Overview

URLwww.altcryptofxtrade.com/
IP 91.195.240.12 (Germany)
ASN#47846 SEDO GmbH
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-05-26 12:58:43 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (6)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
ocsp.pki.goog (5) 175 2018-07-01 08:43:07 2023-05-26 05:09:27 1665 3498 142.250.74.131
ocsp.globalsign.com (1) 2075 2012-07-20 19:46:16 2023-05-26 05:13:09 349 1906 104.18.20.226
img.sedoparking.com (2) 54200 2013-04-23 00:23:29 2023-05-26 05:18:03 929 98374 205.234.175.175
www.altcryptofxtrade.com (2) 0 2023-02-17 14:54:39 2023-02-17 14:54:39 1058 22802 91.195.240.12
www.google.com (5) 7 2015-05-10 13:11:19 2023-05-26 09:14:50 3673 303086 142.250.74.132
afs.googleusercontent.com (2) 12123 2013-05-06 21:11:00 2023-05-26 05:09:12 967 2088 142.250.74.97

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-05-26 medium www.altcryptofxtrade.com/ Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 91.195.240.12
Date UQ / IDS / BL URL IP
2023-06-04 08:28:52 UTC 0 - 0 - 2 groupclockworld.xyz/ 91.195.240.12
2023-06-03 22:31:24 UTC 0 - 0 - 1 mouthhundredkeep.xyz/ 91.195.240.12
2023-06-02 23:46:52 UTC 0 - 4 - 4 mailupdate.info/ 91.195.240.12
2023-06-02 20:04:56 UTC 0 - 0 - 2 feedmiledeep.xyz/ 91.195.240.12
2023-06-02 18:05:26 UTC 0 - 2 - 0 loansbysemper.com/index.php/jpZwiestofiuwiedo (...) 91.195.240.12


Last 5 reports on ASN: SEDO GmbH
Date UQ / IDS / BL URL IP
2023-06-04 08:28:52 UTC 0 - 0 - 2 groupclockworld.xyz/ 91.195.240.12
2023-06-04 07:33:34 UTC 0 - 0 - 2 64.190.63.111/ 64.190.63.111
2023-06-04 07:21:53 UTC 0 - 3 - 0 boris.world/ 91.195.241.232
2023-06-04 06:14:33 UTC 0 - 0 - 1 amt-dhb.de/lkd33/auth.php?email=contact@emmo- (...) 64.190.63.111
2023-06-04 06:14:32 UTC 0 - 0 - 1 amt-dhb.de/lkd33/auth.php?email=contact@emmo- (...) 64.190.63.111


Last 1 reports on domain: altcryptofxtrade.com
Date UQ / IDS / BL URL IP
2023-05-26 12:58:43 UTC 0 - 0 - 1 www.altcryptofxtrade.com/ 91.195.240.12


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-06-04 08:28:52 UTC 0 - 0 - 2 groupclockworld.xyz/ 91.195.240.12
2023-05-29 13:47:43 UTC 0 - 0 - 3 amazon.co.jp.htmauthorderidexccead857ef6ac4b9.com/ 91.195.240.12
2023-05-27 11:27:31 UTC 0 - 0 - 1 imobille902li17545-co116239.xyz/ 91.195.240.12
2023-05-21 14:47:46 UTC 0 - 1 - 1 shipyourdesert.xyz/ 91.195.240.12
2023-05-19 17:57:50 UTC 0 - 0 - 2 hvhtmftehs.quest/ 91.195.240.12

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (17)


Request Response
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 12:58:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 12:58:27 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Tue, 30 May 2023 09:19:45 GMT
ETag: "e7fc8d820820db78fff216940e4b3d42b5ab81fe"
Last-Modified: Fri, 26 May 2023 09:19:46 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1690
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7cd630913a7eb50f-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    b64239595df194bd9411ac75d06e41be
Sha1:   e7fc8d820820db78fff216940e4b3d42b5ab81fe
Sha256: cd545b13549851c3c61383752f1e19dd35e8f2248bd5b0b7886f40f1d94ebe19
                                        
                                            GET /templates/bg/arrows-1-colors-3.png HTTP/1.1 
Host: img.sedoparking.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.altcryptofxtrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             205.234.175.175
HTTP/2 200 OK
content-type: image/png
                                            
date: Fri, 26 May 2023 12:58:27 GMT
content-length: 82231
access-control-allow-origin: *
cache-control: max-age=604800
expires: Fri, 02 Jun 2023 12:58:27 GMT
x-cfhash: "b68c0210cadb1e12efc4557d7e49e48e"
x-cff: B
last-modified: Wed, 22 Apr 2020 09:38:21 GMT
x-cf3: M
cf4age: 0
x-cf-tsc: 1668185124
cf4ttl: 31536000.000
x-cf2: H
server: CFS 0215
x-cf-reqid: 8a77ede7e1252c250f7a6dad55a7133f
x-cf1: 11696:fA.arn1:cf:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 3024 x 2000, 8-bit/color RGBA, non-interlaced\012- data
Size:   82231
Md5:    b68c0210cadb1e12efc4557d7e49e48e
Sha1:   ad24ed2b2d5d166d07fbf0680693c88fb56fcb4b
Sha256: e7ff091c85669b175de49d629d7d77bd20cd08d2c16ae74deef2ab06aec5854d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 12:58:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /search/tsc.php?200=MA==&21=OTEuOTAuNDIuMTU0&681=MTY4NTEwNTkwNmVmN2EyYjIwN2Q4NTczOTdmZjY3M2QyZDE0MjgyYjVh&crc=6b7e35afc73a9565ba8649d84221b6962aa5eba6&cv=1 HTTP/1.1 
Host: www.altcryptofxtrade.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.altcryptofxtrade.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             91.195.240.12
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Fri, 26 May 2023 12:58:27 GMT
server: NginX
x-cache-miss-from: parking-6bdbf848bb-z6z8f
x-powered-by: PHP/8.1.17
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /templates/logos/sedo_logo.png HTTP/1.1 
Host: img.sedoparking.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.altcryptofxtrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             205.234.175.175
HTTP/2 200 OK
content-type: image/png
                                            
date: Fri, 26 May 2023 12:58:27 GMT
content-length: 15086
access-control-allow-origin: *
cache-control: max-age=604800
expires: Fri, 02 Jun 2023 12:58:27 GMT
x-cfhash: "def00c11b1596db4efee6a9fbe64fc27"
x-cff: B
last-modified: Mon, 11 Jan 2021 07:44:34 GMT
x-cf3: H
cf4age: 10
x-cf-tsc: 1665141939
cf4ttl: 31536000.000
x-cf2: M
server: CFS 0215
x-cf-reqid: 15fbb01be1a086a7fc679fa15e6e2974
x-cf1: 11696:fA.arn1:cf:cacheN.arn1-01:H
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   15086
Md5:    def00c11b1596db4efee6a9fbe64fc27
Sha1:   bd298981e6d8d7e4ffa18abcf687041f4246672d
Sha256: 95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4
                                        
                                            GET /afs/ads?adsafe=low&adtest=off&psid=6267031743&channel=exp-0051%2Cauxa-control-1%2C8810114&client=dp-sedo85_3ph&r=m&hl=no&rpbu=https%3A%2F%2Fwww.altcryptofxtrade.com%2Fcaf%2F%3Fses%3DY3JlPTE2ODUxMDU5MDYmdGNpZD13d3cuYWx0Y3J5cHRvZnh0cmFkZS5jb202NDcwYWNmMmQ1YTVhMi4zMTY0OTc2NiZ0YXNrPXNlYXJjaCZkb21haW49YWx0Y3J5cHRvZnh0cmFkZS5jb20mYV9pZD0zJnNlc3Npb249bDU0RF83WHhpU2V1TmVRVTMzUEc%3D&type=3&uiopt=false&swp=as-drid-2383353299994854&oe=UTF-8&ie=UTF-8&fexp=21404&format=r6&nocache=1261685105907228&num=0&output=afd_ads&domain_name=www.altcryptofxtrade.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1685105907229&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=1043&frm=0&cl=534159633&uio=-&cont=rb-default&jsid=caf&jsv=534159633&rurl=https%3A%2F%2Fwww.altcryptofxtrade.com%2F&adbw=master-1%3A346 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.altcryptofxtrade.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 200 OK
content-type: text/html; charset=UTF-8
                                            
content-disposition: inline
date: Fri, 26 May 2023 12:58:27 GMT
expires: Fri, 26 May 2023 12:58:27 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-DqtgOhuK65KZBBKbROjr6A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2624
x-xss-protection: 0
set-cookie: CONSENT=PENDING+129; expires=Sun, 25-May-2025 12:58:27 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6488)
Size:   2624
Md5:    e81ff5a385bad8e52203ffe36b64c00d
Sha1:   acc5af594f5b315178d325017193884ad21edab3
Sha256: 3dfe27c66357bdcddebccd0ae99190460dcef6e1aa2cb5f20dba101dbbccdf98
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 12:58:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                            
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 15:17:08 GMT
expires: Fri, 26 May 2023 14:17:08 GMT
cache-control: public, max-age=82800
age: 78080
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   174
Md5:    11b3089d616633ca6b73b57aa877eeb4
Sha1:   07632f63e06b30d9b63c97177d3a8122629bda9b
Sha256: 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 12:58:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                            
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 272
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Fri, 26 May 2023 09:59:39 GMT
expires: Sat, 27 May 2023 08:59:39 GMT
cache-control: public, max-age=82800
age: 10729
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size:   272
Md5:    a6ad6e65373db8c1b1f154c4c83f8ce5
Sha1:   84cc007d6d682c589e1e1f87482a5278830f3000
Sha256: 920a378947204498c122722933b3a4b67788a2b6fade8bd0d47cf830eeee0563
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 26 May 2023 12:58:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=v9cgw11gwnw8&aqid=86xwZLGyJfWBiM0Pl42P4A0&psid=6267031743&pbt=bs&adbx=467.20001220703125&adby=186.89999389648438&adbh=985&adbw=346&adbah=153%2C201%2C153%2C153%2C153%2C153&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=534159633&csala=6%7C0%7C399%7C50%7C319&lle=0&ifv=1&usr=1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.altcryptofxtrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
                                            
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-IH6L9vX2Xl90m-kPvuZwtw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 26 May 2023 12:58:29 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=fPoD49_fex-O0OlckxDEYjfdVMo6BKqdat4D_zTkIdqd3yqux-uxUBdUXefLiGOYXMnfzg0RO4aeg0hZNFRDXZClEb1sRRqI4F_NuwyTS7RbwMcOMuvyDOddSNbGelvS-DZ61GVLKsZy1_QWvk7ARFfhO1QGB3mk2McUJLML4z4; expires=Sat, 25-Nov-2023 12:58:29 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+084; expires=Sun, 25-May-2025 12:58:29 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

                                        
                                            GET /afs/gen_204?client=dp-sedo85_3ph&output=uds_ads_only&zx=cb5xafdllaz7&aqid=86xwZLGyJfWBiM0Pl42P4A0&psid=6267031743&pbt=bv&adbx=467.20001220703125&adby=186.89999389648438&adbh=985&adbw=346&adbah=153%2C201%2C153%2C153%2C153%2C153&adbn=master-1&eawp=partner-dp-sedo85_3ph&errv=534159633&csala=6%7C0%7C399%7C50%7C319&lle=0&ifv=1&usr=1 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.altcryptofxtrade.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             142.250.74.132
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
                                            
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-y3REx1Z98-XjG6vwTbNAFA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 26 May 2023 12:58:30 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=GewK1FUbhzKpCuuN4hGuDhxXBB14TP-ygTi_fyC5OB2J44BaFAulZK5vGJgALu7Rgg4lZTgriJy8m4CNoZBA0lar7ENgd2ypW1GAwcZh8HJ0kI1ojaVoxE9VMOVY7IhvA_VMK1iZqQWDlnZkVwU8lJ-zotreloi4tWTS550qtlc; expires=Sat, 25-Nov-2023 12:58:30 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none CONSENT=PENDING+806; expires=Sun, 25-May-2025 12:58:30 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.altcryptofxtrade.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             142.250.74.132
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 26 May 2023 12:58:27 GMT
expires: Fri, 26 May 2023 12:58:27 GMT
cache-control: private, max-age=3600
etag: "1191932228224773569"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  ASCII text, with very long lines (2125)
Size:   147880
Md5:    8d684f66adf17aa00306695249b7be57
Sha1:   e7741f02232c5862c6ed469116adc3c235b81e95
Sha256: cdbd80fb34dd7609fce16a6b9398be8c1926687eab7aa32e07953e83f12ae276
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             142.250.74.132
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 26 May 2023 12:58:27 GMT
expires: Fri, 26 May 2023 12:58:27 GMT
cache-control: private, max-age=3600
etag: "6531127710068983609"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000



--- Additional Info ---
Magic:  ASCII text, with very long lines (2125)
Size:   147861
Md5:    c6e17017fa9e499fd41345c8f24f0625
Sha1:   8e0c7704d24426e5f058d14336961665b6d7789a
Sha256: 96e9c283ce074cd307113de7ce9d7cf59dc8f509878bded8dd9e7c2ff13fb7e8
                                        
                                            GET / HTTP/1.1 
Host: www.altcryptofxtrade.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache


                                        
                                             91.195.240.12
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-encoding: gzip
date: Fri, 26 May 2023 12:58:26 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Fri, 26 May 2023 12:58:26 GMT
pragma: no-cache
server: NginX
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_Dmz4Y0j128BGHps5RoRmyIXhkSbetzoCxFVllLK/jWw0p2Ye9wVmlukJhUA2TCSZ2rBo/CTFvIuxzFNvdOhpKg==
x-cache-miss-from: parking-6bdbf848bb-t4fj2
x-powered-by: PHP/8.1.17
X-Firefox-Spdy: h2



--- Additional Info ---
Magic:  
Size:   21921
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Phishing