| aralaplayita.zahara.es/ |  82.223.69.105 | 301 Moved Permanently | 162 B |
IP82.223.69.105:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 04 Dec 2022 15:28:32 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://aralaplayita.zahara.es/
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashcfec3d7283a9b66d2be426ce54d210f3 808c1feb1ba918951d1928c1f6bfc0c253262774 1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8410
Expires: Sun, 04 Dec 2022 17:48:43 GMT
Date: Sun, 04 Dec 2022 15:28:33 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfb2c0697c6d9a96a5411dd2952947458 79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4 3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2792
Cache-Control: max-age=157756
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:33 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 11:17:49 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash1ea206ac3c440825741687351f8c6e4e 2f38dafd8c43dcce2411a0590bc5c02cd6286735 7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15917
Expires: Sun, 04 Dec 2022 19:53:50 GMT
Date: Sun, 04 Dec 2022 15:28:33 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 15:18:24 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 609
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZAY5tl3OXiKdhdCSzU6VfXMfbyD5DKIUt2zd1OWt7tmoIQPidFJPOf9GlYMEnhLslFuWLVydXUaW4SlFVFvMGQ==
x-amz-request-id: XR53846W1CWHM1CC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 14:47:01 GMT
age: 2492
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash644aaa94ec04bb057004c8f5099c0f09 d2c4f3d975eadc1b75b14b8b4a619018e4f86107 0df476b3bc1db6abd8884ce72a1fc9f72ef1c6fdc4568bc23b619cced6acd6ab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0DF476B3BC1DB6ABD8884CE72A1FC9F72EF1C6FDC4568BC23B619CCED6ACD6AB"
Last-Modified: Fri, 02 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21548
Expires: Sun, 04 Dec 2022 21:27:41 GMT
Date: Sun, 04 Dec 2022 15:28:33 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 15:11:19 GMT
cache-control: public,max-age=3600
age: 1034
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash31b129c94a90b1e695b21395cb54e378 a3cae46b48d469cc61ab0581303bcd5f5b654db9 fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2785
Cache-Control: max-age=152683
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:33 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 09:53:16 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 35.163.38.240 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.163.38.240:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nvCR3mfJOdTYXVawasuJiQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6rQJA+vp3cU+ENdlZlaHhribmNY=
|
|
| aralaplayita.zahara.es/templates/yootheme/css/custom.css?3.0.14 | 82.223.69.105 | 200 OK | 0 B |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/css/custom.css?3.0.14 IP82.223.69.105:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /templates/yootheme/css/custom.css?3.0.14 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: text/css
content-length: 0
x-content-type-options: nosniff
x-accel-version: 0.01
last-modified: Wed, 15 Jun 2022 08:37:09 GMT
etag: "0-5e1786d4c01b6"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/leaflet@1.9.2/dist/leaflet.js?3.0.14 | 151.101.1.229 | 200 OK | 42 kB |
URL HTTP/2cdn.jsdelivr.net/npm/leaflet@1.9.2/dist/leaflet.js?3.0.14 IP151.101.1.229:0
File typeASCII text, with very long lines (65383) Hash4c7e6f02620ad07052ea145dd30b7f34 06fe7769a4340513c63799d2f6088ee671f01a7b 05b1a0a8430e575b3324392d31d9c126b2afa1b18994bea7d468eee02359c060
GET /npm/leaflet@1.9.2/dist/leaflet.js?3.0.14 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.9.2
x-jsd-version-type: version
etag: W/"23b8b-aYrI9WfiRJYLoiYWwwYO0dyu488"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 15:28:34 GMT
age: 3393219
x-served-by: cache-fra-eddf8230086-FRA, cache-bma1661-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 42233
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 |  104.18.21.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 IP104.18.21.226:0
Hashbcf96d15d60361ac3335285483cb25d4 a142b94d96a6129defe120bb28f2b0eb9849e6af 61a5212a2c7bf313ee923347a74d88aba1b007ae5cbac223ac9d4246e53e14c2
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 15:28:34 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "250C0B47A1ED71763659F1F89AC08E589AA94BB0"
Expires: Mon, 05 Dec 2022 02:00:00 GMT
Last-Modified: Sun, 04 Dec 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1947
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77459297f9d6b4ee-OSL
|
|
| aralaplayita.zahara.es/templates/yootheme/cache/18/logotipo_color1-18619e88.webp | 82.223.69.105 | 200 OK | 2.6 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/cache/18/logotipo_color1-18619e88.webp IP82.223.69.105:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash0d03089b248398432e1d8c9df061d498 564622d80e409662849e82c18d14a712327d686a 45d688e35a30a620bd4d6a1852c3047a90e558d334f26e816d99390daf8cfbd1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/cache/18/logotipo_color1-18619e88.webp HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: image/webp
content-length: 2598
last-modified: Wed, 16 Nov 2022 17:30:28 GMT
etag: "63751e34-a26"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/cache/5a/logotipo_color1-5ad949b8.webp | 82.223.69.105 | 200 OK | 3.6 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/cache/5a/logotipo_color1-5ad949b8.webp IP82.223.69.105:0
File typeRIFF (little-endian) data, Web/P image\012- data Hashcc5ea2e8de84eb72548db026feb2ab7d dec72e2e8eeb0f0bbbed0b7aa1938987f89a45ed c060091839e10c6933e6cfcc0b7c573a8812b45eb560cccde737b0f14d828f7c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/cache/5a/logotipo_color1-5ad949b8.webp HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: image/webp
content-length: 3598
last-modified: Wed, 16 Nov 2022 17:30:29 GMT
etag: "63751e35-e0e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/css/theme.9.css?1669805809 | 82.223.69.105 | 200 OK | 49 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/css/theme.9.css?1669805809 IP82.223.69.105:0
File typeASCII text, with very long lines (63884) Hash2f5698797f3e98f586f7106cfe4730ba ab197cdf4e5029df92e9fbb482e178a689f0e67f d9a1f098fea8cf0be7b2f6ed9c0f1d4164493ce16f29b97221b8e46c9ef7b31d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/css/theme.9.css?1669805809 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: text/css
last-modified: Tue, 06 Sep 2022 10:35:40 GMT
etag: W/"6317227c-66a99"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/vendor/assets/uikit-themes/master-fjord/images/tiles-background-image-noise.png | 82.223.69.105 | 200 OK | 926 B |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/vendor/assets/uikit-themes/master-fjord/images/tiles-background-image-noise.png IP82.223.69.105:0
File typePNG image data, 50 x 50, 4-bit colormap, non-interlaced\012- data Hash9afc6e5183f07e954b91661ca457486d 68f75b805cbc82c835366036d54c368244a3f4da c318ad726cf854e4e1c8b2b54328568c92271e6657fdad8fee86651e050ffce8
GET /templates/yootheme/vendor/assets/uikit-themes/master-fjord/images/tiles-background-image-noise.png HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/templates/yootheme/css/theme.9.css?1669805809
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: image/png
content-length: 926
x-content-type-options: nosniff
x-accel-version: 0.01
last-modified: Wed, 30 Nov 2022 10:56:45 GMT
etag: "39e-5eeadf5e16153"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/vendor/assets/uikit-themes/master-fjord/images/section-background-image-stripes.png | 82.223.69.105 | 200 OK | 72 B |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/vendor/assets/uikit-themes/master-fjord/images/section-background-image-stripes.png IP82.223.69.105:0
File typePNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced\012- data Hashdd5a9e64ec87c9db167d1e689752d029 c0d27766b33e6696da138cec290c44573da24324 bb1130cf2fdebe1989bc3f146c030ebbdc998fe502a6c6c5c1a57c0b133c96c5
GET /templates/yootheme/vendor/assets/uikit-themes/master-fjord/images/section-background-image-stripes.png HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/templates/yootheme/css/theme.9.css?1669805809
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: image/png
content-length: 72
x-content-type-options: nosniff
x-accel-version: 0.01
last-modified: Wed, 30 Nov 2022 10:56:45 GMT
etag: "48-5eeadf5e1365b"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/fonts/font-356ff5c1.woff2 | 82.223.69.105 | 200 OK | 21 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/fonts/font-356ff5c1.woff2 IP82.223.69.105:0
File typeWeb Open Font Format (Version 2), TrueType, length 20584, version 1.0\012- data Hashb7308b1e85c5213c9bee19efe3be9813 f4e534653a58693c144d571004f707778f53c6dd 789a571212627c10c632c3d95f8bd02ee0efee27ca3a7e0212de6ef8dca489e7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/fonts/font-356ff5c1.woff2 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/templates/yootheme/css/theme.9.css?1669805809
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: font/woff2
content-length: 20584
last-modified: Wed, 26 May 2021 12:07:20 GMT
etag: "60ae39f8-5068"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/fonts/font-464e5572.woff2 | 82.223.69.105 | 200 OK | 21 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/fonts/font-464e5572.woff2 IP82.223.69.105:0
File typeWeb Open Font Format (Version 2), TrueType, length 21352, version 1.0\012- data Hash01a273e07cf0950b760ee6cd9540a72f 270bb462018cc354ee6ff44d8e1b8b8fcb0e8641 0d3b3a3f34ffd3526eea2f77aebe34caa8e86c59002dfd89aa834b0986feeaa2
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/fonts/font-464e5572.woff2 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/templates/yootheme/css/theme.9.css?1669805809
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: font/woff2
content-length: 21352
last-modified: Wed, 26 May 2021 12:07:22 GMT
etag: "60ae39fa-5368"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/fonts/font-fef4a041.woff2 | 82.223.69.105 | 200 OK | 21 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/fonts/font-fef4a041.woff2 IP82.223.69.105:0
File typeWeb Open Font Format (Version 2), TrueType, length 21028, version 1.0\012- data Hash131f660715196288a68bd84296ada895 b7509bd4352f0b015c8b7d7f27157ffbab0cc3a1 1d94fd1a3793df0abe10fb36e59825864e1ec9623496e1e04c9cca624be01394
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/fonts/font-fef4a041.woff2 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/templates/yootheme/css/theme.9.css?1669805809
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: font/woff2
content-length: 21028
last-modified: Wed, 26 May 2021 12:07:20 GMT
etag: "60ae39f8-5224"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/fonts/font-3b413dfb.woff2 | 82.223.69.105 | 200 OK | 21 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/fonts/font-3b413dfb.woff2 IP82.223.69.105:0
File typeWeb Open Font Format (Version 2), TrueType, length 21112, version 1.0\012- data Hash3738d553a5f0fdfe93576873606bf445 0bd410505c72993a87af33b1efd52632b6392b83 154d56d05ab874b6c12547fbe628da2fad11d7a29e2a9d92f5726411fe062d1b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/fonts/font-3b413dfb.woff2 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/templates/yootheme/css/theme.9.css?1669805809
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: font/woff2
content-length: 21112
last-modified: Wed, 26 May 2021 12:07:20 GMT
etag: "60ae39f8-5278"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashf54a71942ab5d7fdc54672cf84aa76db e03db706ad371c93ddd3cc4a3e4c329777bb5f4b 87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.youtube.com/s/player/dab28f34/www-player.css | 142.250.74.174 | 200 OK | 50 kB |
URL HTTP/2www.youtube.com/s/player/dab28f34/www-player.css IP142.250.74.174:0
File typeASCII text, with very long lines (65536), with no line terminators Hash9abf9c15a58d40e7ecc2302b4bfb153e 5195babba42ed31eb39751e8c917277ace5e19a4 1eca62432d16bb94000cf099705eee38903254825032b27ddf3d5decbe3d3114
GET /s/player/dab28f34/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/UX6I2iMyP_M?loop=1&autoplay=1&mute=1&playlist=UX6I2iMyP_M&t=3s%20frameborder=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49849
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:01:14 GMT
expires: Fri, 01 Dec 2023 16:01:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 01:20:18 GMT
content-type: text/css
age: 257240
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/dab28f34/www-embed-player.vflset/www-embed-player.js | 142.250.74.174 | 200 OK | 99 kB |
URL HTTP/2www.youtube.com/s/player/dab28f34/www-embed-player.vflset/www-embed-player.js IP142.250.74.174:0
File typeASCII text, with very long lines (679) Hasha9a95fc3a85fc2904a0cffd12ff9b01c b3db5cd9996da5ffa51fe22a57898a79abfe32df 2ef638f9e81beb63874104df180f7d1de54c01d6e22857f39e16c1581a3f3f7e
GET /s/player/dab28f34/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/UX6I2iMyP_M?loop=1&autoplay=1&mute=1&playlist=UX6I2iMyP_M&t=3s%20frameborder=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 99243
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:01:14 GMT
expires: Fri, 01 Dec 2023 16:01:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 01:20:18 GMT
content-type: text/javascript
age: 257240
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/dab28f34/fetch-polyfill.vflset/fetch-polyfill.js | 142.250.74.174 | 200 OK | 2.8 kB |
URL HTTP/2www.youtube.com/s/player/dab28f34/fetch-polyfill.vflset/fetch-polyfill.js IP142.250.74.174:0
File typeAlgol 68 source text\012- Pascal source, ASCII text, with very long lines (555) Hash80fe2d229007996c8397073b00755dc7 121f82c77bcf2a297a1085e3b092415c463fcafe 033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/dab28f34/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/UX6I2iMyP_M?loop=1&autoplay=1&mute=1&playlist=UX6I2iMyP_M&t=3s%20frameborder=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:01:14 GMT
expires: Fri, 01 Dec 2023 16:01:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 01:20:18 GMT
content-type: text/javascript
age: 257240
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashda9700d928847bca71f73dc9ca89bd1c 2f156a1557a7504da776ed9a82dc52563662be6f 428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data Hash285467176f7fe6bb6a9c6873b3dad2cc ea04e4ff5142ddd69307c183def721a160e0a64e 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:40:43 GMT
expires: Fri, 01 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 254872
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashda9700d928847bca71f73dc9ca89bd1c 2f156a1557a7504da776ed9a82dc52563662be6f 428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:48:03 GMT
expires: Fri, 01 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 236432
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/cache/94/Reserva-944fae86.webp | 82.223.69.105 | 200 OK | 39 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/cache/94/Reserva-944fae86.webp IP82.223.69.105:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1366x1366, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashbf11ddb7f5ea2dbca26738aa50163352 38e360dc7b19df559fb1533fbe4bc4a37fa1d850 d2d25904e9161af197d274c8e6d9d346f32708a15b7fefe3694d308467166684
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/cache/94/Reserva-944fae86.webp HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: image/webp
content-length: 39156
last-modified: Thu, 17 Nov 2022 18:41:45 GMT
etag: "63768069-98f4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/vendor/yootheme/builder/elements/map/app/map.min.js?3.0.14 | 82.223.69.105 | 200 OK | 417 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/vendor/yootheme/builder/elements/map/app/map.min.js?3.0.14 IP82.223.69.105:0
File typeASCII text, with very long lines (12396) Size417 kB (417082 bytes) Hash0a56fbaf5a3c1371b9c1149fd8ea46a9 0d42a200eb194a394125a1fdfece4175639ab0ed 6305d513fe72031fb5dfd600fb5b4b836c1a3da20c0df1c7c254def3b09abc9a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/vendor/yootheme/builder/elements/map/app/map.min.js?3.0.14 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: application/javascript
last-modified: Wed, 30 Nov 2022 10:56:42 GMT
etag: W/"638736ea-30a0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3374
Expires: Sun, 04 Dec 2022 16:24:49 GMT
Date: Sun, 04 Dec 2022 15:28:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3374
Expires: Sun, 04 Dec 2022 16:24:49 GMT
Date: Sun, 04 Dec 2022 15:28:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3374
Expires: Sun, 04 Dec 2022 16:24:49 GMT
Date: Sun, 04 Dec 2022 15:28:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3374
Expires: Sun, 04 Dec 2022 16:24:49 GMT
Date: Sun, 04 Dec 2022 15:28:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash83e0936435ad95a15c9ec5ff9520f4fe a8225ee0d8ae117f977f7ff817c342c62e91b5a9 ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3374
Expires: Sun, 04 Dec 2022 16:24:49 GMT
Date: Sun, 04 Dec 2022 15:28:35 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2636f91bb8fa4d9bb7bef114c248a9ae 8637105f41058bc0d2b259d462b560881928adb6 3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10431
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsCGEwxIAMF34g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:47:06 GMT
age: 63689
etag: "8637105f41058bc0d2b259d462b560881928adb6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash43309032a892c486f9985ef520df696e 36f4682ca6a33ff80ee02129c77e6f27e996ede0 24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:49:42 GMT
age: 63533
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg | 34.120.237.76 | 200 OK | 9.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha6e7b32ac999cf3c899a234c621fa91a fc5d4f3163ebb9faf85968cbb1d194e8e68418be f12db3aed126006fee00649aba0b3eaae900de200b85b9523866a90b5494f18e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8989
x-amzn-requestid: abce0b01-f70c-42ad-b242-5a24735fe4c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltl4Gk2oAMFSWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc2f2-1cccffff5199dffe70264a95;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:43:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PFl7VUrzRkMFNnTiIw_cbGCyrEFn43eUSlZfT0nUhUmjjyXT7JfjMA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:50:01 GMT
age: 63514
etag: "fc5d4f3163ebb9faf85968cbb1d194e8e68418be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg | 34.120.237.76 | 200 OK | 4.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc01fe1cccdb3b672bbade6d98217ffe9 a9a529dc9894827f6243a1bf57f81caa4fe88fc2 c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 63874
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashdb1701b7b9d161a0c935bb6e10b17893 22a8c4bd58c729c1abcf794466e8f3231dfb034b b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:42:39 GMT
age: 63956
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash14dcca2a9c4792d835ee709bcd947402 1d702df3a64258628f4124eafd580695f2d350af da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 34395
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2dabd839729e9b0fb2558253d850126b 64f617aa0afb52168ef3519a4cf9829ac61ee007 1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash68570b7de13c7dfdf686da25ce10d668 61c1304152f11e6a83c383fff8d5e498c4385e6f 537302c07522f4bf1e766fbb1a8da346f59526715a5fcecd3f6aa4817b6b32ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| static.doubleclick.net/instream/ad_status.js | 142.250.74.134 | 200 OK | 29 B |
URL HTTP/2static.doubleclick.net/instream/ad_status.js IP142.250.74.134:0
Hash1fa71744db23d0f8df9cce6719defcb7 e4be9b7136697942a036f97cf26ebaf703ad2067 eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Dec 2022 15:21:04 GMT
expires: Sun, 04 Dec 2022 15:36:04 GMT
cache-control: public, max-age=900
age: 451
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| googleads.g.doubleclick.net/pagead/id | 142.250.74.34 | 302 Found | 0 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/id IP142.250.74.34:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sun, 04 Dec 2022 15:28:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash68570b7de13c7dfdf686da25ce10d668 61c1304152f11e6a83c383fff8d5e498c4385e6f 537302c07522f4bf1e766fbb1a8da346f59526715a5fcecd3f6aa4817b6b32ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2dabd839729e9b0fb2558253d850126b 64f617aa0afb52168ef3519a4cf9829ac61ee007 1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash122124f83967c12700f5a6f5546b0f1f d7acd2db61ad811c388a44b7bd407fa5f4aea8ee b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash122124f83967c12700f5a6f5546b0f1f d7acd2db61ad811c388a44b7bd407fa5f4aea8ee b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.138 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.138:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 04 Dec 2022 15:28:35 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/ | 82.223.69.105 | 200 OK | 13 kB |
IP82.223.69.105:0
Hashde421904de6004bb816f8e9a7c244e8b 3c81680c8910509967a062e390cda03be0f263c3 38446b4d5654696f922d1a9d22bbfd836b1fca487e49c9af0c892757f5d33f17
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
expires: Wed, 17 Aug 2005 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c; path=/; HttpOnly
x-content-type-options: nosniff
last-modified: Sun, 04 Dec 2022 15:28:34 GMT
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| www.google.com/js/th/G-wi0KRrIjmTWIDOn44AFVMvZ_aKLO1c96DfwAE3d4M.js | 142.250.74.132 | 200 OK | 14 kB |
URL HTTP/2www.google.com/js/th/G-wi0KRrIjmTWIDOn44AFVMvZ_aKLO1c96DfwAE3d4M.js IP142.250.74.132:0
File typeASCII text, with very long lines (36143) Hasha08dfd96c563f96f7d11b4858aecfa13 d9abee2c38b89d3dea85e76bb741bb8f4f993d49 fedde263fa3b4116029d93d0250f5eab845964d5fcf24e40ffbcd9bf292a0db4
GET /js/th/G-wi0KRrIjmTWIDOn44AFVMvZ_aKLO1c96DfwAE3d4M.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14211
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 06:09:06 GMT
expires: Thu, 30 Nov 2023 06:09:06 GMT
cache-control: public, max-age=31536000
age: 379169
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.138 | 200 OK | 31 kB |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.138:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hash4ca71555dfcca80bb53d7ade6268e5f8 16873748fe9288eef9b8a67047a35a23f9aaa81f 6bf0330a73d4639dd5aee16c5017cea5aa902365563601ed4a8585dd2899ed67
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 04 Dec 2022 15:28:35 GMT
server: ESF
cache-control: private
content-length: 30869
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash122124f83967c12700f5a6f5546b0f1f d7acd2db61ad811c388a44b7bd407fa5f4aea8ee b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash64eb3a8f7cc11324c6f4c77e1c11f7ee 8ad889db020018b726362929a9477872a6808f0a 481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| yt3.ggpht.com/ytc/AMLnZu83ew6qNdMOTevjdVWWvl9dl0KNVLFCD3m_qQ=s68-c-k-c0x00ffffff-no-rj | 142.250.74.65 | 200 OK | 987 B |
URL HTTP/2yt3.ggpht.com/ytc/AMLnZu83ew6qNdMOTevjdVWWvl9dl0KNVLFCD3m_qQ=s68-c-k-c0x00ffffff-no-rj IP142.250.74.65:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data Hash431973b2982363c23f30c0796d31e79b 29aae0748066d26864d2529d12791e02f4b0a87e 41938ddc1674731a355353197cb468764b915495ec7e375ef66bc71cff76dc38
GET /ytc/AMLnZu83ew6qNdMOTevjdVWWvl9dl0KNVLFCD3m_qQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Mon, 05 Dec 2022 15:28:36 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 15:28:36 GMT
server: fife
content-length: 987
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash64eb3a8f7cc11324c6f4c77e1c11f7ee 8ad889db020018b726362929a9477872a6808f0a 481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.138 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.138:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 04 Dec 2022 15:28:36 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.138 | 200 OK | 114 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.138:0
File typeJSON data\012- , ASCII text, with no line terminators Hash565ce4a9dc48876d46aeb789205dd3e8 10934ab7e7d0249162f8a72ae5b21d5a17d8d042 e297ab32891e37bf1673eda10a879f7ab7206a3a02ce1c75ca8f647c396c4909
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 955
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 04 Dec 2022 15:28:36 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash3da683e93b38aa458905ea8c3d58d1a0 0c6582eb5105b0424dd9a9c168009e988217606c 43301ff40aa19cbde7793d9413c4ab24ddb486de6f53071084241ac2e70f7031
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash3da683e93b38aa458905ea8c3d58d1a0 0c6582eb5105b0424dd9a9c168009e988217606c 43301ff40aa19cbde7793d9413c4ab24ddb486de6f53071084241ac2e70f7031
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=lI&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=3212500&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&mt=1670167253&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAP9ZHB3TigMT8cwB_LuUfxdVafm2O6RdjEvmfRUfWw5XAiAnCNpgY50_T7Y4MMU28IBNi1WkTseXSjXMk2cPRxAsbw%3D%3D&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&range=0-201329&rn=1&rbuf=0 | 91.90.45.172 | 200 OK | 1.1 kB |
URL HTTP/1.1rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=lI&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=3212500&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&mt=1670167253&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAP9ZHB3TigMT8cwB_LuUfxdVafm2O6RdjEvmfRUfWw5XAiAnCNpgY50_T7Y4MMU28IBNi1WkTseXSjXMk2cPRxAsbw%3D%3D&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&range=0-201329&rn=1&rbuf=0 IP91.90.45.172:0 ASN#50304 Blix Solutions AS
File typeASCII text, with very long lines (1096), with no line terminators Hashaeee684d284fef3a73e6508189f54247 9dadc92a56f3f527a63c4cf36929ad135285f9ec f18e5f3a7cdc4867d532f0160e7161339e0e48d2455b3214d4be897f749e752c
POST /videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&mh=lI&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=3212500&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&mt=1670167253&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAP9ZHB3TigMT8cwB_LuUfxdVafm2O6RdjEvmfRUfWw5XAiAnCNpgY50_T7Y4MMU28IBNi1WkTseXSjXMk2cPRxAsbw%3D%3D&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&range=0-201329&rn=1&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sun, 04 Dec 2022 15:28:36 GMT
Expires: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 1096
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=251&source=youtube&requiressl=yes&mh=lI&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=3212500&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=audio%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=353480&dur=20.281&lmt=1563352193559742&mt=1670167253&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgTofHAkFagAf7u4jR_Qjz9_vOe79OTH4nGh8Q52PAMbgCIHhziD4YOhBqKnneVmCVU6rBvz5ykkCqXfS4jc_sXLsw&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAP9ZHB3TigMT8cwB_LuUfxdVafm2O6RdjEvmfRUfWw5XAiAnCNpgY50_T7Y4MMU28IBNi1WkTseXSjXMk2cPRxAsbw%3D%3D&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&range=0-65845&rn=2&rbuf=0 | 91.90.45.172 | 200 OK | 1.0 kB |
URL HTTP/1.1rr1---sn-capm-vnae.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=251&source=youtube&requiressl=yes&mh=lI&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=3212500&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=audio%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=353480&dur=20.281&lmt=1563352193559742&mt=1670167253&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgTofHAkFagAf7u4jR_Qjz9_vOe79OTH4nGh8Q52PAMbgCIHhziD4YOhBqKnneVmCVU6rBvz5ykkCqXfS4jc_sXLsw&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAP9ZHB3TigMT8cwB_LuUfxdVafm2O6RdjEvmfRUfWw5XAiAnCNpgY50_T7Y4MMU28IBNi1WkTseXSjXMk2cPRxAsbw%3D%3D&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&range=0-65845&rn=2&rbuf=0 IP91.90.45.172:0 ASN#50304 Blix Solutions AS
File typeASCII text, with very long lines (1011), with no line terminators Hash479da20c5d589b5686815aabda2928ab 7d84ea528566150080bf70f645bcdcece6634690 d22fb440ac607f6e86b28af02d0fb4ac5e82bf471675989af818d428c431a641
POST /videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=251&source=youtube&requiressl=yes&mh=lI&mm=31%2C29&mn=sn-capm-vnae%2Csn-5goeenez&ms=au%2Crdu&mv=m&mvi=1&pl=21&initcwndbps=3212500&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=audio%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=353480&dur=20.281&lmt=1563352193559742&mt=1670167253&fvip=1&keepalive=yes&fexp=24001373%2C24007246&c=WEB_EMBEDDED_PLAYER&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgTofHAkFagAf7u4jR_Qjz9_vOe79OTH4nGh8Q52PAMbgCIHhziD4YOhBqKnneVmCVU6rBvz5ykkCqXfS4jc_sXLsw&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AG3C_xAwRQIhAP9ZHB3TigMT8cwB_LuUfxdVafm2O6RdjEvmfRUfWw5XAiAnCNpgY50_T7Y4MMU28IBNi1WkTseXSjXMk2cPRxAsbw%3D%3D&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&range=0-65845&rn=2&rbuf=0 HTTP/1.1
Host: rr1---sn-capm-vnae.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sun, 04 Dec 2022 15:28:36 GMT
Expires: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 1011
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash3da683e93b38aa458905ea8c3d58d1a0 0c6582eb5105b0424dd9a9c168009e988217606c 43301ff40aa19cbde7793d9413c4ab24ddb486de6f53071084241ac2e70f7031
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash456b4162bee357d50b033b1949728da1 aaf159ebfee0a821c0579d1f574f304eb76ca300 70318b6ac867c9550b9d720ac3983e8587cbe186df99eeb0de93dcf21b6f01de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash456b4162bee357d50b033b1949728da1 aaf159ebfee0a821c0579d1f574f304eb76ca300 70318b6ac867c9550b9d720ac3983e8587cbe186df99eeb0de93dcf21b6f01de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr1---sn-5goeenez.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=251&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=audio%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=353480&dur=20.281&lmt=1563352193559742&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgTofHAkFagAf7u4jR_Qjz9_vOe79OTH4nGh8Q52PAMbgCIHhziD4YOhBqKnneVmCVU6rBvz5ykkCqXfS4jc_sXLsw&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=lI&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670166719&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAIvLNBgoI92yKCbp_RYKtr9lUxs1Jp-_MLw30vjancn5AiBl-Liz_q_qCJkgepnfzS-jQzLfFCgZ6_inR61-4Xcqdg%3D%3D&range=0-65845&rn=4&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= | 74.125.111.6 | 200 OK | 1.2 kB |
URL HTTP/1.1rr1---sn-5goeenez.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=251&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=audio%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=353480&dur=20.281&lmt=1563352193559742&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgTofHAkFagAf7u4jR_Qjz9_vOe79OTH4nGh8Q52PAMbgCIHhziD4YOhBqKnneVmCVU6rBvz5ykkCqXfS4jc_sXLsw&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=lI&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670166719&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAIvLNBgoI92yKCbp_RYKtr9lUxs1Jp-_MLw30vjancn5AiBl-Liz_q_qCJkgepnfzS-jQzLfFCgZ6_inR61-4Xcqdg%3D%3D&range=0-65845&rn=4&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= IP74.125.111.6:0
File typeASCII text, with very long lines (1167), with no line terminators Hashe4419df1d55b1693a9e5c7ee09f66761 d644741deb6c6a8545b461cfe09432674f771613 7d3644fd2be94174770addf82cbf00082700f6e543445d6c5fd269076b70ed4c
POST /videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=251&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=audio%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=353480&dur=20.281&lmt=1563352193559742&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgTofHAkFagAf7u4jR_Qjz9_vOe79OTH4nGh8Q52PAMbgCIHhziD4YOhBqKnneVmCVU6rBvz5ykkCqXfS4jc_sXLsw&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=lI&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670166719&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAIvLNBgoI92yKCbp_RYKtr9lUxs1Jp-_MLw30vjancn5AiBl-Liz_q_qCJkgepnfzS-jQzLfFCgZ6_inR61-4Xcqdg%3D%3D&range=0-65845&rn=4&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= HTTP/1.1
Host: rr1---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sun, 04 Dec 2022 15:28:36 GMT
Expires: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 1167
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr1---sn-5goeenez.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=lI&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670166719&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgMEWMzZdDOEJP_Zo6gXzwi7nyi8m3-aXalG0DdSBM8cgCIEHb-rpmmRd1zOovIefmRZ114eiQBNbD3Hv24fF2v0Ba&range=0-201329&rn=3&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= | 74.125.111.6 | 200 OK | 1.3 kB |
URL HTTP/1.1rr1---sn-5goeenez.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=lI&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670166719&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgMEWMzZdDOEJP_Zo6gXzwi7nyi8m3-aXalG0DdSBM8cgCIEHb-rpmmRd1zOovIefmRZ114eiQBNbD3Hv24fF2v0Ba&range=0-201329&rn=3&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= IP74.125.111.6:0
File typeASCII text, with very long lines (1260), with no line terminators Hash35aaf4887d41da8ceaebaaf239aba0d8 c34273cad7ae6f31a311eeb20e74bafab14885f3 4a905c59a26fc5f531122608b4861991f5fcaa9217dc86c241abda67fd189aca
POST /videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=lI&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670166719&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRAIgMEWMzZdDOEJP_Zo6gXzwi7nyi8m3-aXalG0DdSBM8cgCIEHb-rpmmRd1zOovIefmRZ114eiQBNbD3Hv24fF2v0Ba&range=0-201329&rn=3&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= HTTP/1.1
Host: rr1---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sun, 04 Dec 2022 15:28:36 GMT
Expires: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 1260
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash456b4162bee357d50b033b1949728da1 aaf159ebfee0a821c0579d1f574f304eb76ca300 70318b6ac867c9550b9d720ac3983e8587cbe186df99eeb0de93dcf21b6f01de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| rr1---sn-5goeenez.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=lI&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670166719&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAO0o9ouzNmmxubsR-PZ8sWFrzi42Y-EkHkOTK1ympJrUAiB0EXfDDd95oJc4jzvLVa6xnNJ4UB7f1moVYMkTjHVqzA%3D%3D&range=0-201329&rn=7&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= | 74.125.111.6 | 200 OK | 1.3 kB |
URL HTTP/1.1rr1---sn-5goeenez.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=lI&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670166719&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAO0o9ouzNmmxubsR-PZ8sWFrzi42Y-EkHkOTK1ympJrUAiB0EXfDDd95oJc4jzvLVa6xnNJ4UB7f1moVYMkTjHVqzA%3D%3D&range=0-201329&rn=7&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= IP74.125.111.6:0
File typeASCII text, with very long lines (1260), with no line terminators Hashd999657f231b19aaaa4a077ba5ab8030 6037ab4570795a1d225bd5438aaec1b1f7ae3535 08c8818c646ae6edbae20898cb979e03adb1b9e8b80eaddbd05feb3ce6a8e6d7
POST /videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&redirect_counter=1&cm2rm=sn-capm-vnae7e&cms_redirect=yes&cmsv=e&mh=lI&mm=29&mn=sn-5goeenez&ms=rdu&mt=1670166719&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIhAO0o9ouzNmmxubsR-PZ8sWFrzi42Y-EkHkOTK1ympJrUAiB0EXfDDd95oJc4jzvLVa6xnNJ4UB7f1moVYMkTjHVqzA%3D%3D&range=0-201329&rn=7&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= HTTP/1.1
Host: rr1---sn-5goeenez.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/plain
Last-Modified: Wed, 02 May 2007 10:26:10 GMT
Date: Sun, 04 Dec 2022 15:28:36 GMT
Expires: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 1260
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr1---sn-5hneknes.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=251&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=audio%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=353480&dur=20.281&lmt=1563352193559742&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgTofHAkFagAf7u4jR_Qjz9_vOe79OTH4nGh8Q52PAMbgCIHhziD4YOhBqKnneVmCVU6rBvz5ykkCqXfS4jc_sXLsw&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77e&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=lI&mm=34&mn=sn-5hneknes&ms=ltu&mt=1670166609&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgbGIPw3O4_nWvtxRb4Nsrvc40rU6ZG6kIsoiU7D1JrCsCIQCVf2KKkJmYPVk3DdGE-89BHq-b8FXbL90txjWqsuFmig%3D%3D&range=0-65845&rn=5&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= | 74.125.8.198 | 200 OK | 66 kB |
URL HTTP/1.1rr1---sn-5hneknes.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=251&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=audio%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=353480&dur=20.281&lmt=1563352193559742&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgTofHAkFagAf7u4jR_Qjz9_vOe79OTH4nGh8Q52PAMbgCIHhziD4YOhBqKnneVmCVU6rBvz5ykkCqXfS4jc_sXLsw&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77e&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=lI&mm=34&mn=sn-5hneknes&ms=ltu&mt=1670166609&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgbGIPw3O4_nWvtxRb4Nsrvc40rU6ZG6kIsoiU7D1JrCsCIQCVf2KKkJmYPVk3DdGE-89BHq-b8FXbL90txjWqsuFmig%3D%3D&range=0-65845&rn=5&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= IP74.125.8.198:0
File typeWebM\012- EBML file, creator webmB\20\012- data Hash946af4c51823a55e4c041f2148267dcf 7e517c9baabe6e1aabd88d877e2f5871a571205c 52dd5ff34acc664fbe93de02885da897984dca0f84fc5d35ab425d215441ef14
POST /videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=251&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=audio%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=353480&dur=20.281&lmt=1563352193559742&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgTofHAkFagAf7u4jR_Qjz9_vOe79OTH4nGh8Q52PAMbgCIHhziD4YOhBqKnneVmCVU6rBvz5ykkCqXfS4jc_sXLsw&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77e&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=lI&mm=34&mn=sn-5hneknes&ms=ltu&mt=1670166609&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgbGIPw3O4_nWvtxRb4Nsrvc40rU6ZG6kIsoiU7D1JrCsCIQCVf2KKkJmYPVk3DdGE-89BHq-b8FXbL90txjWqsuFmig%3D%3D&range=0-65845&rn=5&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= HTTP/1.1
Host: rr1---sn-5hneknes.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Wed, 17 Jul 2019 08:29:53 GMT
Content-Type: audio/webm
Date: Sun, 04 Dec 2022 15:28:36 GMT
Expires: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 65846
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| rr1---sn-5hneknes.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77e&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=lI&mm=34&mn=sn-5hneknes&ms=ltu&mt=1670166609&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgHugvLoRTjqKFD9ytHiTuprfh3UNpiHig1N_Awx8AdW0CIQCMfsuALCcsZua7ax-hSyS5CGVPZLo3bdHir5T8ob7wfA%3D%3D&range=0-201329&rn=8&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= | 74.125.8.198 | 200 OK | 201 kB |
URL HTTP/1.1rr1---sn-5hneknes.googlevideo.com/videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77e&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=lI&mm=34&mn=sn-5hneknes&ms=ltu&mt=1670166609&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgHugvLoRTjqKFD9ytHiTuprfh3UNpiHig1N_Awx8AdW0CIQCMfsuALCcsZua7ax-hSyS5CGVPZLo3bdHir5T8ob7wfA%3D%3D&range=0-201329&rn=8&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= IP74.125.8.198:0
File typeWebM\012- EBML file, creator webmB\20\012- data Size201 kB (201330 bytes) Hashb233f97f849c3a8796d93255e9612f01 59772c6b2a479d1c2895be7f09c6691616bd2800 562ae00b827494418ce1381ed98f3b07807104df58c42718522f04beebe32892
POST /videoplayback?expire=1670189315&ei=o7yMY8qsL8WGv_IPq-icoAc&ip=91.90.42.154&id=o-ACYSPouniS0B1bEVivnbiLvEH6TsS5BFD1mXeEoATfIi&itag=244&aitags=133%2C134%2C135%2C136%2C137%2C160%2C242%2C243%2C244%2C247%2C248%2C278&source=youtube&requiressl=yes&spc=SFxXNh_WbhtzNqPU4_YNkw4QmJrsIRs&vprv=1&mime=video%2Fwebm&ns=tSGqNtVxU5Vx63Ty89GLTHAJ&gir=yes&clen=1913760&dur=20.220&lmt=1561753580398591&keepalive=yes&fexp=24001373,24007246&c=WEB_EMBEDDED_PLAYER&txp=5432432&n=QjNg_AYX9IwK7A&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cspc%2Cvprv%2Cmime%2Cns%2Cgir%2Cclen%2Cdur%2Clmt&sig=AOq0QJ8wRAIgJ1QPaFtQsvi76EBJFqG9DTKDSHSkUNlX2j23SRi-364CIF76n49SIrCpTHbd6JfwmZXIxvwrg6CKIqpKbn2wfKPg&alr=yes&cpn=V5nIRtOpqfHs7yBw&cver=1.20221130.01.00&cm2rm=sn-capm-vnae7e,sn-5gos77e&redirect_counter=2&cms_redirect=yes&cmsv=e&mh=lI&mm=34&mn=sn-5hneknes&ms=ltu&mt=1670166609&mv=u&mvi=1&pl=21&lsparams=mh,mm,mn,ms,mv,mvi,pl&lsig=AG3C_xAwRQIgHugvLoRTjqKFD9ytHiTuprfh3UNpiHig1N_Awx8AdW0CIQCMfsuALCcsZua7ax-hSyS5CGVPZLo3bdHir5T8ob7wfA%3D%3D&range=0-201329&rn=8&rbuf=0&pot=Dwy1nG2ETCsKDI71z9Y1eJz6ypcGrNS7m4MA77tvObssd-nzIudCla7fqtrK-SqcW_rMmD4a6Vq42BQ97QxMyu6gtzzR2hXGPTAg6HmN4hdmhzSMLrdO4DqdD4g54NuZpm0cS7MyTBE= HTTP/1.1
Host: rr1---sn-5hneknes.googlevideo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Last-Modified: Fri, 28 Jun 2019 20:26:20 GMT
Content-Type: video/webm
Date: Sun, 04 Dec 2022 15:28:36 GMT
Expires: Sun, 04 Dec 2022 15:28:36 GMT
Cache-Control: private, max-age=21299
Accept-Ranges: bytes
Content-Length: 201330
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Access-Control-Allow-Origin: https://www.youtube.com
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: https://www.youtube.com
Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
X-Restrict-Formats-Hint: None
X-Content-Type-Options: nosniff
Server: gvs 1.0
|
|
| aralaplayita.zahara.es/templates/yootheme/cache/ec/IM001439-ec0ed9c1.webp | 82.223.69.105 | 200 OK | 446 kB |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/cache/ec/IM001439-ec0ed9c1.webp IP82.223.69.105:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1366x1025, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Size446 kB (446544 bytes) Hashd6449b5227ecfe46e68996b1e1f5bfe6 b2b3a73b6ab9fa94ff46d649b492f6acb3e82cf0 8a906f0a76c435263b716977966fa804152b4379d30811bd6f523fa631a1eb27
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/cache/ec/IM001439-ec0ed9c1.webp HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:41 GMT
content-type: image/webp
content-length: 446544
last-modified: Thu, 17 Nov 2022 05:37:46 GMT
etag: "6375c8aa-6d050"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/js/theme.js?3.0.14 | 82.223.69.105 | 200 OK | 0 B |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/js/theme.js?3.0.14 IP82.223.69.105:0
GET /templates/yootheme/js/theme.js?3.0.14 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: application/javascript
last-modified: Wed, 30 Nov 2022 10:56:41 GMT
etag: W/"638736e9-ca8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/images/image/ARA-LaPlayitaVer-1.png | 82.223.69.105 | 200 OK | 0 B |
URL HTTP/2aralaplayita.zahara.es/images/image/ARA-LaPlayitaVer-1.png IP82.223.69.105:0
GET /images/image/ARA-LaPlayitaVer-1.png HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: image/png
content-length: 410372
last-modified: Thu, 08 Oct 2020 06:06:30 GMT
etag: "5f7eac66-64304"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.youtube.com/s/player/dab28f34/player_ias.vflset/en_US/base.js | 142.250.74.174 | 200 OK | 0 B |
URL HTTP/2www.youtube.com/s/player/dab28f34/player_ias.vflset/en_US/base.js IP142.250.74.174:0
GET /s/player/dab28f34/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/UX6I2iMyP_M?loop=1&autoplay=1&mute=1&playlist=UX6I2iMyP_M&t=3s%20frameborder=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 593839
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:09:00 GMT
expires: Fri, 01 Dec 2023 16:09:00 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 01:20:18 GMT
content-type: text/javascript
age: 256774
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/vendor/assets/uikit/dist/js/uikit-icons-fjord.min.js?3.0.14 | 82.223.69.105 | 200 OK | 0 B |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/vendor/assets/uikit/dist/js/uikit-icons-fjord.min.js?3.0.14 IP82.223.69.105:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/vendor/assets/uikit/dist/js/uikit-icons-fjord.min.js?3.0.14 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: application/javascript
last-modified: Wed, 30 Nov 2022 10:56:48 GMT
etag: W/"638736f0-10308"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| aralaplayita.zahara.es/templates/yootheme/vendor/assets/uikit/dist/js/uikit.min.js?3.0.14 | 82.223.69.105 | 200 OK | 0 B |
URL HTTP/2aralaplayita.zahara.es/templates/yootheme/vendor/assets/uikit/dist/js/uikit.min.js?3.0.14 IP82.223.69.105:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /templates/yootheme/vendor/assets/uikit/dist/js/uikit.min.js?3.0.14 HTTP/1.1
Host: aralaplayita.zahara.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aralaplayita.zahara.es/
Cookie: 143fc213c3cc59a2e535b398535a3900=35mdi4bie83urqlp9h3nnvb92c
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 15:28:34 GMT
content-type: application/javascript
last-modified: Wed, 30 Nov 2022 10:56:48 GMT
etag: W/"638736f0-21327"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|