00f5e6d88b29ccf60908b6
87585b59afe93e48d6370dc22da0b619674e9706
1987f807470b102b49c453b8e949f618babf3e44bc75fed4e8a6987f8f489e66
GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=eemsn1lz01yb HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 16 Aug 2023 09:31:36 GMT
content-security-policy: script-src 'nonce-5qFJT_hLjnxmOlTy2HnP_A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 29316
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.15.101 471 B IP 104.18.15.101:0
Hash 0c32685595d16a81bc7118842374278d
334a653e06c4862afaa54a47dae456aa5e669b52
45781c05c4b9a9611ffa082a26ad66b75f0dfb0c001dac96aa50237f34c06328
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Aug 2023 09:31:36 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 15 Aug 2023 02:32:16 GMT
Expires: Tue, 22 Aug 2023 02:32:15 GMT
Etag: "334a653e06c4862afaa54a47dae456aa5e669b52"
Cache-Control: max-age=493799,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7f78aa515f1eb503-OSL
perf.hsforms.com/embed/v3/counters.gif?key=forms-next-recaptcha-viewed&count=1&portalId=4795067
104.17.213.243200 OK 35 B URL GET HTTP/3 perf.hsforms.com/embed/v3/counters.gif?key=forms-next-recaptcha-viewed&count=1&portalId=4795067
IP 104.17.213.243:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1E:9D:91:27:86:63:DC:7B:9D:15:4E:99:31:FC:AA:1D:DC:9E:06:3B
ValidityThu, 18 May 2023 00:00:00 GMT - Fri, 17 May 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /embed/v3/counters.gif?key=forms-next-recaptcha-viewed&count=1&portalId=4795067 HTTP/1.1
Host: perf.hsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 16 Aug 2023 09:31:36 GMT
content-type: image/gif
content-length: 35
x-trace: 2B4DDE7D1ACCF0B96BAB48679AE535041D8FDC9124000000000000000000
cache-control: max-age=0, no-cache, no-store
vary: origin, Accept-Encoding
access-control-allow-credentials: false
x-content-type-options: nosniff
access-control-expose-headers: X-Origin-Hublet
x-robots-tag: none
x-envoy-upstream-service-time: 2
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-7f89ffc67f-8hpn4
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: db8d62c9-159b-4488-b4a1-f4fc03adb69e
x-request-id: db8d62c9-159b-4488-b4a1-f4fc03adb69e
last-modified: Wed, 16 Aug 2023 09:31:36 GMT
cf-cache-status: MISS
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f78aa50e9f3b512-OSL
alt-svc: h3=":443"; ma=86400
flokbaby.it/mymet/bd750/meta/recaptcha__nl.js.download
77.83.64.33200 OK 128 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/recaptcha__nl.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (820)
Size 128 kB (128240 bytes)
Hash e735084e8ffed1ad8d89df08d98d4d23
6cdab8dac12030c8bc980ec129affecc626285c3
6cde5be2d724e53c8c4a97041365d3075e3af63ec08e1712b2f831b6e2bd357b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/recaptcha__nl.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/meta/anchor.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:36 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-56577"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 7ca1622b0e6321611deb03945d4f926f
5e7b2ae7f2d8d9c1f1b88ff19aadf8b7403ff4e7
c8d225c420ae16ecad2065c490b743c530aa70f3369e87c78f51952d145ed3e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Aug 2023 09:31:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
flokbaby.it/js.hsforms.net/forms/v2.js
77.83.64.33301 Moved Permanently 0 B URL GET HTTP/2 flokbaby.it/js.hsforms.net/forms/v2.js
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/meta/saved_resource.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /js.hsforms.net/forms/v2.js HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/meta/saved_resource.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 16 Aug 2023 09:31:36 GMT
content-type: text/html; charset=UTF-8
content-length: 0
link: <https://flokbaby.it/wp-json/>; rel="https://api.w.org/"
expires: Wed, 16 Aug 2023 10:31:36 GMT
cache-control: max-age=3600
location: https://flokbaby.it/blogs/tag/internet/
x-powered-by: PHP/7.4.28, PleskLin
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/info_2x.png
142.250.74.35200 OK 665 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/info_2x.png
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 07bf314aab04047b9e9a959ee6f63da3
17bef6602672e2fd9956381e01356245144003e5
55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee
GET /recaptcha/api2/info_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Aug 2023 11:00:47 GMT
expires: Sat, 19 Aug 2023 11:00:47 GMT
cache-control: public, max-age=604800
age: 340249
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/refresh_2x.png
142.250.74.35200 OK 600 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/refresh_2x.png
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 15:12:23 GMT
expires: Thu, 17 Aug 2023 15:12:23 GMT
cache-control: public, max-age=604800
age: 497953
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
142.250.74.35404 Not Found 1.6 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=re9qvbghol0w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash c90524d6a02b27addb56c350fe6fbb2d
d713d1b53323c0169ffe0649be8c9d04a189f999
4aefd395113d052a874ac1919aed0e288835e0377683f1e71e98838d16c986e0
GET /recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Wed, 16 Aug 2023 09:31:36 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1621
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/audio_2x.png
142.250.74.35200 OK 530 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/audio_2x.png
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 88e0f42c9fa4f94aa8bcd54d1685c180
5ad9d47a49b82718baa3be88550a0b3350270c42
89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 04:54:45 GMT
expires: Thu, 17 Aug 2023 04:54:45 GMT
cache-control: public, max-age=604800
age: 535011
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
142.250.74.35200 OK 184 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (570)
Size 184 kB (184483 bytes)
Hash c3d393e7af29342719105378e6f046b8
66a91c4ad5f5bc8c62e4239d636c729c8565836e
8bdf8c4a14aa3b0a88506c68c507aee00ef4af793e353c15fde9254a6654d2f1
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flokbaby.it
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 184483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Aug 2023 17:41:05 GMT
expires: Tue, 13 Aug 2024 17:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 143431
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/styles__ltr.css
142.250.74.35404 Not Found 1.6 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/styles__ltr.css
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=re9qvbghol0w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash e36ef824369a52f32d36526426b521a1
2aa85c4f5ffea54cf853bc9210d79c53d24ff088
1dee5a71230d0118e32b59df6930c964cddbe0d4f5e25fb52e159b75cffd1e97
GET /recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Wed, 16 Aug 2023 09:31:36 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1620
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
142.250.74.35404 Not Found 1.6 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=re9qvbghol0w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash c90524d6a02b27addb56c350fe6fbb2d
d713d1b53323c0169ffe0649be8c9d04a189f999
4aefd395113d052a874ac1919aed0e288835e0377683f1e71e98838d16c986e0
GET /recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flokbaby.it
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Wed, 16 Aug 2023 09:31:36 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1621
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
142.250.74.35404 Not Found 1.6 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=re9qvbghol0w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash c90524d6a02b27addb56c350fe6fbb2d
d713d1b53323c0169ffe0649be8c9d04a189f999
4aefd395113d052a874ac1919aed0e288835e0377683f1e71e98838d16c986e0
GET /recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Wed, 16 Aug 2023 09:31:37 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1621
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/metamask.io/images/webclip.png
77.83.64.33301 Moved Permanently 0 B URL GET HTTP/2 flokbaby.it/metamask.io/images/webclip.png
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /metamask.io/images/webclip.png HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 16 Aug 2023 09:31:37 GMT
content-type: text/html; charset=UTF-8
content-length: 0
link: <https://flokbaby.it/wp-json/>; rel="https://api.w.org/"
expires: Wed, 16 Aug 2023 10:31:37 GMT
cache-control: max-age=3600
location: https://flokbaby.it/prodotto/marsupio-ergonomico-standard-zig-zag/
x-powered-by: PHP/7.4.28, PleskLin
X-Firefox-Spdy: h2
flokbaby.it/metamask.io/images/favicon.png
77.83.64.33301 Moved Permanently 0 B URL GET HTTP/2 flokbaby.it/metamask.io/images/favicon.png
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /metamask.io/images/favicon.png HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 16 Aug 2023 09:31:37 GMT
content-type: text/html; charset=UTF-8
content-length: 0
link: <https://flokbaby.it/wp-json/>; rel="https://api.w.org/"
expires: Wed, 16 Aug 2023 10:31:37 GMT
cache-control: max-age=3600
location: https://flokbaby.it/prodotto/marsupio-ergonomico-standard-zig-zag/
x-powered-by: PHP/7.4.28, PleskLin
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit
216.58.207.228200 OK 894 B URL GET HTTP/3 www.google.com/recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit
IP 216.58.207.228:443
Requested by https://js.hsforms.net/forms-next/shell-recaptcha
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type ASCII text, with very long lines (1380), with no line terminators
Hash de68b3546a4ed350ab5b3dde1bb4a93f
aa43c39f93d2689dbcb72d5aa96bce653720c499
059ab1993deca7b001f97a84183d36ace8a95f815988b876766d24214bafd413
GET /recaptcha/enterprise.js?onload=hsRecaptchaLoadCallback&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Wed, 16 Aug 2023 09:31:37 GMT
date: Wed, 16 Aug 2023 09:31:37 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 894
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/prodotto/marsupio-ergonomico-standard-zig-zag/
77.83.64.33200 OK 208 kB URL GET HTTP/2 flokbaby.it/prodotto/marsupio-ergonomico-standard-zig-zag/
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Size 208 kB (207731 bytes)
Hash 1cb06b6f1ad74a68b87e6a0b73263919
df727183bf405cdafaf0e1587288d9318f55c777
9d379e1333e6f5f5b4f45071ffd11ed671dde993ec938f73654bdfd3e85cbac8
GET /prodotto/marsupio-ergonomico-standard-zig-zag/ HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flokbaby.it/mymet/bd750/
DNT: 1
Connection: keep-alive
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://flokbaby.it/wp-json/>; rel="https://api.w.org/", <https://flokbaby.it/wp-json/wp/v2/product/4638>; rel="alternate"; type="application/json", <https://flokbaby.it/?p=4638>; rel=shortlink
set-cookie: wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_84a3a87d2c4b92e419b96a757d7762%7C%7C1692351097%7C%7C1692347497%7C%7C0f355b3c91a3f4749d95fba0a47a45bb; expires=Fri, 18-Aug-2023 09:31:37 GMT; Max-Age=172800; path=/; secure; HttpOnly
woocommerce_recently_viewed=4638; expires=Fri, 15-Sep-2023 09:31:37 GMT; Max-Age=2592000; path=/
x-powered-by: PHP/7.4.28, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=l1s8w04jnn28
216.58.207.228 29 kB URL www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=l1s8w04jnn28
IP 216.58.207.228:0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (44554)
Hash 3bd7e20f12c70f5cb8cef84d141524a7
e3c820abc4370cb4334421dd9cf7c22e3ec63c07
ac97204047fb8000ad88b62bbea3c516c7b83a9a8933b28a1a538b7159854fbb
GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=l1s8w04jnn28 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 16 Aug 2023 09:31:38 GMT
content-security-policy: script-src 'nonce-K1Ajrpn4ggbF5yuxcf3xYw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 29115
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/prodotto/marsupio-ergonomico-standard-zig-zag/
77.83.64.33200 OK 48 kB URL GET HTTP/2 flokbaby.it/prodotto/marsupio-ergonomico-standard-zig-zag/
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Hash 4736b40014c43df3e43618c74579b389
036308fa62eb46dd53c72b2f10fbeca350835e47
6405af017080049fc6b8bad3d96d1fcdda205221c187ec0df35cec618ade3c3a
GET /prodotto/marsupio-ergonomico-standard-zig-zag/ HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flokbaby.it/mymet/bd750/
DNT: 1
Connection: keep-alive
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://flokbaby.it/wp-json/>; rel="https://api.w.org/", <https://flokbaby.it/wp-json/wp/v2/product/4638>; rel="alternate"; type="application/json", <https://flokbaby.it/?p=4638>; rel=shortlink
set-cookie: wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; expires=Fri, 18-Aug-2023 09:31:37 GMT; Max-Age=172800; path=/; secure; HttpOnly
woocommerce_recently_viewed=4638; expires=Fri, 15-Sep-2023 09:31:37 GMT; Max-Age=2592000; path=/
x-powered-by: PHP/7.4.28, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
142.250.74.35200 OK 184 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (570)
Size 184 kB (184483 bytes)
Hash c3d393e7af29342719105378e6f046b8
66a91c4ad5f5bc8c62e4239d636c729c8565836e
8bdf8c4a14aa3b0a88506c68c507aee00ef4af793e353c15fde9254a6654d2f1
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 184483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Aug 2023 17:41:05 GMT
expires: Tue, 13 Aug 2024 17:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 143433
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accdn.lpsnmedia.net/api/account/88982875/configuration/domainprotection/refererrestrictions?cb=lpCb43139x49198
178.249.97.99 16 kB URL accdn.lpsnmedia.net/api/account/88982875/configuration/domainprotection/refererrestrictions?cb=lpCb43139x49198
IP 178.249.97.99:0
File type gzip compressed data, from Unix\012- data
Hash dfde308a0306db433b33c5703324e3c9
433a0e79e57e08a3311e4225f532c911be8dd634
c5a2f6a3b6c7eb11cbfaaa1f68d8b36de24199dbf579a58a753ac4da40878955
GET /api/account/88982875/configuration/domainprotection/refererrestrictions?cb=lpCb43139x49198 HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lpcdn.lpsnmedia.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Aug 2023 09:31:38 GMT
content-type: application/javascript
cache-control: no-store
x-envoy-upstream-service-time: 93
x-envoy-decorator-operation: lp-accdn-app.default.svc.lokube01.int.liveperson.net:8080/*
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: MISS
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=7qgsabsd6s62
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Aug 2023 23:15:14 GMT
expires: Wed, 14 Aug 2024 23:15:14 GMT
cache-control: public, max-age=31536000
age: 36984
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=QybaJej5brGL8d7EvWmfKMZU
216.58.207.228200 OK 112 B URL GET HTTP/3 www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=QybaJej5brGL8d7EvWmfKMZU
IP 216.58.207.228:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=7qgsabsd6s62
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type ASCII text, with no line terminators
Hash b208adbc89cb20e493c89a870d46d4b0
508b9ae8ce17d60a86b74e400ec176b4e67d188d
8f0570843a4b0e86673611f5b29d7f4555e315587c5e8e109d65c640bd870f91
GET /recaptcha/enterprise/webworker.js?hl=en&v=QybaJej5brGL8d7EvWmfKMZU HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=l1s8w04jnn28
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Wed, 16 Aug 2023 09:31:38 GMT
date: Wed, 16 Aug 2023 09:31:38 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/javascript; charset=UTF-8
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 112
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.35200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=7qgsabsd6s62
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Aug 2023 14:42:45 GMT
expires: Fri, 18 Aug 2023 14:42:45 GMT
cache-control: public, max-age=604800
age: 413333
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
142.250.74.35200 OK 184 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (570)
Size 184 kB (184483 bytes)
Hash c3d393e7af29342719105378e6f046b8
66a91c4ad5f5bc8c62e4239d636c729c8565836e
8bdf8c4a14aa3b0a88506c68c507aee00ef4af793e353c15fde9254a6654d2f1
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 184483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Aug 2023 17:41:05 GMT
expires: Tue, 13 Aug 2024 17:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 143433
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
216.58.207.228200 OK 1.2 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP 216.58.207.228:443
Requested by https://js.hsforms.net/forms-next/shell-recaptcha
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 105ec655c0d6f6c3fa5845bf6e06f3df
8513a972d01c1e99ff2de9b281a422866828ee83
272994aeba04c4a89e0415fe6f51a585a780658de6a397aba943bad82717358f
GET /recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 16 Aug 2023 09:31:38 GMT
content-security-policy: script-src 'nonce-El4gN2Qztou7AxywvGnqWg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1165
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
142.250.74.35200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (56403), with no line terminators
Hash 83f90c5a4c20afb44429fa346fbadc10
7c278ec721d3880fbafaadeba9ee80bdf294b014
952833e41ba7a4b64c31a2d7b07dde81bf5bbacf5cbb967821cfe459d0c4a0d8
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24605
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Aug 2023 09:29:45 GMT
expires: Thu, 15 Aug 2024 09:29:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/css
vary: Accept-Encoding
age: 114
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
142.250.74.35200 OK 184 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (570)
Size 184 kB (184483 bytes)
Hash c3d393e7af29342719105378e6f046b8
66a91c4ad5f5bc8c62e4239d636c729c8565836e
8bdf8c4a14aa3b0a88506c68c507aee00ef4af793e353c15fde9254a6654d2f1
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 184483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Aug 2023 17:41:05 GMT
expires: Tue, 13 Aug 2024 17:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 143434
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
216.58.207.228200 OK 25 kB URL POST HTTP/3 www.google.com/recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP 216.58.207.228:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type ASCII text, with very long lines (41225)
Hash aca7ca157b9357b167ba9914014fea1d
6407dd864cc84d2e33442ff4c0c3f8cf4e73f53b
b57b79ea48a2c8d42064a1fac617f25c19e3df7ed44f2a6f7cb89f32802ccf7e
POST /recaptcha/enterprise/reload?k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-protobuffer
Content-Length: 11976
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-encoding: gzip
date: Wed, 16 Aug 2023 09:31:39 GMT
expires: Wed, 16 Aug 2023 09:31:39 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 24852
server: GSE
set-cookie: _GRECAPTCHA=09AHJ_tr7gLSwFEQegaJDFCrrb2SdFHMrN4lo5tUzuxuYDe8Ymks09_rZOLZiuOjc0OJokqZUXeTJcfbX3nI3Uwu0;Path=/recaptcha;Expires=Mon, 12-Feb-2024 09:31:39 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.131200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Aug 2023 16:00:01 GMT
expires: Sun, 11 Aug 2024 16:00:01 GMT
cache-control: public, max-age=31536000
age: 322298
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=7qgsabsd6s62
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Aug 2023 23:15:14 GMT
expires: Wed, 14 Aug 2024 23:15:14 GMT
cache-control: public, max-age=31536000
age: 36985
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
142.250.74.131200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 15340, version 1.0\012- data
Hash 19b7a0adfdd4f808b53af7e2ce2ad4e5
81d5d4c7b5035ad10cce63cf7100295e0c51fdda
c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 21:21:22 GMT
expires: Fri, 09 Aug 2024 21:21:22 GMT
cache-control: public, max-age=31536000
age: 475817
last-modified: Mon, 16 Oct 2017 17:33:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/payload?p=06ADUVZwDANgkNZDxWqm4JXvSS6doPXjk8F1A2vgFRiOnujNpwKPP3xR8R7O8rzLZycl1EdH0FS-1AaK44i_pfJT7aJ8hADPSFp_zC9oFqTGg9EJmWC-RlYd5Di329qEgFq1ZNCNs5d8y9R2G30zmZFP6HC-3D_oq3F7SUaALCg5qH8COBRkTjZTO11GbkYMs1OtcsO-R8rym8&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
216.58.207.228 43 kB URL www.google.com/recaptcha/enterprise/payload?p=06ADUVZwDANgkNZDxWqm4JXvSS6doPXjk8F1A2vgFRiOnujNpwKPP3xR8R7O8rzLZycl1EdH0FS-1AaK44i_pfJT7aJ8hADPSFp_zC9oFqTGg9EJmWC-RlYd5Di329qEgFq1ZNCNs5d8y9R2G30zmZFP6HC-3D_oq3F7SUaALCg5qH8COBRkTjZTO11GbkYMs1OtcsO-R8rym8&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP 216.58.207.228:0
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3\012- data
Hash 272db8b51d9e7ae0df54827ee5066a2e
bb25f73270744484f21775ba55e396c305f4c25f
ca0ab48724a6b857961eb6a06e7c7b03ae1c205bc6cc0b997e45ac9de9b25619
GET /recaptcha/enterprise/payload?p=06ADUVZwDANgkNZDxWqm4JXvSS6doPXjk8F1A2vgFRiOnujNpwKPP3xR8R7O8rzLZycl1EdH0FS-1AaK44i_pfJT7aJ8hADPSFp_zC9oFqTGg9EJmWC-RlYd5Di329qEgFq1ZNCNs5d8y9R2G30zmZFP6HC-3D_oq3F7SUaALCg5qH8COBRkTjZTO11GbkYMs1OtcsO-R8rym8&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Cookie: _GRECAPTCHA=09AHJ_tr7gLSwFEQegaJDFCrrb2SdFHMrN4lo5tUzuxuYDe8Ymks09_rZOLZiuOjc0OJokqZUXeTJcfbX3nI3Uwu0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Wed, 16 Aug 2023 09:31:39 GMT
date: Wed, 16 Aug 2023 09:31:39 GMT
cache-control: private, max-age=30
content-type: image/jpeg
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 42641
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/info_2x.png
142.250.74.35200 OK 665 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/info_2x.png
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 07bf314aab04047b9e9a959ee6f63da3
17bef6602672e2fd9956381e01356245144003e5
55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee
GET /recaptcha/api2/info_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Aug 2023 11:00:47 GMT
expires: Sat, 19 Aug 2023 11:00:47 GMT
cache-control: public, max-age=604800
age: 340252
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/audio_2x.png
142.250.74.35200 OK 530 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/audio_2x.png
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 88e0f42c9fa4f94aa8bcd54d1685c180
5ad9d47a49b82718baa3be88550a0b3350270c42
89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992
GET /recaptcha/api2/audio_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 530
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 04:54:45 GMT
expires: Thu, 17 Aug 2023 04:54:45 GMT
cache-control: public, max-age=604800
age: 535014
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/refresh_2x.png
142.250.74.35200 OK 600 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/refresh_2x.png
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 15:12:23 GMT
expires: Thu, 17 Aug 2023 15:12:23 GMT
cache-control: public, max-age=604800
age: 497956
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/mymet/bd750/meta/jsonp
77.83.64.33200 OK 278 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/jsonp
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 278 kB (278382 bytes)
Hash 7efac8c0fa8e30db7a423500ef59abab
be73717f776f24dd31498c27a1b02b784570d5bb
102411780270584690575675e14e574ef8a16cf6fdd5700d5682e68a8d2cc00d
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/jsonp HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: application/octet-stream
content-length: 278382
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
etag: "64dbd402-43f6e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Changa+One:400,400italic
142.250.74.138200 OK 8.2 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Changa+One:400,400italic
IP 142.250.74.138:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintC1:FC:47:2F:E4:8D:DA:F2:E6:C0:AB:89:40:FB:3F:E4:E0:C5:04:42
ValidityMon, 17 Jul 2023 08:21:35 GMT - Mon, 09 Oct 2023 08:21:34 GMT
File type gzip compressed data, max compression\012- data
Hash 44f615485f6f1b3c642c2823af5555fe
2eeac8aa35e7f885be8644a473a930bf4e902c59
30bc4040a6676593eb9000fa0a3ce166a3f95216e15938e251919d8c030baf35
GET /css?family=Changa+One:400,400italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 16 Aug 2023 09:31:44 GMT
date: Wed, 16 Aug 2023 09:31:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/mymet/bd750/meta/plx.chock.js
77.83.64.33200 OK 12 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/plx.chock.js
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash 5acfeead7d13511cdef767305b87e3f8
ec5337e62f1e64d3aaba3bf41a41b5f876964922
b9417c5359a2259bb564852a1ebd2b743b79ac06efdee42dc53456f8445ad246
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/plx.chock.js HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-d41"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
142.250.74.131200 OK 128 kB URL GET HTTP/3 fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP 142.250.74.131:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://flokbaby.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Aug 2023 19:44:28 GMT
expires: Sat, 10 Aug 2024 19:44:28 GMT
cache-control: public, max-age=31536000
age: 395236
last-modified: Tue, 07 Mar 2023 19:51:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/mymet/bd750/meta/recaptcha__nl.js.download
77.83.64.33200 OK 173 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/recaptcha__nl.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (820)
Size 173 kB (172965 bytes)
Hash e735084e8ffed1ad8d89df08d98d4d23
6cdab8dac12030c8bc980ec129affecc626285c3
6cde5be2d724e53c8c4a97041365d3075e3af63ec08e1712b2f831b6e2bd357b
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/recaptcha__nl.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-56577"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/EuclidCircularB-Bold-WebXL.woff2
77.83.64.33200 OK 44 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/EuclidCircularB-Bold-WebXL.woff2
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type Web Open Font Format (Version 2), TrueType, length 44544, version 3.66\012- data
Hash 9024d0bf73943172297c4628d0054e20
36c3795e7b297d06589e15ef59592683d9ed0974
88fad87880ae6bb0d733c967419d5f0d68da547a88ad67e7af41f18dae2e20df
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/EuclidCircularB-Bold-WebXL.woff2 HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/meta/metamask-staging-2.webflow.css
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: font/woff2
content-length: 44544
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
etag: "64dbd402-ae00"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/tag.js.download
77.83.64.33200 OK 597 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/tag.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (21652), with no line terminators
Size 597 kB (597335 bytes)
Hash e2ee8a9cd68c3d310a4c62fdb4b5c93a
67eb5f9547f1d9de0a8b143c3b50511c26281399
145d14bb73e5b03cc73062c2a78c392125b891c62b1cc9d542e5adba762f04e7
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/tag.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-5494"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/storage.secure.min.js.download
77.83.64.33200 OK 14 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/storage.secure.min.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (38562), with no line terminators
Hash 3386ec5559f1ba569cf0ab6acab436cc
e98e11d37c5172ee128a85f68447efb3cb0e853c
996ab3c1e26cb00ec7d3d29650e784755ba46f33613563b7173b0dab03fa3d73
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/storage.secure.min.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-96a2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/88982875/configuration/setting/accountproperties/?cb=lpCb70723x89608
178.249.97.99200 OK 2.3 kB URL GET HTTP/2 accdn.lpsnmedia.net/api/account/88982875/configuration/setting/accountproperties/?cb=lpCb70723x89608
IP 178.249.97.99:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash d379b7720f347a6b2a5c350618ed18b1
3e93f2433ed1a746e966f29c344edb17d38894ac
8ff40b5ca6c8a816ebe45289fe67efd0143ac9bfedd90fc6fa2e2aaadebfa8ed
GET /api/account/88982875/configuration/setting/accountproperties/?cb=lpCb70723x89608 HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: application/javascript
vary: Accept
expires: Wed, 16 Aug 2023 09:32:36 GMT
x-envoy-upstream-service-time: 1
x-envoy-decorator-operation: lp-accdn-app.default.svc.lokube01.int.liveperson.net:8080/*
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/styles__ltr.css
77.83.64.33200 OK 25 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/styles__ltr.css
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/meta/anchor.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (52368), with no line terminators
Hash 97c3d49b83dc004fcda822b1853b787b
a82fcfbd6b1cf4dd00f4a63d47b9119a69b40147
509bf9e83d3ca5add614196c02c8e0ce59731d3d1a10552c944b74d86019d866
GET /mymet/bd750/meta/styles__ltr.css HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/meta/anchor.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: text/css
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-cc90"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/js.hsforms.net/forms/v2.js
77.83.64.33301 Moved Permanently 0 B URL GET HTTP/2 flokbaby.it/js.hsforms.net/forms/v2.js
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/meta/saved_resource.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /js.hsforms.net/forms/v2.js HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/meta/saved_resource.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: text/html; charset=UTF-8
content-length: 0
link: <https://flokbaby.it/wp-json/>; rel="https://api.w.org/"
expires: Wed, 16 Aug 2023 10:31:44 GMT
cache-control: max-age=3600
location: https://flokbaby.it/blogs/tag/internet/
x-powered-by: PHP/7.4.28, PleskLin
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/metamask-staging-2.webflow.css
77.83.64.33200 OK 614 B URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/metamask-staging-2.webflow.css
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type gzip compressed data\012- data
Hash 5e25146248e1af0cdaf358ef7d45e70f
2a5f94309f1e773b0b524d000f5009ac40c2db45
c1326fd7aeb1979cd662dbac2c2670401de2b1a6033b13e40d1c7594cc15b622
GET /mymet/bd750/meta/metamask-staging-2.webflow.css HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: text/css
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-22adb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/metamask.io/images/webclip.png
77.83.64.33301 Moved Permanently 0 B URL GET HTTP/2 flokbaby.it/metamask.io/images/webclip.png
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /metamask.io/images/webclip.png HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: text/html; charset=UTF-8
content-length: 0
link: <https://flokbaby.it/wp-json/>; rel="https://api.w.org/"
expires: Wed, 16 Aug 2023 10:31:44 GMT
cache-control: max-age=3600
location: https://flokbaby.it/prodotto/marsupio-ergonomico-standard-zig-zag/
x-powered-by: PHP/7.4.28, PleskLin
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/jquery-3.5.1.min.dc5e7f18c8.js.download
77.83.64.33200 OK 62 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/jquery-3.5.1.min.dc5e7f18c8.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/jquery-3.5.1.min.dc5e7f18c8.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-15d84"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/metamask.io/images/favicon.png
77.83.64.33301 Moved Permanently 0 B URL GET HTTP/2 flokbaby.it/metamask.io/images/favicon.png
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /metamask.io/images/favicon.png HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 16 Aug 2023 09:31:45 GMT
content-type: text/html; charset=UTF-8
content-length: 0
link: <https://flokbaby.it/wp-json/>; rel="https://api.w.org/"
expires: Wed, 16 Aug 2023 10:31:45 GMT
cache-control: max-age=3600
location: https://flokbaby.it/prodotto/marsupio-ergonomico-standard-zig-zag/
x-powered-by: PHP/7.4.28, PleskLin
X-Firefox-Spdy: h2
fonts.googleapis.com/icon?family=Material+Icons
142.250.74.138200 OK 128 kB URL GET HTTP/3 fonts.googleapis.com/icon?family=Material+Icons
IP 142.250.74.138:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintC1:FC:47:2F:E4:8D:DA:F2:E6:C0:AB:89:40:FB:3F:E4:E0:C5:04:42
ValidityMon, 17 Jul 2023 08:21:35 GMT - Mon, 09 Oct 2023 08:21:34 GMT
File type gzip compressed data, max compression\012- data
Size 128 kB (128144 bytes)
Hash c7aaec18cb496cbd22e11b64b0324ee9
2d9cfd5d7a8a52894e7a2d0c8027caca2b6af5cd
47d8b3f1ca84ac7dc3a3f49ec2772dc58d92b86b8d23582a998e57448109b010
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 16 Aug 2023 09:31:43 GMT
date: Wed, 16 Aug 2023 09:31:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/styles__ltr.css
142.250.74.35404 Not Found 1.6 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/styles__ltr.css
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=re9qvbghol0w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash e36ef824369a52f32d36526426b521a1
2aa85c4f5ffea54cf853bc9210d79c53d24ff088
1dee5a71230d0118e32b59df6930c964cddbe0d4f5e25fb52e159b75cffd1e97
GET /recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Wed, 16 Aug 2023 09:31:45 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1620
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
142.250.74.35404 Not Found 1.6 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=re9qvbghol0w
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash c90524d6a02b27addb56c350fe6fbb2d
d713d1b53323c0169ffe0649be8c9d04a189f999
4aefd395113d052a874ac1919aed0e288835e0377683f1e71e98838d16c986e0
GET /recaptcha/releases/rPvs0Nyx3sANE-ZHUN-0nM85/recaptcha__nl.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Wed, 16 Aug 2023 09:31:45 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1621
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
142.250.74.35200 OK 184 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (570)
Size 184 kB (184483 bytes)
Hash c3d393e7af29342719105378e6f046b8
66a91c4ad5f5bc8c62e4239d636c729c8565836e
8bdf8c4a14aa3b0a88506c68c507aee00ef4af793e353c15fde9254a6654d2f1
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://flokbaby.it
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 184483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Aug 2023 17:41:05 GMT
expires: Tue, 13 Aug 2024 17:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 143440
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.js?loc=https%3A%2F%2Fflokbaby.it&site=88982875&force=1&env=prod&isCrossDomain=true
178.249.97.98200 OK 16 kB URL GET HTTP/2 lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.js?loc=https%3A%2F%2Fflokbaby.it&site=88982875&force=1&env=prod&isCrossDomain=true
IP 178.249.97.98:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (39942), with no line terminators
Hash 9159979869e5ff92d8a73c27c3f582e1
9df74f75ee096a2b4f132cbf811a8ae42b29ce72
6ff411706a55c06631e7a21b744681e5205770672f43a1cbedbe0a23812cab21
GET /le_secure_storage/3.15.0.0-release_5063/storage.secure.min.js?loc=https%3A%2F%2Fflokbaby.it&site=88982875&force=1&env=prod&isCrossDomain=true HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Aug 2023 09:31:45 GMT
content-type: application/javascript
last-modified: Fri, 05 Nov 2021 13:34:15 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Thu, 15 Aug 2024 09:31:45 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
142.250.74.35200 OK 184 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (570)
Size 184 kB (184483 bytes)
Hash c3d393e7af29342719105378e6f046b8
66a91c4ad5f5bc8c62e4239d636c729c8565836e
8bdf8c4a14aa3b0a88506c68c507aee00ef4af793e353c15fde9254a6654d2f1
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://js.hsforms.net
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 184483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Aug 2023 17:41:05 GMT
expires: Tue, 13 Aug 2024 17:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 143440
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.html?loc=https%3A%2F%2Fflokbaby.it&site=88982875&env=prod&isCrossDomain=true
178.249.97.98200 OK 46 kB URL GET HTTP/2 lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.html?loc=https%3A%2F%2Fflokbaby.it&site=88982875&env=prod&isCrossDomain=true
IP 178.249.97.98:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32207)
Hash 84089e4c9f879135479ff4899dfe8888
4b4cb9d350548221f42781f878f32d97233f070b
50932101f6ed3d55d56e2cfde90f49d1a31203eb12c7ec38ad20a82839fde0c7
GET /le_secure_storage/3.15.0.0-release_5063/storage.secure.min.html?loc=https%3A%2F%2Fflokbaby.it&site=88982875&env=prod&isCrossDomain=true HTTP/1.1
Host: lpcdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Aug 2023 09:31:45 GMT
content-type: text/html
last-modified: Fri, 05 Nov 2021 13:34:15 GMT
content-encoding: gzip
server: ws
vary: Origin
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-state-rev
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options, x-lp-state-rev
access-control-allow-credentials: true
expires: Thu, 15 Aug 2024 09:31:45 GMT
cache-control: max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-cache-status: HIT
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
142.250.74.35200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (56403), with no line terminators
Hash 83f90c5a4c20afb44429fa346fbadc10
7c278ec721d3880fbafaadeba9ee80bdf294b014
952833e41ba7a4b64c31a2d7b07dde81bf5bbacf5cbb967821cfe459d0c4a0d8
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24605
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Aug 2023 09:29:45 GMT
expires: Thu, 15 Aug 2024 09:29:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/css
vary: Accept-Encoding
age: 121
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
142.250.74.35200 OK 184 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (570)
Size 184 kB (184483 bytes)
Hash c3d393e7af29342719105378e6f046b8
66a91c4ad5f5bc8c62e4239d636c729c8565836e
8bdf8c4a14aa3b0a88506c68c507aee00ef4af793e353c15fde9254a6654d2f1
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 184483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Aug 2023 17:41:05 GMT
expires: Tue, 13 Aug 2024 17:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 143441
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.131200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Aug 2023 16:00:01 GMT
expires: Sun, 11 Aug 2024 16:00:01 GMT
cache-control: public, max-age=31536000
age: 322305
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/mymet/bd750/meta/analytics.js.download
77.83.64.33200 OK 35 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/analytics.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (1325)
Hash d40531c5e99a6f84e42535859476fe35
a901817d77b2fe5259c298c91bc65c54d7f8a1a9
a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/analytics.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-c41d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/saved_resource.html
77.83.64.33200 OK 7.7 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/saved_resource.html
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32691)
Hash de4ff6118374a4bdddaeafc4da59b95e
22c2418e29e43fead20844c0f7009372607acb0b
724ea951d695f615e5c02d58973836560baef3341aa9eddc05824f82809e7834
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/saved_resource.html HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: text/html
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-d8f2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.35200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=7qgsabsd6s62
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Aug 2023 14:42:45 GMT
expires: Fri, 18 Aug 2023 14:42:45 GMT
cache-control: public, max-age=604800
age: 413341
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
142.250.74.35200 OK 184 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (570)
Size 184 kB (184483 bytes)
Hash c3d393e7af29342719105378e6f046b8
66a91c4ad5f5bc8c62e4239d636c729c8565836e
8bdf8c4a14aa3b0a88506c68c507aee00ef4af793e353c15fde9254a6654d2f1
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 184483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Aug 2023 17:41:05 GMT
expires: Tue, 13 Aug 2024 17:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 143441
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
216.58.207.228200 OK 1.2 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP 216.58.207.228:443
Requested by https://js.hsforms.net/forms-next/shell-recaptcha
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f46c61e0ec6632a8b2f5a7e1422bb51d
f7596cea88593b58a24dc8639e5c92ebe960d0af
3e6f7923d044e603a96b857ccf3cb57f139c647a044daebd59b4b924b0b2eae9
GET /recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Cookie: _GRECAPTCHA=09AHJ_tr7gLSwFEQegaJDFCrrb2SdFHMrN4lo5tUzuxuYDe8Ymks09_rZOLZiuOjc0OJokqZUXeTJcfbX3nI3Uwu0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 16 Aug 2023 09:31:46 GMT
content-security-policy: script-src 'nonce-B43k38Ii8WyczFrkHj9z1g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1164
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
142.250.74.35200 OK 25 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (56403), with no line terminators
Hash 83f90c5a4c20afb44429fa346fbadc10
7c278ec721d3880fbafaadeba9ee80bdf294b014
952833e41ba7a4b64c31a2d7b07dde81bf5bbacf5cbb967821cfe459d0c4a0d8
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24605
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Aug 2023 09:29:45 GMT
expires: Thu, 15 Aug 2024 09:29:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/css
vary: Accept-Encoding
age: 122
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
142.250.74.35200 OK 184 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type ASCII text, with very long lines (570)
Size 184 kB (184483 bytes)
Hash c3d393e7af29342719105378e6f046b8
66a91c4ad5f5bc8c62e4239d636c729c8565836e
8bdf8c4a14aa3b0a88506c68c507aee00ef4af793e353c15fde9254a6654d2f1
GET /recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 184483
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Aug 2023 17:41:05 GMT
expires: Tue, 13 Aug 2024 17:41:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Aug 2023 14:49:49 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 143442
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/mymet/bd750/meta/css.html
77.83.64.33200 OK 25 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/css.html
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash 147429fb2ddc3861e2ae0f473f17d78e
f2bdce63e15b9f3b90c8c3b153deb75b28eb69e3
25d501d70fcb9835f935fd47e045502700dc5f862cd7e763a49bbc7316396f2a
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/css.html HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: text/html
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
etag: W/"2ac-602fb4fc0bd45"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.131200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Aug 2023 16:00:01 GMT
expires: Sun, 11 Aug 2024 16:00:01 GMT
cache-control: public, max-age=31536000
age: 322306
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.131200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=7qgsabsd6s62
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Aug 2023 23:15:14 GMT
expires: Wed, 14 Aug 2024 23:15:14 GMT
cache-control: public, max-age=31536000
age: 36993
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/refresh_2x.png
142.250.74.35200 OK 600 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/refresh_2x.png
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 0f2a4639b8a4cb30c76e8333c00d30a6
57e273a270bb864970d747c74b3f0a7c8e515b13
44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98
GET /recaptcha/api2/refresh_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 15:12:23 GMT
expires: Thu, 17 Aug 2023 15:12:23 GMT
cache-control: public, max-age=604800
age: 497964
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/mymet/bd750/meta/saved_resource.html
77.83.64.33200 OK 8.1 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/saved_resource.html
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32691)
Hash de4ff6118374a4bdddaeafc4da59b95e
22c2418e29e43fead20844c0f7009372607acb0b
724ea951d695f615e5c02d58973836560baef3341aa9eddc05824f82809e7834
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/saved_resource.html HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:35 GMT
content-type: text/html
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-d8f2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/info_2x.png
142.250.74.35200 OK 665 B URL GET HTTP/3 www.gstatic.com/recaptcha/api2/info_2x.png
IP 142.250.74.35:443
Requested by https://flokbaby.it/mymet/bd750/meta/bframe.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced\012- data
Hash 07bf314aab04047b9e9a959ee6f63da3
17bef6602672e2fd9956381e01356245144003e5
55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee
GET /recaptcha/api2/info_2x.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 665
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Aug 2023 11:00:47 GMT
expires: Sat, 19 Aug 2023 11:00:47 GMT
cache-control: public, max-age=604800
age: 340260
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
142.250.74.131200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP 142.250.74.131:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 15340, version 1.0\012- data
Hash 19b7a0adfdd4f808b53af7e2ce2ad4e5
81d5d4c7b5035ad10cce63cf7100295e0c51fdda
c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd
GET /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Aug 2023 21:21:22 GMT
expires: Fri, 09 Aug 2024 21:21:22 GMT
cache-control: public, max-age=31536000
age: 475825
last-modified: Mon, 16 Oct 2017 17:33:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/enterprise/payload?p=06ADUVZwAHGTSeMZFN0Yna-mpFri8f36h_jph-4BaZi0KZkKyj9DUOXeb2gWyVCL4_oVQnLtQMDDGbzdDeJxkKWNFzK-2fRX3IY52Nkw1eI3eiYDlpVY0fd7YKfno6NUScxF1d-PBIIPdeEAf2dgTWbgAvKJS5I49XuYz6UKUqvCxvjnPCsJimQRB8Xlus4QbzHHD4pUm9O8E2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
216.58.207.228200 OK 37 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/payload?p=06ADUVZwAHGTSeMZFN0Yna-mpFri8f36h_jph-4BaZi0KZkKyj9DUOXeb2gWyVCL4_oVQnLtQMDDGbzdDeJxkKWNFzK-2fRX3IY52Nkw1eI3eiYDlpVY0fd7YKfno6NUScxF1d-PBIIPdeEAf2dgTWbgAvKJS5I49XuYz6UKUqvCxvjnPCsJimQRB8Xlus4QbzHHD4pUm9O8E2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
IP 216.58.207.228:443
Requested by https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3\012- data
Hash ee11b587f35657dc081900ec5148062d
c9532241ca387e4c8d3ba463b8994d5be8585ffa
4da018bd4ed1d7d822725c2014e6c23cbd8d2d262fa14d967614f362a3e84f48
GET /recaptcha/enterprise/payload?p=06ADUVZwAHGTSeMZFN0Yna-mpFri8f36h_jph-4BaZi0KZkKyj9DUOXeb2gWyVCL4_oVQnLtQMDDGbzdDeJxkKWNFzK-2fRX3IY52Nkw1eI3eiYDlpVY0fd7YKfno6NUScxF1d-PBIIPdeEAf2dgTWbgAvKJS5I49XuYz6UKUqvCxvjnPCsJimQRB8Xlus4QbzHHD4pUm9O8E2&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/enterprise/bframe?hl=en&v=QybaJej5brGL8d7EvWmfKMZU&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm
Cookie: _GRECAPTCHA=09AHJ_tr4wuX9TgREgwnd7cfu1BHUcmp1RuxxEczsXPbQQH9u7CFV4x2YlFownsJvcojxSpAXK59rmWjJqbcYFl0k
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Wed, 16 Aug 2023 09:31:47 GMT
date: Wed, 16 Aug 2023 09:31:47 GMT
cache-control: private, max-age=30
content-type: image/jpeg
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 36604
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/mymet/bd750/meta/Institutional-Illustration.png
77.83.64.33200 OK 287 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/Institutional-Illustration.png
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type gzip compressed data, max speed, from Unix\012- data
Size 287 kB (287195 bytes)
Hash 8c16e49807928787f6aea73c34d62c46
8e4fc33736bb240f2e5231af86aad25154176f8c
50619c6a624d90db1a249da72dae18515e58d505306ee5023b91e761841984a5
GET /mymet/bd750/meta/Institutional-Illustration.png HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/meta/metamask-staging-2.webflow.css
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: image/png
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-46b1c"
x-powered-by: PleskLin
content-encoding: gzip
X-Firefox-Spdy: h2
js.hsforms.net/forms-next/shell-recaptcha
104.16.188.65200 OK 852 B URL GET HTTP/3 js.hsforms.net/forms-next/shell-recaptcha
IP 104.16.188.65:443
Requested by https://flokbaby.it/mymet/bd750/meta/saved_resource.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint16:1A:D5:A1:BC:62:B5:09:33:E2:A8:32:88:88:60:DE:BD:00:B5:F3
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (882), with no line terminators
Hash 440ce01c33f34fd2d411740a08afbefc
5430ee8be61e7637b762df165949e960bf4665c6
4b6998d625f78ce81d67272fc34ca2959491f21f8f858c80f69b0e405fef691f
GET /forms-next/shell-recaptcha HTTP/1.1
Host: js.hsforms.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 09:31:45 GMT
content-type: text/html; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Mon, 17 Jul 2023 10:52:50 UTC
x-amz-server-side-encryption: AES256
x-amz-meta-ao: {}
x-amz-version-id: r4vCfBBxOcZHra9.bpnk8rRLUZuTuDCd
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 16d910967d343c8da7828222a653755e.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: wh75n8KLtSrTq-ETxpUSHT228YoCEAUWNb7wWIrPA52DrtFkGJKOig==
age: 1148
cache-control: s-maxage=600, max-age=300
x-hs-target-asset: FormsNext/static-5.645/html/recaptcha.html
x-content-type-options: nosniff
access-control-allow-origin: *
x-hs-cache-status: HIT
x-envoy-upstream-service-time: 0
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-57ff77fcd-fs8rm
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: 945e93b4-d4ee-4b67-8b78-f324a76cfc99
x-request-id: 945e93b4-d4ee-4b67-8b78-f324a76cfc99
cache-tag: staticjsapp-FormsNext-web-prod,staticjsapp-prod
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q5wMksYmlnrtdjeAQsVGUaGfukY%2FdbG45AP%2BwLRVQHn9tUmkfIscUmYCdG6FiEkeiJCe324elOa6LK1ZrrF3TZNpUjfsBJZJiHZVWcVG%2B7DfhFNUURnk7useg3AJPPSz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f78aa89df84b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2
142.250.74.131200 OK 8.4 kB URL GET HTTP/3 fonts.gstatic.com/s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2
IP 142.250.74.131:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 8404, version 1.0\012- data
Hash 141119ae119bf7ca75e10ef82f66e442
adebf435aa078db3c116cb9faae15f2ad81d3ac5
c6afeb967afd466210e4061473c4855684e84b7e850b248c0533e6288acfbaff
GET /s/changaone/v18/xfu20W3wXn3QLUJXhzq42ATSu5_f.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://flokbaby.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Aug 2023 02:52:24 GMT
expires: Sun, 11 Aug 2024 02:52:24 GMT
cache-control: public, max-age=31536000
age: 369560
last-modified: Thu, 21 Apr 2022 17:15:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/mymet/bd750/secure.html
77.83.64.33200 OK 21 kB URL User Request GET HTTP/2 flokbaby.it/mymet/bd750/secure.html
IP 77.83.64.33:443
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/secure.html HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: text/html
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-5177"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/88982875/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
178.249.97.99200 OK 3.4 kB URL GET HTTP/2 accdn.lpsnmedia.net/api/account/88982875/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
IP 178.249.97.99:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3820), with no line terminators
Hash 17644c764df45ee876930bfce973da3f
9764002053fbcea0017bf13621d6df691a6b59ae
69db2714974e26240b8f8e35ce247e3ff65c9dcefc960a289fc9570b6351cf71
GET /api/account/88982875/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: application/javascript
vary: Accept
expires: Wed, 16 Aug 2023 09:32:36 GMT
x-envoy-upstream-service-time: 1
x-envoy-decorator-operation: lp-accdn-app.default.svc.lokube01.int.liveperson.net:8080/*
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: HIT
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
flokbaby.it/blogs/tag/internet/
77.83.64.33200 OK 86 kB URL GET HTTP/2 flokbaby.it/blogs/tag/internet/
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/meta/saved_resource.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /blogs/tag/internet/ HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://flokbaby.it/mymet/bd750/meta/saved_resource.html
DNT: 1
Connection: keep-alive
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:45 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://flokbaby.it/wp-json/>; rel="https://api.w.org/", <https://flokbaby.it/wp-json/wp/v2/tags/27>; rel="alternate"; type="application/json"
x-powered-by: PHP/7.4.28, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/webfont.js.download
77.83.64.33200 OK 13 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/webfont.js.download
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type ASCII text, with very long lines (2134)
Hash 7c96a5f11d9741541d5e3c42ff6380d7
d3fa2564c021cf730e58ffddb138cf6b57ed126e
81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/webfont.js.download HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: application/javascript
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-3384"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/bframe.html
77.83.64.33200 OK 12 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/bframe.html
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/bframe.html HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: text/html
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-2e07"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/webflow.css
77.83.64.33200 OK 39 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/webflow.css
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/webflow.css HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:43 GMT
content-type: text/css
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-98c5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
forms.hsforms.com/embed/v3/form/4795067/2b64112b-f442-4840-9ace-b11dccd5f744?callback=hs_reqwest_0&hutk=
104.17.213.243200 OK 5.8 kB URL GET HTTP/3 forms.hsforms.com/embed/v3/form/4795067/2b64112b-f442-4840-9ace-b11dccd5f744?callback=hs_reqwest_0&hutk=
IP 104.17.213.243:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1E:9D:91:27:86:63:DC:7B:9D:15:4E:99:31:FC:AA:1D:DC:9E:06:3B
ValidityThu, 18 May 2023 00:00:00 GMT - Fri, 17 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (6544), with no line terminators
Hash 77bc6484f07491610b3e1263c1b135c7
07d193dd1363551ae641233fb8d3ffe4433fffb7
36ae04282fef0d4b7359305461ca4f3ce99016939928d7567667bda191e79ba5
GET /embed/v3/form/4795067/2b64112b-f442-4840-9ace-b11dccd5f744?callback=hs_reqwest_0&hutk= HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: application/javascript;charset=utf-8
x-trace: 2BC1787CCC46123017A72839B5197D71856111E5AB000000000000000000
x-origin-hublet: na1
vary: origin
content-disposition: attachment; filename=no-rfd.txt
x-content-type-options: nosniff
access-control-allow-credentials: false
access-control-expose-headers: X-Origin-Hublet
cache-control: max-age=0, no-cache, no-store
x-robots-tag: none
x-envoy-upstream-service-time: 10
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-7f89ffc67f-lvqkb
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-hubspot-correlation-id: 4d234951-52db-4b1f-8daf-6ceae97d5623
x-request-id: 4d234951-52db-4b1f-8daf-6ceae97d5623
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7f78aa828adab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=re9qvbghol0w
216.58.207.228200 OK 56 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=re9qvbghol0w
IP 216.58.207.228:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (47811)
Hash a1381377ff42ecbe5ad4e7e29e3e7bfc
2b122a4643fffad17985cfd74dcf5d5e313324ef
b8d7347b7440c9776e61f3c07625294cba7357fc73c75632514dd72db9421ee7
GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9mbG9rYmFieS5pdDo0NDM.&hl=nl&v=rPvs0Nyx3sANE-ZHUN-0nM85&size=invisible&badge=inline&cb=re9qvbghol0w HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/
Cookie: _GRECAPTCHA=09AHJ_tr7gLSwFEQegaJDFCrrb2SdFHMrN4lo5tUzuxuYDe8Ymks09_rZOLZiuOjc0OJokqZUXeTJcfbX3nI3Uwu0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 16 Aug 2023 09:31:45 GMT
content-security-policy: script-src 'nonce-ShyePlPp87zbb2XogzH1sw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 31314
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
flokbaby.it/mymet/bd750/meta/saved_resource(2).html
77.83.64.33200 OK 504 B URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/saved_resource(2).html
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/meta/anchor.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (514), with no line terminators
Hash 55cabfc95bb392f0e7c975fa4eebb8e1
7347d78527836042ef572f68127b2eb6d066ee67
0fb4d70036a3ea0d9a3999deb5da385b2d4de14447d25c6cf80fcc73db717d39
GET /mymet/bd750/meta/saved_resource(2).html HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/meta/anchor.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: text/html
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
etag: W/"1f8-602fb4fc0ada5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
accdn.lpsnmedia.net/api/account/88982875/configuration/domainprotection/refererrestrictions?cb=lpCb35398x89854
178.249.97.99200 OK 113 B URL GET HTTP/2 accdn.lpsnmedia.net/api/account/88982875/configuration/domainprotection/refererrestrictions?cb=lpCb35398x89854
IP 178.249.97.99:443
Requested by https://lpcdn.lpsnmedia.net/le_secure_storage/3.15.0.0-release_5063/storage.secure.min.html?loc=https%3A%2F%2Fflokbaby.it&site=88982875&env=prod&isCrossDomain=true
Certificate IssuerSectigo Limited
Subject*.lpsnmedia.net
Fingerprint50:71:62:B3:88:93:98:3D:CC:EF:A7:C6:82:00:2D:1E:44:64:14:BB
ValidityMon, 09 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 089f140f304e690104a682c4c007d63b
3f292d81ca0185c5336a6864524c038cc7cf85e3
ffbf9a509a3776a3f695d1aeb3c0684c49539c2fc5ee8d1626ff727a05365f18
GET /api/account/88982875/configuration/domainprotection/refererrestrictions?cb=lpCb35398x89854 HTTP/1.1
Host: accdn.lpsnmedia.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lpcdn.lpsnmedia.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Aug 2023 09:31:45 GMT
content-type: application/javascript
cache-control: no-store
x-envoy-upstream-service-time: 87
x-envoy-decorator-operation: lp-accdn-app.default.svc.lokube01.int.liveperson.net:8080/*
server: ws
strict-transport-security: max-age=99999999999; includeSubDomains
access-control-allow-methods: GET, POST, PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token
access-control-expose-headers: X-Requested-With, X-HTTP-Method-Override, LP-DOMAIN-REFERER, LP-URL, ETag, ac-revision, X-LP-Last-Modified, If-Match, Authentication-Method, Credit-Card-Ref, Automation-Secret, Email-Token, x-lp-host, Lp-Req-Time, date, x-application-context, strict-transport-security, x-content-type-options, x-download-options, x-xss-protection, x-cache-status, x-amz-id-2, x-amz-request-id, expires, last-modified, set-cookie, content-security-policy, x-frame-options
access-control-allow-credentials: true
x-cache-status: MISS
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
flokbaby.it/mymet/bd750/meta/anchor.html
77.83.64.33200 OK 43 kB URL GET HTTP/2 flokbaby.it/mymet/bd750/meta/anchor.html
IP 77.83.64.33:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerLet's Encrypt
Subjectflokbaby.it
FingerprintFE:D5:A8:4F:4F:0E:DB:A3:78:E1:0B:54:43:19:EE:CB:51:52:C0:99
ValidityMon, 10 Jul 2023 08:39:11 GMT - Sun, 08 Oct 2023 08:39:10 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (33133)
Hash a03e5a8ddfb42a8a60384d788266a807
f549963001ef8b92e0e04ff3890989d50b91dbf5
48e0975bfc5d24b4afb177af183ef6ac96c1645607059ab2df2bc1849f02f630
Analyzer Verdict Alert urlquery phishing Phishing - Generic Crypto/Wallet
GET /mymet/bd750/meta/anchor.html HTTP/1.1
Host: flokbaby.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://flokbaby.it/mymet/bd750/secure.html
Cookie: _ga=GA1.2.1481470025.1692178290; _gid=GA1.2.483422483.1692178290; _gat_gtag_UA_37075177_6=1; wp_woocommerce_session_b225a3e1d791aefc99bcf5f3eeeb78ae=t_b0a7feb88ecfc458935fb6d1bfca2c%7C%7C1692351097%7C%7C1692347497%7C%7C45047e8893790b7ee8ccf6c4272f697a; woocommerce_recently_viewed=4638
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 16 Aug 2023 09:31:44 GMT
content-type: text/html
last-modified: Tue, 15 Aug 2023 19:37:38 GMT
vary: Accept-Encoding
etag: W/"64dbd402-a636"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=7qgsabsd6s62
216.58.207.228200 OK 56 kB URL GET HTTP/3 www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=7qgsabsd6s62
IP 216.58.207.228:443
Requested by https://js.hsforms.net/forms-next/shell-recaptcha
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint22:D6:3F:7A:CA:1E:3B:04:40:02:A1:AF:49:B4:02:8E:8D:0E:F9:43
ValidityMon, 17 Jul 2023 08:16:31 GMT - Mon, 09 Oct 2023 08:16:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (47217)
Hash 6943533b37f8162b00eb0d1ded1ab332
5e08905575e89f376383ce27a4ff187b14d7e9c6
1f3a0e7e8c930abf383ee4532a4c6ecaec8e663984fe28198feb120afafb4321
GET /recaptcha/enterprise/anchor?ar=1&k=6Ld_ad8ZAAAAAAqr0ePo1dUfAi0m4KPkCMQYwPPm&co=aHR0cHM6Ly9qcy5oc2Zvcm1zLm5ldDo0NDM.&hl=en&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&badge=inline&cb=7qgsabsd6s62 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://js.hsforms.net/
Cookie: _GRECAPTCHA=09AHJ_tr7gLSwFEQegaJDFCrrb2SdFHMrN4lo5tUzuxuYDe8Ymks09_rZOLZiuOjc0OJokqZUXeTJcfbX3nI3Uwu0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 16 Aug 2023 09:31:46 GMT
content-security-policy: script-src 'nonce-ClSyLkiSdWzcpJ4DAXcuLg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 30950
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
142.250.74.131200 OK 7.9 kB URL GET HTTP/3 fonts.gstatic.com/s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2
IP 142.250.74.131:443
Requested by https://flokbaby.it/mymet/bd750/secure.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintCC:0B:9E:F2:35:30:16:40:11:59:40:74:E5:04:3C:D5:D2:3C:30:70
ValidityMon, 17 Jul 2023 08:21:33 GMT - Mon, 09 Oct 2023 08:21:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 7900, version 1.0\012- data
Hash 61e86e7a20ecf3ba181ca4b9a9a1cdbd
482a65cffc69109af26669d64accbef71db3b836
fbd0536d5b92c0dbe6ad2637800ae8da10c20755b564a3575bd12bba57f73b18
GET /s/changaone/v18/xfu00W3wXn3QLUJXhzq42AHiuQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://flokbaby.it
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Aug 2023 17:42:59 GMT
expires: Thu, 08 Aug 2024 17:42:59 GMT
cache-control: public, max-age=31536000
age: 575325
last-modified: Thu, 21 Apr 2022 17:15:19 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000