Report - go.zoomstreakstream.com/click/DqbWkCr3x8

Report Overview

Submitted URL
go.zoomstreakstream.com/click/DqbWkCr3x8
IP
172.67.138.33
ASN
#13335 CLOUDFLARENET
Submitted
2022-09-24 13:57:55
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	13.224.245.4
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	4.4 kB	23.36.77.32
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
go.zoomstreakstream.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	359 B	3.4 kB	172.67.138.33
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	52.41.98.34
zoomstreakstream.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	8.0 kB	171 kB	104.21.38.198
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.7 kB	69 kB	34.120.237.76
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	13.224.245.56
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	987 B	1.6 kB	93.184.220.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-24	medium	go.zoomstreakstream.com/click/DqbWkCr3x8	Phishing
2022-09-24	medium	zoomstreakstream.com/global_mcafee_4/?ept2=a9a55a2f-5e71-4d59-9c74-41a7f5b35d4a	Phishing
2022-09-24	medium	zoomstreakstream.com/global_mcafee_4/text.js	Phishing
2022-09-24	medium	zoomstreakstream.com/global_mcafee_4/jquery-3.4.1.js	Phishing
2022-09-24	medium	zoomstreakstream.com/global_mcafee_4/javascript.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	zoomstreakstream.com/global_mcafee_4/javascript.js	1.4 kB	2023-03-07	2023-04-11
Pretty URL zoomstreakstream.com/global_mcafee_4/javascript.js IP 104.21.38.198 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:07:48 Last Seen2023-04-11 08:33:32 Times Seen9 Hash 97851ba4e5f4400b2b591dcc570282f4 154288f1cdcb38863f4fe696de823b15dabb89f4 ed64ab55527d4ff8491d278ae1c00f94fc7cae47c5f040329c7c351e8c6a2f99 Loading...

	zoomstreakstream.com/global_mcafee_4/jquery-3.4.1.js	280 kB	2023-03-07	2024-05-10
Pretty URL zoomstreakstream.com/global_mcafee_4/jquery-3.4.1.js IP 104.21.38.198 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:49 Last Seen2024-05-10 01:04:42 Times Seen1496 Hash 11c05eb286ed576526bf4543760785b9 7faa15a054093f3b5d674e63b6567c835a6fa217 5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55 Loading...

	zoomstreakstream.com/global_mcafee_4/text.js	52 B	2023-03-07	2023-05-27
Pretty URL zoomstreakstream.com/global_mcafee_4/text.js IP 104.21.38.198 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:07:48 Last Seen2023-05-27 18:50:08 Times Seen16 Hash 103838f4e986a93aef0a95de9739e462 34013e04a17e769a54c5991bb9b3d2e096eb6746 77dfbd2fdb44084a078ca4c8600358e4b446e18b7f2b89e3ffe8737b0ad62dea Loading...

HTTP Transactions (42)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

13.224.245.4

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
13.224.245.4:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 24 Sep 2022 13:05:41 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 1b5424f4e08ca48fc35e311bea9e9ff6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR62-C3
X-Amz-Cf-Id: sHZu7tNj0yrG4JuNabK0BEU-J3-03KSs4leThDVij1Zwe2kkgjyj7g==
Age: 3123

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9408
Expires: Sat, 24 Sep 2022 16:34:32 GMT
Date: Sat, 24 Sep 2022 13:57:44 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

13.224.245.56

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
13.224.245.56:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 24 Sep 2022 04:13:03 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 f2f35cfbe251bd412f460c97cca8770c.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C3
x-amz-cf-id: vnu44I9ENJTc3xjc8sXgepdtQpyqAE_IDGUhJwhFBTazjRi9zOirqg==
age: 35081
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 13:57:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

go.zoomstreakstream.com/click/DqbWkCr3x8

172.67.138.33

302 Found

14 B

URL HTTP/1.1
go.zoomstreakstream.com/click/DqbWkCr3x8
IP
172.67.138.33:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with no line terminators
Size
14 B (14 bytes)
Hash
2ea624d388b73c5ad7976bbb9d758a4f
a7e1d420aec892c6e2d9ea786a9b2533417cc1d1
cd23991b4e02a17e5a224a1f8265c5a187ab366b40b8f8a14608371feb8f6e25

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /click/DqbWkCr3x8 HTTP/1.1
Host: go.zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Date: Sat, 24 Sep 2022 13:57:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=rPdf94h7Gq73xhlvwA1ooh153HIt0UjRzy4MyRhwGat3fTjg/2OYSDZWpsY/WBU4xQnFLip43+kNeuEJhNn74NzF8I++AvqGnzkuLUYskscv5oCC8gyqFpVvYxe/; Expires=Sat, 01 Oct 2022 13:57:45 GMT; Path=/
AWSALBCORS=rPdf94h7Gq73xhlvwA1ooh153HIt0UjRzy4MyRhwGat3fTjg/2OYSDZWpsY/WBU4xQnFLip43+kNeuEJhNn74NzF8I++AvqGnzkuLUYskscv5oCC8gyqFpVvYxe/; Expires=Sat, 01 Oct 2022 13:57:45 GMT; Path=/; SameSite=None
XSRF-TOKEN=eyJpdiI6IlpxWlJ5NERMSjNmSVwvNnZNMTAzS2JBPT0iLCJ2YWx1ZSI6Inh5dVplQjIyQ1RhNUVZOW5RbEFUT3cwNWlNalg2cFhIMG5CVEJ5ZkpNWWQ3K0wxajhiV3BjVVVxd0hndXJ4WnQxK3BGMmFVekpxRkJLZWN2U1pqUlp3PT0iLCJtYWMiOiJiN2U5NTdmNDI3ZWZjMThmYmZlNzY5MzM4Y2M5MzNiN2ZhMmU3NDRiZTA2ODliYTNhOTdhNjMzNTk3YjBjZDBjIn0%3D; expires=Sat, 24-Sep-2022 15:57:45 GMT; Max-Age=7200; path=/
session=eyJpdiI6InZ3ekYzck1jeTBNYUZEZzh0dlVQd1E9PSIsInZhbHVlIjoidHdLVkRpQ2kxSDBaWDBLc3VWdHJMaXQ1XC9ZNHJEY0creDh3T0g0UGdvKzJmbzhnbW96UkdZczVXYThnUFdcL2xxT0FvY01ucUk1TGl5dmhkY1lzemRSUT09IiwibWFjIjoiYWY0NjdmYWIwNjBjZjA5NWM0MzBiZjhlZTIxZTViNDc1ODg2ZTVkYmY3OTZmODM3OWNhNzlkYTJkM2RjZWQ1ZSJ9; expires=Sat, 24-Sep-2022 15:57:45 GMT; Max-Age=7200; path=/; HttpOnly
ept2=eyJpdiI6IjdLZnJmTnMwSWZtSjBmSXRhMXBPSlE9PSIsInZhbHVlIjoiTk5QN3REZE5LVmIxUmdsczBUaVNwSDEwbkIycXlucElyalY4dWlhXC91RVpNbFo5bzlxWmFGWnlpbWs2dFQ2XC95VUxRQ2RcL0NEZ3RvcDFFQVZuQmpCajRLbDVHeElUSDY0eHVvaEk5RHE2d0l1XC9XRWhYTE9rZVh3aDNDZU93aFo1UmpWSDRQM3hMd3ZFUTVjeEFkUURVVzBJOGNoa3FYVnZqT2UwUGN2TGNXNWdOOWk5eWhaSzM2MEFRbUxVTVk1diIsIm1hYyI6ImM0NTUzYWY4NjA0NTliNGEyYWU1NTBiMmUyZDA5ZWUyOGUwNDlkYThjMzA3YjExMGFhNmJmNmI2ZjFmNGIyZmUifQ%3D%3D; expires=Sun, 25-Sep-2022 13:57:45 GMT; Max-Age=86400; path=/; HttpOnly
LOafL5oLJGeyFC9qte2Oi327IuTxzyjxcYRGwOZW=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%3D%3D; expires=Sat, 24-Sep-2022 15:57:45 GMT; Max-Age=7200; path=/; HttpOnly
Cache-Control: no-cache, private
Location: https://zoomstreakstream.com/global_mcafee_4/?ept2=a9a55a2f-5e71-4d59-9c74-41a7f5b35d4a
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1qQMOSjepxijQvdFjz8YjtWeHcKbIgdzMrcVnVilRFppiQT%2FhHg%2BTdCQx2IcmOwdNd92VC2SPvLxnIz%2BsMYyxuFcvgm6mWpYis5AryOsgjZllv6731MKR0xluFNb7BCyZFslPv0OSoClWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74fc07e9f938b4ff-OSL
alt-svc: h2=":443"; ma=60

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

13.224.245.4

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
13.224.245.4:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sat, 24 Sep 2022 13:20:46 GMT
Expires: Sat, 24 Sep 2022 13:51:24 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 299d6cdcc49a194864ae1dbfa6512d00.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR62-C3
X-Amz-Cf-Id: 8m8pPOem_peiLiv8VatIPOaVv1ytCpEUScOO0E-PycxIn5EtLzOyOg==
Age: 2219

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
a7809de115ea73f8b61f3d20a9978493
01fc65a2b694d7aadd5204d21801e87b2b55b73e
72692486033feeb149424c59576c6c75b17228dfc89b4c369d2e17cc4bff3d52

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3776
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 13:57:45 GMT
Last-Modified: Sat, 24 Sep 2022 12:54:49 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

52.41.98.34

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.41.98.34:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mjmY6lDflC9hm8RCsGdV0A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: yCqI19zjcBJbUeBjumNot1wPYic=

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
40130aedd9c7829f55ba945bb54ea622
29e2730b7f553559603695e53db827ef16210201
d4a256298a8b4033a0be0a40bf12b4b4e4d42956da30cc27811fdcfb49e96923

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 13:57:45 GMT
Server: ECS (amb/6BC0)
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
40130aedd9c7829f55ba945bb54ea622
29e2730b7f553559603695e53db827ef16210201
d4a256298a8b4033a0be0a40bf12b4b4e4d42956da30cc27811fdcfb49e96923

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 13:57:46 GMT
Server: ECS (amb/6B71)
Content-Length: 279

zoomstreakstream.com/global_mcafee_4/imgs/logo-small.png

104.21.38.198

200 OK

9.7 kB

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/logo-small.png
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 141 x 70, 8-bit/color RGBA, non-interlaced\012- data
Size
9.7 kB (9703 bytes)
Hash
3ca5666808f8a0231c006adfc1ccf62b
3d6c265a895e4127016bb0f66a7d209516c3ef43
e598451d917ec451c03d378bed8319e435764759f1bd7434253e460dd6be024e

HTTP Headers

GET /global_mcafee_4/imgs/logo-small.png HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/png
content-length: 9703
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-25e7"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FP5C4yU%2FKwlcpAHbT4X6erex9XM4DBWDXAzX%2FxvP5Hze4lqEljVjswS1wWKPp9faU05OoMEZpnO%2FlKKXeNwE5pAHnVU3IHNUxwX0VZ9LkvTzRDhPe4uhjFYsvUN3faeUOGLC1uuEXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f428160b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/logo.png

104.21.38.198

200 OK

3.2 kB

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/logo.png
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 175 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size
3.2 kB (3180 bytes)
Hash
1194014714d19dcc9ddc4ef1f3d6ba78
786d4d1597c895121b0f7d01f31a221b6fc9ac83
a18c081e3d45b321171962305921005165aa4ab5976438fec7b8d8d2b0a7a98d

HTTP Headers

GET /global_mcafee_4/imgs/logo.png HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/png
content-length: 3180
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-c6c"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=voGnfsJSKVpg6yCKzDjMm1TJIx%2FdpMHVWS5WQ31f0w7a4eJpemxyxnPA3r6GFAF5Kxk8eUPbtf1T9hLFjUqYazfFUmBoMdrs%2BkudCSiOVeoEDM3nbLlOYUdrjRxCUZdijym94v98LQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f428130b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/bg.jpg

104.21.38.198

200 OK

139 kB

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/bg.jpg
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x650, components 3\012- data
Size
139 kB (138905 bytes)
Hash
e3fe0ff79497df58b701be5d55dd3b3a
32bcc2cff382ebfd08304a8cb70df818e20f3077
9d5daf8871084688265512e738c7e1fd8f635d74403f2dc0d114da574b859bc6

HTTP Headers

GET /global_mcafee_4/imgs/bg.jpg HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/jpeg
content-length: 138905
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-21e99"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Do%2BwhZKD0T28qOogv8q07gPvf3MpK3b%2FUEdJTsAlTu7w%2Fopy3GIH0RZCPjH0BKu5O9S1y96xmJ0nweUZBvyMijtFuI2iJ%2Bxn4h%2BrmWcbh2tO5FTKB0604%2Bce8zN3DAnTYXJejhTz7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f428150b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/ico_gray1.png

104.21.38.198

200 OK

174 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/ico_gray1.png
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 12 x 12, 8-bit grayscale, non-interlaced\012- data
Size
174 B (174 bytes)
Hash
77038d3f939f87cf23494af6662f7e72
9a4f8403d81b7b864f3bab568c11a8f3ee58b6a9
a300ba3b7f4617e5dd9d98adb09e059954b4b47827ad987bee00e10f73173b25

HTTP Headers

GET /global_mcafee_4/imgs/ico_gray1.png HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/png
content-length: 174
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-ae"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pRROO5fr%2BF%2FU5B49rdo4%2B4ZUy6YvKx73xOmguEys2Zs6DAGeCnFr6ExJhbK20ye4d4EAVM5WJP8vLhjrtMyaWwtAB%2BFpulyOrbtOBOEKyCVZmxKeAYb0%2Bo5451s5gjgbo7rpQJhhcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f4281e0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/win_min.png

104.21.38.198

200 OK

78 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/win_min.png
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 12 x 12, 8-bit grayscale, non-interlaced\012- data
Size
78 B (78 bytes)
Hash
9a848daf7e3d06e6f775c940d7a4ec6d
c4a19ee0729ce05ed478f94dddb4d9f9615f3828
c29194695fbb37c95332a4b7da23130625c042c8a82d3c1ae72a184e848c61da

HTTP Headers

GET /global_mcafee_4/imgs/win_min.png HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/png
content-length: 78
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-4e"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nlXmm47vq89QQeojMcTPAwoVMlg4r6hMqaFMs9Tszs2uYUmjtOV0q92AoobsVe%2BEQRW7%2BvRm9OE9uDDAycBABy5%2BmL1QTpl7A6hJ8ysalatisRianIw%2F7myNsTGTRWHL0Dk7rHldyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f428180b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/pc_green.gif

104.21.38.198

200 OK

681 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/pc_green.gif
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 120 x 97\012- data
Size
681 B (681 bytes)
Hash
3629b4ba5ae536accad72a0591bcc7d2
886771a69e684d400339df9b2c3ad047eb51cd41
3752a7a586b1da5e238de21dadf58be805a650cbfc7f9d8d47ac98003593fc7e

HTTP Headers

GET /global_mcafee_4/imgs/pc_green.gif HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/gif
content-length: 681
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-2a9"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SC4dXzQmEU6GJWC290sVsvF%2BmPCvOCajuMqpoy6gfVR2J3FeZbwha0oxJD9cqQSz1S0xiqfCNNw5f9pV%2Ft4Acw5%2FKfQx9yIEnjjxeUduV%2BcHtlZX5XvHrd8BiqJf6fELXh8dunlnGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f428220b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/ico_bl2.gif

104.21.38.198

200 OK

1.0 kB

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/ico_bl2.gif
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 65 x 80\012- data
Size
1.0 kB (1035 bytes)
Hash
59c12ced724d01aa13e9c8b0b24d91d6
364ce207f01285f6289963fe04f1765959d05c20
d4daad5b5b989c3ce49db054a7f8a27f6ba170245386f39ec819e534ddb2b1db

HTTP Headers

GET /global_mcafee_4/imgs/ico_bl2.gif HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/gif
content-length: 1035
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-40b"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2pYh8aPVZ5AVD4y5LUHvG%2BG1wb7uTpsdgF%2Fvf%2FL4VD3NKSsxQ3%2BRh0k6RIA6m5cmGE0BpzmDt8EnIzJ3iB9ILnRyrF7J39gSyBGuT3bLy%2BCa0lw%2FFyzyu%2B1j4IevttTvX6GVUt9e%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f438250b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/ico_bl1.gif

104.21.38.198

200 OK

492 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/ico_bl1.gif
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 80 x 65\012- data
Size
492 B (492 bytes)
Hash
cbd36f47b83a07fe714f5f6846305783
682b751cbedb95fd69f03b0dc71833d09c4f3b17
01a025d695ceb29ef3b742ca0751fa0e611126247dd9fac2bc2417a85b9a4475

HTTP Headers

GET /global_mcafee_4/imgs/ico_bl1.gif HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/gif
content-length: 492
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-1ec"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r8L69CVQqD%2BiGGs8%2BT8T%2FoXKcxX2NkMBu2xjuSMD3nLnbq4DE16Debh9K4EOSsj2xHRP09Pr1IIQmMknhBRcGf5CKyW%2B15hbmYa8Qz4GjqZyV1JYng3xIUEk6C4lSCKEOVoXYwNGKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f438240b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/win_cls.png

104.21.38.198

200 OK

140 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/win_cls.png
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 12 x 12, 8-bit grayscale, non-interlaced\012- data
Size
140 B (140 bytes)
Hash
03e78f7d093d003a0637c6a4d4e0505e
2a53be0111b8454f6dde06d6260c06d32cf38a26
e14b39f83518ed7a638b5b06d05c71f5f9a05cf4d2a3d3c656937ee68b01a48c

HTTP Headers

GET /global_mcafee_4/imgs/win_cls.png HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/png
content-length: 140
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-8c"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrxBfo9mCS1C7375DPt5z7o14aueWu8mzUW5PXLvoIVlZqb3ghpTUOx%2BMDuCTwCStpUxq%2BFHtIWGxchRVH5B7i%2FwWCEKkgTFUO6EUPqA6z%2FWRMVdy5eYsYZ3AVn3Lm8P2hOuMLrmww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f4281d0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/corner.gif

104.21.38.198

200 OK

92 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/corner.gif
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 24 x 9\012- data
Size
92 B (92 bytes)
Hash
6e17516d2bcf244a3977c9ae294d2b00
cda170ad2ee2ac7c370579854a632cc31ce9c830
66061c217ec025659b7752a8b85945a946f4293fa18fc2a3e59f662b485c5897

HTTP Headers

GET /global_mcafee_4/imgs/corner.gif HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/gif
content-length: 92
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-5c"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UjvlGGmUYOub3BwqdEyPJrdkAuf0LRb6ST6oiME0PdrTwpzWNqCs9QyK1TvA83IroTfLthuec7De2CB7y4xIVqYfwPpcl77tYxV%2FUXVE2JToLfaj3ON8HPDNhq33XBFSW34rZhbZBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f438230b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/ico_tray1.gif

104.21.38.198

200 OK

61 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/ico_tray1.gif
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 16 x 16\012- data
Size
61 B (61 bytes)
Hash
2a29ac0e4ed266495cdc3cdce966adfd
89922112db294633ced80c8eedccc6086fccea0e
ec99ebbe12f10ba6a58fea79a227805e1ce6bd44f534d3ebc75bffa7e44dc870

HTTP Headers

GET /global_mcafee_4/imgs/ico_tray1.gif HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/gif
content-length: 61
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-3d"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vNkjBmDaMVtOqnWNAA1gbLEyNyKIlNW8MOpmTfIJeSAudf8SgjiNHw3pDlqc8kRpRbKh%2BDmwoZJve5pr7X2uAn9nEp6EkRjVmEDLVfoRo47TM3%2FworpW7F8ZCajlPch39JCBBmIdWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f438290b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/cross.png

104.21.38.198

200 OK

234 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/cross.png
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 29 x 29, 8-bit colormap, non-interlaced\012- data
Size
234 B (234 bytes)
Hash
1078577d5e12887c43a227a34b2ec372
def993eb45fa37140e3e75ecfae1176e498d5380
5bc91e296cd8b5de8a0c88e0230d14d097cb307b2838feab5ed88745afbb461d

HTTP Headers

GET /global_mcafee_4/imgs/cross.png HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/png
content-length: 234
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-ea"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ToExK1L9ucYZWw4Du4kABTgky7DTCZF35Nw8oAfFe%2FihAWwAyNND%2FB9L3m%2BfWt8QSuV4d0GyPlpV9D%2F%2FZzq%2FWCniPwa%2F9hSYAfVgIYGAYny2a55nGhVI5cSEXj9AhPILjdpgmB5gFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f438280b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/ico_bl3.gif

104.21.38.198

200 OK

779 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/ico_bl3.gif
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 78 x 68\012- data
Size
779 B (779 bytes)
Hash
e6402f0324eda2cb18382ad23d5f1fa8
019471552f2b48ae8bc395492ea5d02e7aaf2e83
5a98036f1c64caf0098affd858c7381fba9c40b2c19ad31de687cf66e3cf8483

HTTP Headers

GET /global_mcafee_4/imgs/ico_bl3.gif HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/gif
content-length: 779
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-30b"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NlPKuGHzqsaM1mvAcM%2FlMfj9zZUhwkbq30rxYFWmX8e0jSChuDvtvU4bNJRQSE3b4MmS%2FOPZ3FAR2wia4nFX73YDUTaNRWG%2BgpOTXl4KuWWfN18rN45JoVSmvqWpwBM%2FKlXYSxgfZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f438270b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/ico_gray2.png

104.21.38.198

200 OK

180 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/ico_gray2.png
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 13 x 13, 8-bit grayscale, non-interlaced\012- data
Size
180 B (180 bytes)
Hash
ce15a1b120bc68831b99461f958fdcae
295765a6f6d80323012aeb7f407564f51bd91a77
fd9675b3d0f4a4e517e732becb79134ee799381db23e4a211a90dae4eacb1901

HTTP Headers

GET /global_mcafee_4/imgs/ico_gray2.png HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/png
content-length: 180
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-b4"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z%2Bhvk9f3ayABRsPdjZo3qfutn7MAaF5z96bw0u6Xtzqt7621%2BhOLtpwqU7XvBNgO3YDloiee7dvO6sygVVltR3IxcqD%2Bt%2Bkp6WUxW45uQhpZPDtu6Pu8iBAt%2FzP9%2FeE77O8bMb8gug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f428200b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/ico_tray2.gif

104.21.38.198

200 OK

248 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/ico_tray2.gif
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 87a, 16 x 16\012- data
Size
248 B (248 bytes)
Hash
db1d3a9a5a9ddf600ca03f9391692306
a6a831e2a753000db53c7015e3a88fb90a7018f3
3b49bb93fd9883bc0bffc2b8d3ba012a7a091aef80af2c0c254c6ab07ab50e06

HTTP Headers

GET /global_mcafee_4/imgs/ico_tray2.gif HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/gif
content-length: 248
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-f8"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=50aL2ztAIDsXUYuTGW3TRNReTEEuuAVqm30D70debFrjJTW39nopLfa6fW3vTO4GCmSoizXI5Y%2Bbd6O98Oo6PKoXAJB6U5iR43SqmSH8iOB9us5yEmC9fA8DtlEIubOwufBMgbajCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f4382a0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/imgs/ico_tray3.gif

104.21.38.198

200 OK

214 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/imgs/ico_tray3.gif
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 16 x 16\012- data
Size
214 B (214 bytes)
Hash
1e9214452aec704e84519602adbc0e36
b72abebb376d7a1d4ae029d3aad570c48c19b066
3137e963dfea21e1d52210cf2c22890aa8a5be3fd1bb2263357d8ba55ce603eb

HTTP Headers

GET /global_mcafee_4/imgs/ico_tray3.gif HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: image/gif
content-length: 214
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: "61f94e78-d6"
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FcS0yENPq5k9HHEbULVbOzcXD%2BiOaFrKIQuP439tqnRQSqRtryFQ%2F%2B3CmAyIlJ10jOwX7NDCLeA61JFVsaZgTl6XYxrBVE3uB1MhvVtmJI6OwAbJgbqgZm%2FFsEytbp1Sx1vG4C3%2B0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f4382b0b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12523
Expires: Sat, 24 Sep 2022 17:26:30 GMT
Date: Sat, 24 Sep 2022 13:57:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12523
Expires: Sat, 24 Sep 2022 17:26:30 GMT
Date: Sat, 24 Sep 2022 13:57:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12523
Expires: Sat, 24 Sep 2022 17:26:30 GMT
Date: Sat, 24 Sep 2022 13:57:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12523
Expires: Sat, 24 Sep 2022 17:26:30 GMT
Date: Sat, 24 Sep 2022 13:57:47 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10032 bytes)
Hash
aa150280eb113504d61a25935c0f0127
ed04f74fbb4c77b21e2babc51a82857f5e23d169
07df17fffb391aa82efb09e30d97e88fa4dbe6df00e37bb90304f69179f4848e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10032
x-amzn-requestid: 521c4012-9834-4100-a7ed-30093502f1a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPBHGYoAMFh-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-77b03c321240d76a572d603a;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lAQOV9_fZ2RFvhRKMtDOeRTWJc-Jo1u-DrtJshcQuCSOUXVbNMjhaw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:56:56 GMT
age: 57651
etag: "ed04f74fbb4c77b21e2babc51a82857f5e23d169"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96ebb238-493f-4ccc-a8d9-7a7c6f8ab469.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (7963 bytes)
Hash
5a4b36e1bf29c9c82f069cdd3c50874c
d2180d40ceb16924a87a41aad90dedb0bb912085
aab96d28ea8e21e6d37449eba400cac45acced1825ebdb27853d17ae4f993b00

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96ebb238-493f-4ccc-a8d9-7a7c6f8ab469.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7963
x-amzn-requestid: cadfa4ff-473d-4927-bdf6-3aad64cddf18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQbHTCIAMFfZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2735-41d711e5210099aa6273dd86;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: g0NS7XamCzSMKmm1-mLnWLwUuBoJczvwSmTb0c_7klsY78wbrg4bRw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:57:02 GMT
age: 57645
etag: "d2180d40ceb16924a87a41aad90dedb0bb912085"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10279 bytes)
Hash
8ea5f06ad31f0cedd2cb5c6df82f35f4
60a83a1618ffae06e49ca3002bac1db9980dcfe8
5f6a4cb92c016ef0f229b11d727e9680a15b10782b5bfe9e66ad9d100b458d8d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10279
x-amzn-requestid: 0f361c26-1f12-421a-9752-7d4fcdf839ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4V65GTXIAMF9-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd045-25677a637307879044de8242;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:14:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NcnEyVD-vG10pOpPCBMjKGqVw-rstkPIt-oqkIc5urAGE934fxL0VQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 04:12:38 GMT
age: 35109
etag: "60a83a1618ffae06e49ca3002bac1db9980dcfe8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6386 bytes)
Hash
d8d9af95acfc8b9b431eb1e020157f6d
f6f926be6e265a597aaede424f05fcd7c76fcc20
0b61d6cb0e0908cb8d303b9e951e2854166bd232e0291b5d698a6b757c064e88

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6386
x-amzn-requestid: 4380489e-d0ba-4f67-ac4f-67619ba34422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7shGHryIAMF6zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e27a0-005f9c783c7722f16c178026;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:39:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: RuUOjTDRTkcaGFf_hTWrHZ89edOajgGUdl5PjbaUV7CUppat6IYsRg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:52:36 GMT
age: 57911
etag: "f6f926be6e265a597aaede424f05fcd7c76fcc20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85d1d130-04e1-43f4-81d7-b15e9286f813.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8354 bytes)
Hash
e1087dcce202bbbc8c84196bd2050662
670d89082f8da643e1196b11fb64bf71707f0e8d
f6a7b6e07177431d7845e2f2b7b1b3b76088671db32aeef580a72e9bd3ddae00

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85d1d130-04e1-43f4-81d7-b15e9286f813.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8354
x-amzn-requestid: 3ec3470c-2268-4102-af88-27dcfed76bfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPCGOcoAMF2xQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-481aa98b413690636fc3a2f0;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dXqPCGTGK8gW86McTltPuNYKXQgUuSqcL_XbyRQitinH5LsUscmU2w==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:47:49 GMT
age: 58198
etag: "670d89082f8da643e1196b11fb64bf71707f0e8d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9935 bytes)
Hash
55d224ac83a417772c98bc5080fb6689
a30f9044330824e70dde0dcc785890d981e6fdf5
b2ea4dea200109019a65834b98e31e8fac718a199513810a2819858be2b4470a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9935
x-amzn-requestid: 9eb8463d-172a-40a2-8eed-3c97b1260afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQ5FARoAMFXQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2738-3709a2f22ecc033532223b26;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:38:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: e5eETCL5yFnoG4HPx0Qv8hjGnlXx5vOL4syMx9uato8nuIHkSvMezg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:53:50 GMT
age: 57837
etag: "a30f9044330824e70dde0dcc785890d981e6fdf5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3cb80186-265b-4b0a-a4b1-38aef341bfc9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8557 bytes)
Hash
33edd8fdf7032227386d1514f99b2c4a
9fa34e0e3d456ed38d6e94911bf24990ed33ab0c
1d8ebbea41da3fbb5bd6784635f176bce0697a290635808166d269202bd3defa

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3cb80186-265b-4b0a-a4b1-38aef341bfc9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 8557
x-amzn-requestid: 51f41597-b094-47d7-b372-4c4c0236577f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7tAXEO3oAMFTWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2868-30ad6e877ee82fcc4d17a7e6;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:43:04 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: KfRlAHaZjrBNyxoYsUtQZ0TgMGD99mnrC3GViYCTRcHPtDfgYbLczg==
via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 22:02:30 GMT
age: 57323
etag: "9fa34e0e3d456ed38d6e94911bf24990ed33ab0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/?ept2=a9a55a2f-5e71-4d59-9c74-41a7f5b35d4a

104.21.38.198

200 OK

0 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/?ept2=a9a55a2f-5e71-4d59-9c74-41a7f5b35d4a
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /global_mcafee_4/?ept2=a9a55a2f-5e71-4d59-9c74-41a7f5b35d4a HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: text/html
last-modified: Fri, 19 Aug 2022 13:40:03 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CRGs1lbL0bmIpZqKAacqusnO%2FPQj7%2BbvYtBNleVxLRR6AA52i5fXCpn1L%2BjYtHjjCLANGFY4yVns1XV4O8Sd0XoyY4u9JlW1kJ8CIy6%2B5loI4YYJtqn5540GwaFMrdVm6ovH8%2BxFpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74fc07f22e6c0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/text.js

104.21.38.198

200 OK

0 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/text.js
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /global_mcafee_4/text.js HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: application/javascript
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: W/"61f94e78-34"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mX3Fh4w%2BU03Q6fsWHvZ%2BZO9EFyxM83ZD9tzufsgsDp3KnNkeW%2Fknsih0EMTTasNNA4VBO21l9ylqJvv2fWI5RjiQdrdMy72GPa1%2BFaa4JdqYDHoMDd%2FUGHqtnlwLui6zWvT229bNBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f428100b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/styles.css

104.21.38.198

200 OK

0 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/styles.css
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /global_mcafee_4/styles.css HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: text/css
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: W/"61f94e78-3c5e"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pJOxcoNJ2%2BgW6ltVU2qEaflBjWDMXx%2B6QSW3d3V2L7egbIU%2Fu7q%2FDjhMwgrLT1ezup8glz%2B2alA%2BQfcPgFVE%2FeYaL2vXsCoXON%2FNTfITteIfLiW5TPKYnPXsxRgJlx7stA3if3ylZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f4280f0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/jquery-3.4.1.js

104.21.38.198

200 OK

0 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/jquery-3.4.1.js
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /global_mcafee_4/jquery-3.4.1.js HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: application/javascript
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: W/"61f94e78-4472c"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BNpKWNFMzm7VBU3DvOohSTa6wLTN0SVxgmkwwqqjASQZr40M7uTGnlgimsQE8Z2X7zZi%2FXxXWXuPWm6SBo8budh2bAvE0oTpAjwZNYb9R1ffir1D4ZfNRcPq%2B0sDkLVJvWmrT%2B%2BgoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f4180a0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

zoomstreakstream.com/global_mcafee_4/javascript.js

104.21.38.198

200 OK

0 B

URL HTTP/2
zoomstreakstream.com/global_mcafee_4/javascript.js
IP
104.21.38.198:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /global_mcafee_4/javascript.js HTTP/1.1
Host: zoomstreakstream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Sat, 24 Sep 2022 13:57:46 GMT
content-type: application/javascript
last-modified: Tue, 01 Feb 2022 15:15:04 GMT
etag: W/"61f94e78-5a5"
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pDPBlpNJMd3Ag5C6H2lKLcc1Zes3haEBMwVcWOK6M9JGdo9QFQbNJ1KzR6d9PmDFAuFsPFZdBOspyoLAaHjbW%2B4ovBGKC1V1sMovJT39tT4u%2B8UNZ8AMCETfqWy51iuj%2B%2BOm8ifMJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc07f428110b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (42)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size