Overview

URLzoserv2fedex.com/
IP 91.195.240.12 (Germany)
ASN#47846 SEDO GmbH
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-05-26 05:44:28 UTC
StatusLoading report..
IDS alerts0
Blocklist alert3
urlquery alerts No alerts detected
Tags None

Domain Summary (5)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
zoserv2fedex.com (3) 0 2022-05-06 21:23:34 2022-05-06 21:23:34 1132 15552 91.195.240.12
img.sedoparking.com (2) 54200 2013-04-23 00:23:29 2023-05-25 09:54:40 737 98386 205.234.175.175
www.google.com (4) 7 2015-05-10 13:11:19 2023-05-25 11:45:23 3118 60364 142.250.74.132
ocsp.pki.goog (5) 175 2018-07-01 08:43:07 2023-05-25 18:12:02 1665 3498 142.250.74.131
afs.googleusercontent.com (2) 12123 2013-05-06 21:11:00 2023-05-25 05:09:02 967 2088 142.250.74.97

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2023-05-26 medium zoserv2fedex.com Sinkholed
2023-05-26 medium zoserv2fedex.com Sinkholed
2023-05-26 medium zoserv2fedex.com Sinkholed

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 91.195.240.12
Date UQ / IDS / BL URL IP
2023-06-04 23:23:17 UTC 0 - 0 - 2 foundifbrother.xyz/ 91.195.240.12
2023-06-04 22:15:56 UTC 0 - 0 - 2 degreenextas.xyz/ 91.195.240.12
2023-06-04 22:05:14 UTC 0 - 0 - 2 riverclaimstone.xyz/ 91.195.240.12
2023-06-04 20:54:51 UTC 0 - 4 - 0 publicdigits.work/ 91.195.240.12
2023-06-04 13:09:41 UTC 0 - 0 - 1 test.deebwebhackers.com/ 91.195.240.12


Last 5 reports on ASN: SEDO GmbH
Date UQ / IDS / BL URL IP
2023-06-06 03:10:17 UTC 0 - 5 - 0 afraid.net/drop_app/fa4493507bf41771f010cb7d6 (...) 64.190.63.111
2023-06-06 03:06:30 UTC 0 - 1 - 0 rich4ever.club/soft/BizBuilderClient/BizBuild (...) 64.190.63.111
2023-06-06 02:32:09 UTC 0 - 1 - 0 soporte.pro/soporte.exe 64.190.63.111
2023-06-06 01:46:45 UTC 0 - 1 - 0 syndrome-de-poland.org/wp-includes/katas.exe 64.190.63.111
2023-06-05 23:16:20 UTC 0 - 0 - 2 ww16.1hoockupgirl.fun/?sub1=20230606-0915-43b (...) 64.190.63.136


Last 1 reports on domain: zoserv2fedex.com
Date UQ / IDS / BL URL IP
2023-05-26 05:44:28 UTC 0 - 0 - 3 zoserv2fedex.com/ 91.195.240.12


Last 2 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-04-08 16:05:56 UTC 0 - 3 - 1 adztrack.cc/ 91.195.240.12
2023-05-28 17:38:08 UTC 0 - 0 - 1 famileai.com/php/upsoft/zov.txt 91.195.240.12

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (16)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: zoserv2fedex.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             91.195.240.12
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Fri, 26 May 2023 05:44:14 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.17
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_yVvw74Rl7RQpY2IBG1nC8iPPQB1CFMPV4g9bYw6ZDV5JErlYZcSutT2+kIz/cSOVRvclCL/rnq87ON3T5M6/2Q==
last-modified: Fri, 26 May 2023 05:44:14 GMT
x-cache-miss-from: parking-6bdbf848bb-z6z8f
server: NginX
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9763)
Size:   7004
Md5:    601eb9d80972c83afdc5a16523f46a93
Sha1:   5588204810579aadd5b415ade4c65e7654c1d5af
Sha256: 4c55928021f7d9f6de9a999e0f4b4b15785206092de8208416bbaf312964585c

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: zoserv2fedex.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             91.195.240.12
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Fri, 26 May 2023 05:44:14 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: PHP/8.1.17
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_yVvw74Rl7RQpY2IBG1nC8iPPQB1CFMPV4g9bYw6ZDV5JErlYZcSutT2+kIz/cSOVRvclCL/rnq87ON3T5M6/2Q==
last-modified: Fri, 26 May 2023 05:44:14 GMT
x-cache-miss-from: parking-6bdbf848bb-z6z8f
server: NginX
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9763)
Size:   7005
Md5:    9cc7e67c67aeb763aed02987152dbc10
Sha1:   6a67a0a344addadb379c6d909280c5c208b7ed42
Sha256: b438182726fc6e7f9589143bee262bd75f15bab9557dfbe35c56a762169ac974

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /templates/bg/arrows-1-colors-3.png HTTP/1.1 
Host: img.sedoparking.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://zoserv2fedex.com/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             205.234.175.175
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Fri, 26 May 2023 05:44:14 GMT
Content-Length: 82231
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Fri, 02 Jun 2023 05:44:14 GMT
X-CFHash: "b68c0210cadb1e12efc4557d7e49e48e"
X-CFF: B
Last-Modified: Wed, 22 Apr 2020 09:38:21 GMT
X-CF3: M
CF4Age: 0
x-cf-tsc: 1668185124
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: 0fe5822ebfa774b13b8b35211d6cebc1
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 3024 x 2000, 8-bit/color RGBA, non-interlaced\012- data
Size:   82231
Md5:    b68c0210cadb1e12efc4557d7e49e48e
Sha1:   ad24ed2b2d5d166d07fbf0680693c88fb56fcb4b
Sha256: e7ff091c85669b175de49d629d7d77bd20cd08d2c16ae74deef2ab06aec5854d
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://zoserv2fedex.com/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.132
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                            
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Fri, 26 May 2023 05:44:14 GMT
Expires: Fri, 26 May 2023 05:44:14 GMT
Cache-Control: private, max-age=3600
ETag: "10196298022660041196"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (2125)
Size:   53786
Md5:    8c4fc0cfb02e0e1c9782e3772d81ee60
Sha1:   fd012ff0ba7bce06e6a0accc771576c95e3e8b41
Sha256: 067f5cc03b60a3d16265327f015155c9e02ec9549edc39f97abb9099f94f6135
                                        
                                            GET /search/tsc.php?200=NTA0NTIzMDY0&21=OTEuOTAuNDIuMTU0&681=MTY4NTA3OTg1NDE5ZjBkMjYxNDk4NzZlZjM2NzgxZjY2NTQ1N2Y2ZjVi&crc=f6b587f66ce5bbd327e0022ca4104ffcc8c203da&cv=1 HTTP/1.1 
Host: zoserv2fedex.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://zoserv2fedex.com/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             91.195.240.12
HTTP/1.1 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Fri, 26 May 2023 05:44:14 GMT
content-length: 0
x-powered-by: PHP/8.1.17
x-cache-miss-from: parking-6bdbf848bb-lk52f
server: NginX


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /templates/logos/sedo_logo.png HTTP/1.1 
Host: img.sedoparking.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://zoserv2fedex.com/
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             205.234.175.175
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Fri, 26 May 2023 05:44:14 GMT
Content-Length: 15086
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Fri, 02 Jun 2023 05:44:14 GMT
X-CFHash: "def00c11b1596db4efee6a9fbe64fc27"
X-CFF: B
Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT
X-CF3: H
CF4Age: 10
x-cf-tsc: 1665141939
CF4ttl: 31536000.000
X-CF2: M
Server: CFS 0215
X-CF-ReqID: fc1ad4d85f00d0abc76b36c050ea4462
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   15086
Md5:    def00c11b1596db4efee6a9fbe64fc27
Sha1:   bd298981e6d8d7e4ffa18abcf687041f4246672d
Sha256: 95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 05:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /afs/ads?adsafe=low&adtest=off&psid=6267031743&channel=exp-0051%2Cauxa-control-1%2C8810114&client=dp-sedo85_3ph&r=m&hl=no&rpbu=http%3A%2F%2Fzoserv2fedex.com%2Fcaf%2F%3Fses%3DY3JlPTE2ODUwNzk4NTQmdGNpZD16b3NlcnYyZmVkZXguY29tNjQ3MDQ3MmU3NTk0MjQuNTMzNDAwNjQmdGFzaz1zZWFyY2gmZG9tYWluPXpvc2VydjJmZWRleC5jb20mYV9pZD0zJnNlc3Npb249Zk1CRlBuNWRYb1FsWFZRRVJ6dWY%3D&type=3&uiopt=false&swp=as-drid-2383353299994854&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301075%2C17301078&format=r6&nocache=8691685079854477&num=0&output=afd_ads&domain_name=zoserv2fedex.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1685079854479&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1043&frm=0&cl=534159633&uio=-&cont=rb-default&jsid=caf&jsv=534159633&rurl=http%3A%2F%2Fzoserv2fedex.com%2F&adbw=master-1%3A346 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://zoserv2fedex.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.132
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
content-disposition: inline
date: Fri, 26 May 2023 05:44:14 GMT
expires: Fri, 26 May 2023 05:44:14 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-lnC6uyVRDPuhfYZ9uDUtig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2651
x-xss-protection: 0
set-cookie: CONSENT=PENDING+852; expires=Sun, 25-May-2025 05:44:14 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6496)
Size:   2651
Md5:    c679d0f2098deb3f9706a049cfeb5048
Sha1:   aef221861e4209f9cb2cedf5225a23ec4a2431e1
Sha256: 2d8a4981da6781126e2383900beb84dc62e877d1a081bac7e110bd915f053369
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 05:44:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 05:44:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                            
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 272
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 10:59:24 GMT
expires: Fri, 26 May 2023 09:59:24 GMT
cache-control: public, max-age=82800
age: 67491
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size:   272
Md5:    a6ad6e65373db8c1b1f154c4c83f8ce5
Sha1:   84cc007d6d682c589e1e1f87482a5278830f3000
Sha256: 920a378947204498c122722933b3a4b67788a2b6fade8bd0d47cf830eeee0563
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 05:44:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                            
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 15:17:08 GMT
expires: Fri, 26 May 2023 14:17:08 GMT
cache-control: public, max-age=82800
age: 52027
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   174
Md5:    11b3089d616633ca6b73b57aa877eeb4
Sha1:   07632f63e06b30d9b63c97177d3a8122629bda9b
Sha256: 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 05:44:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=yk6n0tidy5zo&aqid=LkdwZLC0NIGKiM0Pquqz2Ao&psid=6267031743&pbt=bs&adbx=467.20001220703125&adby=186.89999389648438&adbh=985&adbw=346&adbah=153%2C153%2C153%2C153%2C201%2C153&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=534159633&csala=6%7C0%7C323%7C163%7C213&lle=0&ifv=1&usr=1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://zoserv2fedex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
                                            
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-8rF_iu5gVSc9K5tKrI7YsQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 26 May 2023 05:44:16 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=CRR4L-pO1jZbvn64QDdPO1egTYatHiKOejA3_-024sKqtXNesqS1GdQqmuXLer4KSJBEC4JHb3Xwq3weeZRtsP0Q5ucKKgRZEVAMrEZMVGoAaC5sqloDyhfcGukH8iUdEVDxJvzo_cGmBPZyY-ZV9mUqyCLLj5FTaMjzjNWT6-I; expires=Sat, 25-Nov-2023 05:44:16 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+748; expires=Sun, 25-May-2025 05:44:16 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

                                        
                                            GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=8plop3pxi5jp&aqid=LkdwZLC0NIGKiM0Pquqz2Ao&psid=6267031743&pbt=bv&adbx=467.20001220703125&adby=186.89999389648438&adbh=985&adbw=346&adbah=153%2C153%2C153%2C153%2C201%2C153&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=534159633&csala=6%7C0%7C323%7C163%7C213&lle=0&ifv=1&usr=1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://zoserv2fedex.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
                                            
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-mcoo3RuSIzorBPNUX2aD4w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 26 May 2023 05:44:17 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=Pog1vmxTMA3SVp6bRyyy8eVRbffq5_l03oZlnW9P2Oxn3Tjf0g-RWBM0ttrCNYCQIwZBc1gHL9aS0qktvz7uf_YrXYymdeh01VbcZck0-Of7vkK6vRT_X5w58pL_vZWxaZQnnOGp7HBqStweCi9mbPHnjYx403qtqQbogma_tPo; expires=Sat, 25-Nov-2023 05:44:17 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+334; expires=Sun, 25-May-2025 05:44:17 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000