urlquery - report: xlld.totalsecurityguardplus.site/c/f887d54b65766323?clickid={conversion}&bid={bid}&s1={s1}&s3={s3}&s4={pubfeed}&s5={subid}&s6={banner}&s7={campaign}&s8={conversion}&sid1={sid1}&aff_sub2={aff_sub2}&ac={ac}&sa={pubfeed}-{subid}&source_id2={source

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
translate.googleapis.com (1)	1005	2012-05-31 07:21:21 UTC	2023-01-14 20:07:13 UTC	142.250.74.74
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2023-01-14 17:20:53 UTC	34.213.53.184
www.gstatic.com (2)	0	2012-05-29 15:36:17 UTC	2023-01-14 08:50:15 UTC	216.58.211.3	Domain (gstatic.com) ranked at: 540
cdnjs.cloudflare.com (1)	235	2012-05-23 12:49:49 UTC	2023-01-14 17:52:54 UTC	104.17.25.14
ocsp.pki.goog (5)	175	2017-06-14 07:23:31 UTC	2023-01-14 04:09:08 UTC	216.58.211.3
translate.google.com (1)	1156	2012-05-30 01:30:32 UTC	2023-01-14 17:23:26 UTC	142.250.74.110
xlld.totalsecurityguardplus.site (1)	0	2023-01-08 14:00:58 UTC	2023-01-15 05:00:25 UTC	52.51.27.131	Unknown ranking
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2023-01-14 04:09:27 UTC	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2023-01-14 04:10:02 UTC	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2023-01-14 04:11:26 UTC	34.117.237.239
cdn-adef.akamaized.net (33)	125719	2018-02-06 07:56:01 UTC	2023-01-14 12:00:45 UTC	23.36.76.194
stormtrk.com (1)	289095	2019-05-17 18:09:53 UTC	2023-01-14 12:00:46 UTC	104.26.5.120
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2023-01-14 04:09:20 UTC	34.120.237.76
r3.o.lencr.org (8)	344	2020-12-02 08:52:13 UTC	2023-01-14 04:09:08 UTC	23.36.76.226
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2023-01-14 13:02:18 UTC	93.184.220.29
cdn.stfilecamp.com (2)	400667	2021-09-06 15:32:03 UTC	2023-01-14 12:00:46 UTC	205.185.216.10

Scan Date	Severity	Indicator	Comment
2023-01-15	2	cdn.stfilecamp.com/stormtrk.js	Phishing

Date	UQ / IDS / BL	URL	IP
2023-03-19 12:00:46 +0000	0 - 0 - 10	www.fulltimesecurityguard.com/c/623dae445ecaf24d	52.51.27.131
2023-03-19 12:00:44 +0000	0 - 0 - 1	tre.yourlocaldatabasesecurity.site/c/a1b46786 (...)	52.51.27.131
2023-03-19 08:01:01 +0000	0 - 0 - 2	www.mydailysecuritysupport.com/c/0a06560e0178 (...)	52.51.27.131
2023-03-18 20:00:43 +0000	0 - 0 - 10	www.fulltimesecurityguard.com/c/623dae445ecaf24d	52.51.27.131
2023-03-18 14:00:42 +0000	0 - 0 - 9	www.fulltimesecurityguard.com/c/623dae445ecaf24d	52.51.27.131

Date	UQ / IDS / BL	URL	IP
2023-03-21 07:20:03 +0000	0 - 0 - 1	approvelogin.com/halifax/Login.php	3.130.204.160
2023-03-21 07:18:28 +0000	0 - 0 - 1	maiegall.com/wp-content/themes/primer/templat (...)	52.211.236.219
2023-03-21 07:17:41 +0000	0 - 2 - 0	n9ahp.app.link/8L47Gwviiyb	54.230.111.23
2023-03-21 07:17:26 +0000	0 - 0 - 2	dpd.securestudies.com/packages/RI1034/Content (...)	54.230.111.15
2023-03-21 07:16:14 +0000	0 - 0 - 2	www.eservicebits.com/landingpages/a8a856c0-30 (...)	54.230.111.129

Date	UQ / IDS / BL	URL	IP
2023-01-15 06:00:43 +0000	18 - 0 - 1	xlld.totalsecurityguardplus.site/c/f887d54b65 (...)	52.51.27.131
2023-01-14 12:00:56 +0000	0 - 0 - 2	xlld.totalsecurityguardplus.site/c/cd386817d9 (...)	52.51.27.131
2023-01-14 07:00:49 +0000	0 - 0 - 2	xlld.totalsecurityguardplus.site/c/cd386817d9 (...)	52.51.27.131

Date	UQ / IDS / BL	URL	IP
2023-01-29 03:01:16 +0000	0 - 0 - 3	www.mydailysecuritysupport.com/c/0a06560e0178 (...)	52.51.27.131
2023-01-18 20:01:11 +0000	0 - 0 - 3	www.mydailysecuritysupport.com/c/0a06560e0178 (...)	52.51.27.131
2023-01-05 10:04:46 +0000	0 - 0 - 3	vvb.totalhighleveldefence.site/c/35ccf697d02b (...)	52.51.27.131
2022-12-23 07:01:05 +0000	0 - 0 - 2	www.mydailysecuritysupport.com/c/0a06560e0178 (...)	52.51.27.131
2022-12-02 06:38:01 +0000	13 - 0 - 3	opl.yourdatadefencebulwark.site/c/9faa65fd285 (...)	52.51.27.131

Request	Response
GET /c/f887d54b65766323?clickid={conversion}&bid={bid}&s1={s1}&s3={s3}&s4={pubfeed}&s5={subid}&s6={banner}&s7={campaign}&s8={conversion}&sid1={sid1}&aff_sub2={aff_sub2}&ac={ac}&sa={pubfeed}-{subid}&source_id2={source_id2}&sub1={sub1} HTTP/1.1 Host: xlld.totalsecurityguardplus.site User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: xlld.totalsecurityguardplus.site/c/f887d54b65766323?cli (...) FQDN: xlld.totalsecurityguardplus.site IP: 52.51.27.131 HASH: 5e3a9c85c4feea4327eb7df03631f5742c32c6c6203ea2c4aa636a67c2277ae6 52.51.27.131 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Server: nginx Date: Sun, 15 Jan 2023 06:00:32 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: unique_id=63c396800005cb81; Path=/; Expires=Thu, 16 Mar 2023 06:00:32 GMT unique_id2=63c396800005d590; Path=/; Expires=Sat, 15 Apr 2023 06:00:32 GMT impression=; Path=/; Expires=Sun, 15 Jan 2023 06:00:32 GMT 63c396800005d590_sl=[268852]; Path=/; Expires=Sun, 29 Jan 2023 06:00:32 GMT Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12092) Size: 2791 Md5: 4a0f182c44a1d761ac2a18c03ba91bab Sha1: 22bb85d76ed0cf8ca18021c586d32bdfd71b00ca Sha256: 5e3a9c85c4feea4327eb7df03631f5742c32c6c6203ea2c4aa636a67c2277ae6
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF" Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13180 Expires: Sun, 15 Jan 2023 09:40:12 GMT Date: Sun, 15 Jan 2023 06:00:32 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2258cd6b877a3aca8f4c84074e65ac4b Sha1: 4e46c70941f8e497e8afc8d078644e7f81761a1c Sha256: faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 619281d3b9753bc6d2845786da75e8566687362769517aacf90f953ffbb8407c 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "619281D3B9753BC6D2845786DA75E8566687362769517AACF90F953FFBB8407C" Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4102 Expires: Sun, 15 Jan 2023 07:08:54 GMT Date: Sun, 15 Jan 2023 06:00:32 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3063227f59d1935298b0620fa7919145 Sha1: 478e1d8bef04b1f95381cac01829c03b6779d420 Sha256: 619281d3b9753bc6d2845786da75e8566687362769517aacf90f953ffbb8407c
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sun, 15 Jan 2023 05:48:58 GMT age: 694 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 761aab02513e7a0ec55ea59109e88b39cbd4e17df0cd2035aa37a4693f22d1f3 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "761AAB02513E7A0EC55EA59109E88B39CBD4E17DF0CD2035AA37A4693F22D1F3" Last-Modified: Thu, 12 Jan 2023 23:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8329 Expires: Sun, 15 Jan 2023 08:19:21 GMT Date: Sun, 15 Jan 2023 06:00:32 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 64765d3d978fd74d7bc47d55d4f097cf Sha1: 92eb3f0d55ba99be28105c0b28ef7dd456817f1f Sha256: 761aab02513e7a0ec55ea59109e88b39cbd4e17df0cd2035aa37a4693f22d1f3
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: or/W8iysP1G/pJfUsNZ9tz9zA0k0no/+t4g3PEe9HaGoz8TNpzOSEIjlq8BgddqSfUv6ESfNnH0= x-amz-request-id: BVAD88ZDM3TVED5Y content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sun, 15 Jan 2023 05:44:02 GMT age: 990 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 7b922915ebf1fa3639b333f994c74f24 Sha1: 144a3f80b98fd0652d4614f24cf6cbbee40f8938 Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sun, 15 Jan 2023 06:00:32 GMT content-length: 12 vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /landings/268852/1665677718/css/style.css?1665677719 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/css/s (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 5f118825faa35f752dd6fd78f44af0426d6ca137bdf908bcd9afd7f0e84d5f65 23.36.76.194 HTTP/1.1 200 OK Content-Type: text/css x-amz-id-2: FpaN53//rbr0/9q9VFEw2t+Qt0F+Buh4Zo7lIIx711GymC17gxLhEFzkthKzAv6ll9RhXhgrTKU= x-amz-request-id: 8619EHGRTGKH91YC Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT ETag: "602331533ab2f855a26a77ab03d6db15" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Sun, 15 Jan 2023 06:00:32 GMT Content-Length: 2010 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text Size: 2010 Md5: 3b1537d38270b368dd4afd3a04a8fc6c Sha1: f4cc570c723401da7ebb11c60c01c65863b270a5 Sha256: 5f118825faa35f752dd6fd78f44af0426d6ca137bdf908bcd9afd7f0e84d5f65
GET /landings/268852/1665677718/css/translate.css?1665677719 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/css/t (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: d4d21bac4b13cac53c0b921c3aa69d1e010a32ad3ccb7498821aa6e763e71c87 23.36.76.194 HTTP/1.1 200 OK Content-Type: text/css x-amz-id-2: 5PegPGCuaG0hulZ4NYVOl/a5OhLNfZC7O7MsfLH6jcCQqW96yIcSYWmfTi6N1fekuaqpq1UNy0E= x-amz-request-id: 861AK1RSEFEPDTEV Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT ETag: "64836db20736f1e7995b43489b4bf0ac" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 655 Date: Sun, 15 Jan 2023 06:00:32 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text Size: 655 Md5: 64836db20736f1e7995b43489b4bf0ac Sha1: a0db33db05acb39dd01d9f19f5eed634682b0ead Sha256: d4d21bac4b13cac53c0b921c3aa69d1e010a32ad3ccb7498821aa6e763e71c87 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/js/main.js?1665677719 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/js/ma (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 05f89d1e5e99f402500a4e7d3178ed1b6c3b0db1f48c2e7ce1ca7702f8a7d87b 23.36.76.194 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: Mbq7Msha2PiGF3xWQjMg4VWmh1oaTa1PX5dltR0eIZlwK5RRQcRd55EtBY9/K4GZzceyxM0CBEM= x-amz-request-id: 86123NC9MPDNB5TY Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT ETag: "b56630c7276ebda1b23e2083b8367691" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Sun, 15 Jan 2023 06:00:32 GMT Content-Length: 883 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text, with very long lines (2060), with no line terminators Size: 883 Md5: 75c7f7a337535ee79147e8068ef8982f Sha1: 88798d1b96c7048770ad87d00c1c0daeb0170745 Sha256: 05f89d1e5e99f402500a4e7d3178ed1b6c3b0db1f48c2e7ce1ca7702f8a7d87b
GET /landings/268852/1665677718/js/site-protect.2.0.js?1665677719 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/js/si (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: bd6d5b382238afd5ee6299972b66f4e22521fe96487dfc620be38e1743d71887 23.36.76.194 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: onD8gCd8O5Gl5usc1MfbtRvY+0uJyU20Q+SFmL5O1bqlelXvwypqe/CmB0VH0pZQPmiZLloKZTA= x-amz-request-id: 8614X84KTZFR7YSA Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT ETag: "311a4a9bfb7699c36f9310aa8484b360" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Sun, 15 Jan 2023 06:00:32 GMT Content-Length: 1073 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text Size: 1073 Md5: 85e3bd021961fdac95655a71435375f5 Sha1: 9d03222c7a2acb3c790270e3f07bebc485759db2 Sha256: bd6d5b382238afd5ee6299972b66f4e22521fe96487dfc620be38e1743d71887
GET /landings/268852/1665677718/js/js.cockie.min.js?1665677719 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/js/js (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 2d1575e9baafcb2f70a5d4ff82e829c3722535c3b9921c0d1baf5b54a384b109 23.36.76.194 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: t/iv6+jzeOicam7m27yoaKT7X2eJ9AiAVKoiAYVE9N63Pw/FpVDnYYkKVXk9i4JM+KPJHH9xEN4= x-amz-request-id: 8619QFW9GSBAE1YF Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT ETag: "aeb03440821eecd362780d1d1f8f4751" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Sun, 15 Jan 2023 06:00:32 GMT Content-Length: 826 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text, with very long lines (1619), with no line terminators Size: 826 Md5: 80f159394b22e099038b584495222009 Sha1: 49a38d579533fb963f8f0f94687b40f65713b8dd Sha256: 2d1575e9baafcb2f70a5d4ff82e829c3722535c3b9921c0d1baf5b54a384b109
GET /landings/268852/1665677718/js/second_back_multi.js?1665677719 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/js/se (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 3be73c0c23bffc4bd19a14a3351ca8b7719bd10bda3ca5807c6661f4211064da 23.36.76.194 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: 9jgAQVwWv7D84QxmnLdKg3c9qt+oBO2GGu/xVSiVSOqFL1nfeIYml1NPJSbR5+jCBidi9xwsNdc= x-amz-request-id: G11RD9Y45HRGJ73N Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT ETag: "12af65fd8656be95d31d144fa257727d" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Sun, 15 Jan 2023 06:00:32 GMT Content-Length: 732 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text Size: 732 Md5: 64bb7cb9f3a6cb788156ff60cf17c587 Sha1: 18e341baa9e99c034dc3b2cff1b7b9d90626082d Sha256: 3be73c0c23bffc4bd19a14a3351ca8b7719bd10bda3ca5807c6661f4211064da
GET /landings/268852/1665677718/js/translate.js?1665677719 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/js/tr (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 5bc3f308bb3236dbb04b2ac5d01905f9081d24827d4cd26c33ec5f716acd8427 23.36.76.194 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: IYOv2nYAy6c6Pt16XIo+QTZIcXSVt/Jlnp6RTQUqgdWFwGVRP90/rwWzXjGxuaSs4Joz5h/xeVA= x-amz-request-id: G11T1D7ET9RPEGEQ Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT ETag: "fcd546809170dd574eb37b989529f69a" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Sun, 15 Jan 2023 06:00:32 GMT Content-Length: 544 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text Size: 544 Md5: 015967e055e606d62302b33ca898240c Sha1: 97a3a854502409b10635b092500bfc5b244642e4 Sha256: 5bc3f308bb3236dbb04b2ac5d01905f9081d24827d4cd26c33ec5f716acd8427
GET /landings/268852/1665677718/js/interactive.js?1665677719 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/js/in (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: d3b8f64254adfb0eebe5a286b58b04702da9b8b09f704f3ef5512ee14c733160 23.36.76.194 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: MQDT+t9QabiW0BSeAXleg+cSFbqkmPKIJALEkIo/kpPLvHaO409H2ZgFIsQeKl/NdCr7hWhj6Xg= x-amz-request-id: 8613A5H4FQBXP6HH Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT ETag: "4556c2fbe499483bd54ee664e83bd0af" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Sun, 15 Jan 2023 06:00:32 GMT Content-Length: 4961 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text, with very long lines (24491), with no line terminators Size: 4961 Md5: e332e3d27c8b834beeb86c7309f642cf Sha1: c09dcf00146664a766d79b84cee7e5c1299f89fb Sha256: d3b8f64254adfb0eebe5a286b58b04702da9b8b09f704f3ef5512ee14c733160
GET /ajax/libs/jquery/3.6.1/jquery.min.js?1665677719 HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min. (...) FQDN: cdnjs.cloudflare.com IP: 104.17.25.14 HASH: 0d4102a2c52171ae32d1b2157118ceef7e18220bc02fbac9ce327a6a99a171df 104.17.25.14 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 date: Sun, 15 Jan 2023 06:00:32 GMT content-length: 27990 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "63091225-6d56" last-modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 2633314 expires: Fri, 05 Jan 2024 06:00:32 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UcaZMa6EZU4HSGpLYD%2Bt72W0lzDuXK1ijTN6m4ladVoENXcwgo6KOpFWdeUaVPUngTdMEJRtCl1Zv9f6aymXf8MhkpUrCgVY%2F68zEopvHC%2B43aMT9SYptNC4%2Fa846UlHIA4INXIm"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 789c644498dfb505-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65447) Size: 27990 Md5: 265d03943a645462854e9444dabeb800 Sha1: a44ef995093ddc5f334a63999d71c65a1d2b6643 Sha256: 0d4102a2c52171ae32d1b2157118ceef7e18220bc02fbac9ce327a6a99a171df
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sun, 15 Jan 2023 05:33:45 GMT age: 1608 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6319 Cache-Control: 'max-age=158059' Date: Sun, 15 Jan 2023 06:00:33 GMT Last-Modified: Sun, 15 Jan 2023 04:15:15 GMT Server: ECS (ska/F705) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: c01ec61f7ca77158f474b3ab519c12fa Sha1: fc82ae0fcd73a83a980b75709a08e65239894e4a Sha256: f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54
GET /multi_push.js?1665677719 HTTP/1.1 Host: cdn.stfilecamp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.stfilecamp.com/multi_push.js?1665677719 FQDN: cdn.stfilecamp.com IP: 205.185.216.10 HASH: cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99 205.185.216.10 HTTP/2 200 OK content-type: text/javascript date: Sun, 15 Jan 2023 06:00:33 GMT cache-control: max-age=3600 content-length: 1072 last-modified: Thu, 07 Jul 2022 14:21:23 GMT accept-ranges: bytes x-rgw-object-type: Normal etag: "a50322f9d3f3fafe3fb02be02285e433" x-amz-request-id: tx000000000000003761fb2-0063c39681-2d9d3fca-sfo3a strict-transport-security: max-age=15552000; includeSubDomains; preload vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin x-sp-metadata: HS256.CJHJjp4GEocBCiRkMmVjMTBjNC0xZDEzLTQ0MzEtODgxOS0wYmMxZmQ4NmU3ZWQQgMPq7NjG+wIaBgiArY6eBiIMOTEuOTAuNDIuMTU0KLm4AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GikSJGZhMjA3N2RiLWNjM2EtNDA4OS05MjQ4LTEwYjNiMWViNWNiORiwCCIaCAISFGNkczAyMC5zazEuaHdjZG4ubmV0GAk=.GJxNbPpcFIYmTYgkE81lWPht27oMWN7qVlWyeYguylE= x-hw: 1673762432.dop232.sk1.t,1673762432.cds205.sk1.hn,1673762433.cds020.sk1.pr X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 1072 Md5: a50322f9d3f3fafe3fb02be02285e433 Sha1: c0a894b3bfa545832c3ad1c2f145005d02e50ac4 Sha256: cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/icon-red.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: c60d95afdfb06b36758c44ee23b82f5c5504f0119a2c86d83c990821e8f5cae6 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: jqIU0BwVciOx0M0SY5P9t2bcd7eJKkXMDHlw5uKqP+zPIzEdZMEutkEjQUOXMArdVoHTsiNGRx4= x-amz-request-id: G11RXD5CDVEHJVCC Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "f460adcdcb62bffc8961d6681d5042be" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 1709 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 40 x 45, 8-bit/color RGBA, non-interlaced\012- data Size: 1709 Md5: f460adcdcb62bffc8961d6681d5042be Sha1: a3c4fcb71daf78ab130938480ace7588ffa16194 Sha256: c60d95afdfb06b36758c44ee23b82f5c5504f0119a2c86d83c990821e8f5cae6
GET /landings/268852/1665677718/images/ico_bl2.gif HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: e91f304cf7409723968740e6363dda01b50acb8e94b5ca05b4a4617666ff095c 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/gif x-amz-id-2: fzOfjn5taO7aaTLWiqr4Ce/2NbpgU0pLi6HPFAQj86nUIz9mRsRjGsVBBm52jGblQFrH8pr+7DM= x-amz-request-id: FWM4ZSE9S5RK86RQ Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "af52e51f42fd0c55bc3cf2c8ece71492" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 1547 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: GIF image data, version 89a, 65 x 80\012- data Size: 1547 Md5: af52e51f42fd0c55bc3cf2c8ece71492 Sha1: 016f83da68ff461a5c6aebcc2a45668317b2f24c Sha256: e91f304cf7409723968740e6363dda01b50acb8e94b5ca05b4a4617666ff095c Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/win_cls.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 2d2b7040bc32b397c3c60d800de9aa7d86404f1874862eba61bdaa21f1523eb7 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: Cf0VAzcm4AT+qbHqq3htuBDaDF1bdhb+P7ANbFu6QO7TMptpNBCvwIrQAIrFNHxErtrdKDUvFbU= x-amz-request-id: G11NV0ZZM3D1W5S2 Last-Modified: Thu, 13 Oct 2022 16:15:20 GMT ETag: "9eb68d2ce05c151bda542a7a6356e22c" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 293 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data Size: 293 Md5: 9eb68d2ce05c151bda542a7a6356e22c Sha1: baeeefe4a7ac657c10a5f081841015de1bcf90dd Sha256: 2d2b7040bc32b397c3c60d800de9aa7d86404f1874862eba61bdaa21f1523eb7 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/ico_gray1.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: rry7W8u8u2J7gZgPvGGAaJ4FHIH3DA93LbqqesFnZgxGrD4rEkr3jSCZAi/0WwmukKkC+7kB568= x-amz-request-id: G11YF4Z48N0B3Q9B Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "e144c3378090087c8ce129a30cb6cb4e" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 364 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data Size: 364 Md5: e144c3378090087c8ce129a30cb6cb4e Sha1: 59da5466551de941d0215e45c54aa2ceaf436be1 Sha256: b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/ico_bl1.gif HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: aa88fa9731a6021cd8c0f80ef76476fd055a9cf0bff3ad9fbefbedbd255e26fa 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/gif x-amz-id-2: LBL2kr3cTWm5OKuFnRbCmvOOWn85SgA924Rzj3AEci09m2nO/Si8w05EMxqlw+GAY82/uYIMaRw= x-amz-request-id: G11Y7C5V9P18GPYX Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "af3aca2036675c5979fb535c5d190f15" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 511 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: GIF image data, version 89a, 80 x 65\012- data Size: 511 Md5: af3aca2036675c5979fb535c5d190f15 Sha1: 70c4f17ef1a2afe0477c84c5d209fbe31760b657 Sha256: aa88fa9731a6021cd8c0f80ef76476fd055a9cf0bff3ad9fbefbedbd255e26fa Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/icon-white.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 8b7a5ce48e7e6a77ba8c97eae67a4556c325b7a80ad8bc1e831d08069e8ed37c 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: oFzDAusA1yUFTq1/NsJSyJNZGLfOAxLcNeIvKEjNofF/V5egpt8kSQ6dp7urFeMwquIGA0bAG8A= x-amz-request-id: FWMDEDMFQ45CCP95 Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "c391e0f03315c1de2f0c3091c1170b38" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 2178 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 73 x 84, 8-bit/color RGBA, non-interlaced\012- data Size: 2178 Md5: c391e0f03315c1de2f0c3091c1170b38 Sha1: 4c6d1e87a69be58cd9fb9acdaee354580a2da1b6 Sha256: 8b7a5ce48e7e6a77ba8c97eae67a4556c325b7a80ad8bc1e831d08069e8ed37c
GET /landings/268852/1665677718/images/cross.gif HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 4e635bdab7a300d0ccb5aac26b4610a07ee1b33643578c1a4308e677d7eb595d 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/gif x-amz-id-2: z0DaK4YnhJiNfmTwwdYKm+b9Jts52SZN6zgtwtQvy9hhqAFAygQi0jG/0dMh4A4z8kGlPjMjPm4= x-amz-request-id: G11JDS8WWYQ452YN Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "45b0c8a1e52d91e8cf84eaf75ebca9a9" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 211 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: GIF image data, version 89a, 29 x 29\012- data Size: 211 Md5: 45b0c8a1e52d91e8cf84eaf75ebca9a9 Sha1: 0e358b8571f9062dedfacd0c31d54179270153cd Sha256: 4e635bdab7a300d0ccb5aac26b4610a07ee1b33643578c1a4308e677d7eb595d Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/protect.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: d00309ba24e28a196d0ce99ced950476954b7435a539e5157556cdb4c23fd310 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: Kz7c6umXQWVdzpdKvq17ZIDmfsOzmo1ooTQkWgz5DCBM5/NKJTZ/Xw6L8i2bRy2E6E4fwqEQt2I= x-amz-request-id: G11XBMWPS484ERFQ Last-Modified: Thu, 13 Oct 2022 16:15:20 GMT ETag: "9979fef59356099c8f41e2248fb3765d" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 70593 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 543 x 300, 8-bit/color RGBA, non-interlaced\012- data Size: 70593 Md5: 9979fef59356099c8f41e2248fb3765d Sha1: b675d4030621b8de6bb823085ff9d9b8613c5f48 Sha256: d00309ba24e28a196d0ce99ced950476954b7435a539e5157556cdb4c23fd310
GET /landings/268852/1665677718/images/win_min.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 2ac27821ba64d645f36e2ad197492d30c11b10a032cc474554679555f4604622 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: R2l0Hw5DTXnCCkNJIq3w1y776QoLhZVPmxKa6hiywTRnsLPkpPaAf9ONU+Sfv/EtTDZRYSQfqH4= x-amz-request-id: G11K8K61AAFGQ38Q Last-Modified: Thu, 13 Oct 2022 16:15:20 GMT ETag: "0bb86caf792dd7d24731c18cd37bb68e" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 128 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data Size: 128 Md5: 0bb86caf792dd7d24731c18cd37bb68e Sha1: dda1e433a0eaf785b2aa2c6214d5e48cb82a3a25 Sha256: 2ac27821ba64d645f36e2ad197492d30c11b10a032cc474554679555f4604622 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/ico_tray3.gif HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: b0d335401c9fd5fac9991ec92edaf7865ff3a491ebe390120936c69796c3b753 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/gif x-amz-id-2: 362vlk4/gNTdRLEWI+G2Wu3vIuX+IEi/Vu6hHXOgRDp3o18oinq8eoNxKXu44B8X+H6FmrSMr84= x-amz-request-id: FWMECNDKMKD6TCZT Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "9ce99ec458daf212f9812a90f3fadd13" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 234 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: GIF image data, version 89a, 16 x 16\012- data Size: 234 Md5: 9ce99ec458daf212f9812a90f3fadd13 Sha1: 9e3041bc91b79a17b52e0fbb6c2d0e2f905d98a1 Sha256: b0d335401c9fd5fac9991ec92edaf7865ff3a491ebe390120936c69796c3b753 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/ico_tray2.gif HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: b65b47a79e32335d9ca35ff59c6975d2b5808f84da0db88d11ce777b33e72ad9 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/gif x-amz-id-2: r7Oo9K5eT7CXsaF4CP91moBRVPSTd7aSiPCqZNfjFoIglCAXGciM2eZ7RnTfTGFv78XiKkSQJwY= x-amz-request-id: FWM2VK5HR5MJK6XZ Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "c10bdec858cb0cf9e6cc5865d5925746" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 377 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: GIF image data, version 89a, 16 x 16\012- data Size: 377 Md5: c10bdec858cb0cf9e6cc5865d5925746 Sha1: 697c095ed5509e5a5af0c5ebf2380662aeffc531 Sha256: b65b47a79e32335d9ca35ff59c6975d2b5808f84da0db88d11ce777b33e72ad9 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/logo-red-full.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 6dbe00201def9dbf69293b028055f8ea0513ef52cb1f2e60212a5061c37d283d 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: lPI6GLumB7VjTdfb8EsCq9LBZob6PKhk3lynVxJ3XyK7qrxoRep0SN/EPBsZQSiQJ7qmKe9yUhE= x-amz-request-id: G11K43CH467XT9P5 Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "63fb2900e5622e4a6cadfd616f84476e" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 7254 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 230 x 64, 8-bit/color RGBA, non-interlaced\012- data Size: 7254 Md5: 63fb2900e5622e4a6cadfd616f84476e Sha1: 60d9f07aa5e9fd0595f00e7ce41eb80a51927f8c Sha256: 6dbe00201def9dbf69293b028055f8ea0513ef52cb1f2e60212a5061c37d283d
GET /landings/268852/1665677718/images/ico_tray1.gif HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 9cce08ab28e94790cf78c87e37f8690acbc6c535e4b43ae7b38506b94538e107 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/gif x-amz-id-2: V+OBzlR+6JRr0gVBhYIXSndncuZ1k7drxfHh1R5Q4KDsl9TTt1ZPWqk0sJOZ8qTZXMKxz88L1QI= x-amz-request-id: G11W6F8XTV2MW4ZQ Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "3ae573d079dcd1d2da4086f2c0c72c45" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 69 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: GIF image data, version 89a, 16 x 16\012- data Size: 69 Md5: 3ae573d079dcd1d2da4086f2c0c72c45 Sha1: e7c9dabec81379373476ed23168dcecb9b8c56aa Sha256: 9cce08ab28e94790cf78c87e37f8690acbc6c535e4b43ae7b38506b94538e107 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/ico_gray2.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: G/2vRL5Yp3n1ZaKhsK5Ngn0ZcuUl11Rz9/r7f/q/DSEtjNwoeuq7kbo9yt7YKpgB3FCu4p/8Kv4= x-amz-request-id: G11T641S197N8EB4 Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "7454c652e0733d92de6c920c2d646ae0" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 349 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data Size: 349 Md5: 7454c652e0733d92de6c920c2d646ae0 Sha1: 34a5bd8c7401f95e346895b0e5ccffbf0e9ad638 Sha256: 44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/logo-red.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: cf56bcceaf23dba6d290e2c6739ac2bab77b36e03c20a48cdbe49bcfe2fb31d0 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: h4ROlWwQXQMHRhvOKJqrJ9o2AtYk3AjSkVmH2k8wnWfKoszozqVA2fKSfcbCFj7aMKeyYaMJxUs= x-amz-request-id: G11KNA6XG3KR4B99 Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "945db2cdbd67e8ad20315672f80c1f18" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 4714 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 230 x 45, 8-bit/color RGBA, non-interlaced\012- data Size: 4714 Md5: 945db2cdbd67e8ad20315672f80c1f18 Sha1: 1d49f3128052594b6b46edc17712e83f62bdb035 Sha256: cf56bcceaf23dba6d290e2c6739ac2bab77b36e03c20a48cdbe49bcfe2fb31d0
GET /landings/268852/1665677718/images/logo-white.svg HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: e4aef0aba15680c1b745414a7c7bc39cdbeda17f1de0c7bf57bf90378b6a5d26 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/svg+xml x-amz-id-2: WzsU5fo1YdSHiU0jhbyukGZYoLhjAWK2CHhGFjKiCFMq8kf1NK2g82KWzfsiuKL9Y6GPLL6ESSE= x-amz-request-id: G11RM0NB9J2CRTQF Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "6afb794723ba525f2c526c9899569924" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 1296 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1296), with no line terminators Size: 1296 Md5: 6afb794723ba525f2c526c9899569924 Sha1: 8921668647cb2e4e8f689abd3f2bb8c9579432a8 Sha256: e4aef0aba15680c1b745414a7c7bc39cdbeda17f1de0c7bf57bf90378b6a5d26 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/ico_bl3.gif HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 9bb88049c3d3f3c172d97246fa148bb725e727847c37e28c3be156be240a0c04 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/gif x-amz-id-2: yuPWqY/PTRqj0wwn+ZSDDaUJ8eYr2aLHqFbdMu6Iw4xmch9syr0Qamgmck+khBERsyhtcPpmkj8= x-amz-request-id: FWM8MJA39H0HZ0JD Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "da9d153375da51a616a7663f1504e3a5" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 949 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: GIF image data, version 89a, 78 x 68\012- data Size: 949 Md5: da9d153375da51a616a7663f1504e3a5 Sha1: bd81fe60fe017bfe79be8c1afed88b659ff166d9 Sha256: 9bb88049c3d3f3c172d97246fa148bb725e727847c37e28c3be156be240a0c04 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /landings/268852/1665677718/images/globe-alpha.png HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/landings/268852/1665677718/image (...) FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: af9a953b12a4994939f45054e31302a7b1f59577f69c21376821cf9b922b414b 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: jmOIawtUQxKQkVFsnR5sm4cr5S5EEyHjNqsJYx4xzkdtIVEQeXfq3nYOQU9PyW3YW35Qa3THuKM= x-amz-request-id: G11H2CMP2A4JG8RX Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT ETag: "bc336a3a0c484d7c65299b9c4af45596" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 302963 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 1440 x 700, 8-bit gray+alpha, non-interlaced\012- data Size: 302963 Md5: bc336a3a0c484d7c65299b9c4af45596 Sha1: 36cb2608b4fef19277220dab7e0cb0a623eee289 Sha256: af9a953b12a4994939f45054e31302a7b1f59577f69c21376821cf9b922b414b
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 216.58.211.3 HASH: de65a926e0a1ce8b9724754564cef8e4bbe7709cef911e5dbd30db03211e6673 216.58.211.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 15 Jan 2023 06:00:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 5ac0e204e812ce8905ac046581ff4e95 Sha1: c0322d4ecff9356cca1a8e55d62e8d2f9540eca7 Sha256: de65a926e0a1ce8b9724754564cef8e4bbe7709cef911e5dbd30db03211e6673
GET /images/favicon.ico HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/images/favicon.ico FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0 23.36.76.194 HTTP/1.1 200 OK Content-Type: image/x-icon x-amz-id-2: mzbDFFn0Yhqdz4XL9s4sX6yByljdNVrKhKiK+UtK4DVRgNzfBI6OtL7EakQiGwqEsC19uC++cQI= x-amz-request-id: 78F19547EBC3B810 Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT ETag: "4cdf3256cd7b8ec3917adb79d6bf457e" Accept-Ranges: bytes Content-Length: 4103 Server: AmazonS3 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data Size: 4103 Md5: 4cdf3256cd7b8ec3917adb79d6bf457e Sha1: bc615337e9223183a126c8fb649774866fb53e69 Sha256: fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /stormtrk.js HTTP/1.1 Host: cdn.stfilecamp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: cdn.stfilecamp.com/stormtrk.js FQDN: cdn.stfilecamp.com IP: 205.185.216.10 HASH: e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a 205.185.216.10 HTTP/2 200 OK content-type: text/javascript date: Sun, 15 Jan 2023 06:00:33 GMT cache-control: max-age=3596 content-length: 6807 last-modified: Sat, 24 Dec 2022 08:48:24 GMT accept-ranges: bytes x-rgw-object-type: Normal etag: "39e5f8ad757fe438c784e8d883e47ab0" x-amz-request-id: tx00000000000001e769014-0063c3967d-2bd116bf-sfo3a strict-transport-security: max-age=15552000; includeSubDomains; preload vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin x-sp-metadata: HS256.CJHJjp4GEocBCiRlODBkZDk2Ny0wNDg1LTQ5NjQtYTllNi1mZTNkMDdlMGNkYWUQgMPq7NjG+wIaBgiBrY6eBiIMOTEuOTAuNDIuMTU0KLm4AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GisIARIkMWQ1ZjcxMDgtZTk5Zi00OWQ4LWEzM2EtODkwZDhhY2ZmNjBiGJc1IhgIAhIUY2RzMDE0LnNrMS5od2Nkbi5uZXQ=.9gIO4LKNRVFe72X7m5UJNda4EOEQssvx9gXAHCJxfDw= x-hw: 1673762433.dop232.sk1.t,1673762433.cds205.sk1.hn,1673762433.cds014.sk1.c X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 6807 Md5: 39e5f8ad757fe438c784e8d883e47ab0 Sha1: 6b2905489485100c83605f43186c5843031e1f3b Sha256: e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a Alerts: Blocklists: - fortinet: Phishing
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: translate.google.com/translate_a/element.js?cb=googleTr (...) FQDN: translate.google.com IP: 142.250.74.110 HASH: c92b4b40d2e76c59a48a57a4d524c75fee12400ff17733e35d163dbd36a0a26c 142.250.74.110 HTTP/2 200 OK content-type: text/javascript; charset=utf-8 cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: Mon, 01 Jan 1990 00:00:00 GMT date: Sun, 15 Jan 2023 06:00:33 GMT cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff set-cookie: CONSENT=PENDING+810; expires=Tue, 14-Jan-2025 06:00:33 GMT; path=/; domain=.google.com; Secure p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 26821 Md5: 11c98223971fa4d66da6160f72e4b07e Sha1: e43378d5f1219407fc2c6624c4b9c318c8a9e878 Sha256: c92b4b40d2e76c59a48a57a4d524c75fee12400ff17733e35d163dbd36a0a26c
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 216.58.211.3 HASH: a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9 216.58.211.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 15 Jan 2023 06:00:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 83579ff88cab4d4d05d4741599104d9c Sha1: fe74c219f8655a4ca36fe397884e55ab63d1288a Sha256: a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
GET /translate_static/css/translateelement.css HTTP/1.1 Host: translate.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: translate.googleapis.com/translate_static/css/translate (...) FQDN: translate.googleapis.com IP: 142.250.74.74 HASH: b9d3a8600d9b6edf9c71b793c42782282ecfb01e2026e0128608b949e91e152c 142.250.74.74 HTTP/2 200 OK content-type: text/css accept-ranges: bytes vary: Accept-Encoding content-encoding: br access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="rosetta" report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]} content-length: 3632 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sun, 15 Jan 2023 05:56:47 GMT expires: Sun, 15 Jan 2023 06:56:47 GMT cache-control: public, max-age=3600 age: 226 last-modified: Mon, 09 Jan 2023 20:58:00 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (22967) Size: 3632 Md5: f7bf2121608909b56672e6398ac2335c Sha1: 864ef3bac46b08ab6609fad23f00d5f09815647d Sha256: b9d3a8600d9b6edf9c71b793c42782282ecfb01e2026e0128608b949e91e152c
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 99mhalLBEAOLTBNweaIFmw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 34.213.53.184 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 34.213.53.184 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 2+yjXxbOX6MYddlCxFkT5CY5U0k= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 216.58.211.3 HASH: a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9 216.58.211.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 15 Jan 2023 06:00:33 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 83579ff88cab4d4d05d4741599104d9c Sha1: fe74c219f8655a4ca36fe397884e55ab63d1288a Sha256: a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
GET /beep.mp3 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: audio/webm,audio/ogg,audio/wav,audio/;q=0.9,application/ogg;q=0.7,video/;q=0.6,/;q=0.5 Accept-Language: en-US,en;q=0.5 Range: bytes=0- Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: audio Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/beep.mp3 FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 23.36.76.194 HTTP/1.1 302 Moved Temporarily Server: AkamaiGHost Content-Length: 0 Location: https://cdn-adef.akamaized.net/404 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /404 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: audio/webm,audio/ogg,audio/wav,audio/;q=0.9,application/ogg;q=0.7,video/;q=0.6,/;q=0.5 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Range: bytes=0- Referer: http://xlld.totalsecurityguardplus.site/ Connection: keep-alive Sec-Fetch-Dest: audio Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/404 FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1 23.36.76.194 HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 134 Date: Sun, 15 Jan 2023 06:00:33 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 134 Md5: 9c7c01b7650d428a3540bd1d22390a2f Sha1: 1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0 Sha256: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 216.58.211.3 HASH: 224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63 216.58.211.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 15 Jan 2023 06:00:34 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 6fc52c452b4176dabdd1a319c5e3fa51 Sha1: e00b78bd1c6b5d71f2987fd9cdc8975804b668ae Sha256: 224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1 Host: www.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.gstatic.com/images/branding/product/1x/translate_24 (...) FQDN: www.gstatic.com IP: 216.58.211.3 HASH: 5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99 216.58.211.3 HTTP/2 200 OK content-type: image/png accept-ranges: bytes vary: Origin cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable" report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} content-length: 846 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sun, 15 Jan 2023 03:58:41 GMT expires: Mon, 15 Jan 2024 03:58:41 GMT cache-control: public, max-age=31536000 last-modified: Thu, 14 Oct 2021 09:08:00 GMT age: 7313 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Size: 846 Md5: e9cd262114358f26b7608b56905185dc Sha1: 6dbde0a96deaab2b529723ce26c62043cf9180ab Sha256: 5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /api/1.0/ping/pong?location=http%3A%2F%2Fxlld.totalsecurityguardplus.site%2Fc%2Ff887d54b65766323%3Fclickid%3D%7Bconversion%7D%26bid%3D%7Bbid%7D%26s1%3D%7Bs1%7D%26s3%3D%7Bs3%7D%26s4%3D%7Bpubfeed%7D%26s5%3D%7Bsubid%7D%26s6%3D%7Bbanner%7D%26s7%3D%7Bcampaign%7D%26s8%3D%7Bconversion%7D%26sid1%3D%7Bsid1%7D%26aff_sub2%3D%7Baff_sub2%7D%26ac%3D%7Bac%7D%26sa%3D%7Bpubfeed%7D-%7Bsubid%7D%26source_id2%3D%7Bsource_id2%7D%26sub1%3D%7Bsub1%7D HTTP/1.1 Host: stormtrk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: http://xlld.totalsecurityguardplus.site Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: stormtrk.com/api/1.0/ping/pong?location=http%3A%2F%2Fxl (...) FQDN: stormtrk.com IP: 104.26.5.120 HASH: 9ec45bb9ca73681f216b91bce118803efeab3afe5c97bb8fae9dd638d41a71aa 104.26.5.120 HTTP/2 200 OK content-type: application/json date: Sun, 15 Jan 2023 06:00:34 GMT access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rMgZTDRP3wSh4Nr4cyvxmZdEvvmDYqFsvggXb8up9SKxihWVaL4NKT%2FMYwuzJIy8q4PkZ%2BZ53wMql3RrYNc4wqlGVr6Ffbp9TvJKWrICWgwLTUrQEc4BvO2DRhDm8A%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 789c644a7dbdb506-OSL content-encoding: br X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (481) Size: 32054 Md5: 75881efab0f6b072ba25e7fc4d6ef67e Sha1: f858e85f467b6bd3aa40042884b45be8555b6662 Sha256: 9ec45bb9ca73681f216b91bce118803efeab3afe5c97bb8fae9dd638d41a71aa
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1 Host: www.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://translate.googleapis.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: www.gstatic.com/images/branding/product/2x/translate_24 (...) FQDN: www.gstatic.com IP: 216.58.211.3 HASH: 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82 216.58.211.3 HTTP/2 200 OK content-type: image/png accept-ranges: bytes vary: Origin cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable" report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} content-length: 1842 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sun, 15 Jan 2023 05:15:42 GMT expires: Mon, 15 Jan 2024 05:15:42 GMT cache-control: public, max-age=31536000 last-modified: Thu, 14 Oct 2021 09:08:00 GMT age: 2692 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data Size: 1842 Md5: c69c796362406f9e11c7f4bf5bb628da Sha1: e489ce95ab56208090868882113d7416abf46775 Sha256: 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 216.58.211.3 HASH: 224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63 216.58.211.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 15 Jan 2023 06:00:34 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 6fc52c452b4176dabdd1a319c5e3fa51 Sha1: e00b78bd1c6b5d71f2987fd9cdc8975804b668ae Sha256: 224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20247 Expires: Sun, 15 Jan 2023 11:38:01 GMT Date: Sun, 15 Jan 2023 06:00:34 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6b6a65d2536cc8f99e68793ae265b595 Sha1: f65e75f8419bd83e26f49def7fa2604db5f77b4d Sha256: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20247 Expires: Sun, 15 Jan 2023 11:38:01 GMT Date: Sun, 15 Jan 2023 06:00:34 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6b6a65d2536cc8f99e68793ae265b595 Sha1: f65e75f8419bd83e26f49def7fa2604db5f77b4d Sha256: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20247 Expires: Sun, 15 Jan 2023 11:38:01 GMT Date: Sun, 15 Jan 2023 06:00:34 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6b6a65d2536cc8f99e68793ae265b595 Sha1: f65e75f8419bd83e26f49def7fa2604db5f77b4d Sha256: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20247 Expires: Sun, 15 Jan 2023 11:38:01 GMT Date: Sun, 15 Jan 2023 06:00:34 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6b6a65d2536cc8f99e68793ae265b595 Sha1: f65e75f8419bd83e26f49def7fa2604db5f77b4d Sha256: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20247 Expires: Sun, 15 Jan 2023 11:38:01 GMT Date: Sun, 15 Jan 2023 06:00:34 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6b6a65d2536cc8f99e68793ae265b595 Sha1: f65e75f8419bd83e26f49def7fa2604db5f77b4d Sha256: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 08b872b4c8dc8d4b5e26d7c5e7985c144dcf45623737e6daf7813b2add8ab013 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11285 x-amzn-requestid: 46c0b124-5916-4067-99af-2fa9812dfb2d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ev-1zHc4oAMFV6Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c311be-3ffbee9348f4351459ed0099;Sampled=0 x-amzn-remapped-date: Sat, 14 Jan 2023 20:34:06 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: xvBnmF39Og8Zbf9xZ0IjC0Kd5cIYRc4ONYqolYdxxmzS8i-K2REYSA== via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google date: Sun, 15 Jan 2023 04:40:16 GMT age: 4818 etag: "7ce177939ceed31dbe137996cace3f71eaab3cf4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11285 Md5: 91a664271b9042ab5a34c1259df6ab93 Sha1: 7ce177939ceed31dbe137996cace3f71eaab3cf4 Sha256: 08b872b4c8dc8d4b5e26d7c5e7985c144dcf45623737e6daf7813b2add8ab013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e68a8bb-322d-4bae-b7c5-1119e3ee275e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 15b949a3524291d6c8bd8ef759d3cdb29d6fafd43f3ffba408f6aa7be7c14e7f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6024 x-amzn-requestid: 0c4e6a89-2fbc-42c8-ae1b-0cf608c134cb x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ewH9tFrJoAMFsVg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c32057-0731faff3ab762d4793376e7;Sampled=0 x-amzn-remapped-date: Sat, 14 Jan 2023 21:36:23 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: pWzVYiC2sHEVtlZzGN8FfxB1K3i14JfYzRn60x18gNP01nzlsEve9A== via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google date: Sat, 14 Jan 2023 21:46:07 GMT age: 29667 etag: "0d0bb45beee28e37376cfc3de11074c6f981ff99" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6024 Md5: 12751079fc17bca8630a1ea2b4334a75 Sha1: 0d0bb45beee28e37376cfc3de11074c6f981ff99 Sha256: 15b949a3524291d6c8bd8ef759d3cdb29d6fafd43f3ffba408f6aa7be7c14e7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22bc3d9c-c641-44bc-8984-14b267d61d21.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 86cb634ee11bcffc4f3ee27a2296391ef30db42fad0ff4175e972f326874f0a3 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10853 x-amzn-requestid: a70e2432-7d3e-444e-af26-660f15ef8fe7 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: eaXlBGe5oAMFqww= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63ba6c86-183d9b5f5c3e966225f0057e;Sampled=0 x-amzn-remapped-date: Sun, 08 Jan 2023 07:11:02 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: tLCxB4qEwDjOsl8MS0ijD_-lB_ejZKF4rRTEcSpszSnBooFTH4E17w== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google date: Sat, 14 Jan 2023 11:54:02 GMT age: 65192 etag: "9fff393bf1bfa3b7343f38377e8c8ba62f1c0330" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10853 Md5: 15d27349999654cef859ce88c7667481 Sha1: 9fff393bf1bfa3b7343f38377e8c8ba62f1c0330 Sha256: 86cb634ee11bcffc4f3ee27a2296391ef30db42fad0ff4175e972f326874f0a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9539 x-amzn-requestid: 33735807-3403-41ee-a488-a3f25f9b12d5 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ewX9XFvoIAMFzMg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c339ee-65def8747314ecb63b000a4c;Sampled=0 x-amzn-remapped-date: Sat, 14 Jan 2023 23:25:34 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: D6FaDcaWbJehldBR7ASM60ey56hQS1H4ZpLlGqI-ptDupfJT-iugfw== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Sun, 15 Jan 2023 05:58:31 GMT age: 123 etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9539 Md5: a23d61d610c7b55d943fcb2636a01b65 Sha1: 82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065 Sha256: 28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7f9fdd3-2b09-4fe5-a079-daa82adc1d39.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e96f690e1fa5b1e54986a02cba764b4e965891553197a6decbea64a91c5dccaf 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4986 x-amzn-requestid: 19aa397e-1b5c-4c3e-be88-a429ca3d2f77 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: enenaH5YoAMF6TQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63bfaafc-210871f97c1c327e73fc25e0;Sampled=0 x-amzn-remapped-date: Thu, 12 Jan 2023 06:38:52 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: bthAkm0KtTHW9QVgchZF-TWemX9R9BsA7N1LMRQbQyD0wCkk2Io9ag== via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google date: Sat, 14 Jan 2023 19:56:42 GMT age: 36232 etag: "1eadbf6f305c19b86e83e570cd94133ff4bf33c1" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4986 Md5: 807e309c0c704608186f4f0be4f40d94 Sha1: 1eadbf6f305c19b86e83e570cd94133ff4bf33c1 Sha256: e96f690e1fa5b1e54986a02cba764b4e965891553197a6decbea64a91c5dccaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd45fb-ae78-4593-88df-aa9d625197e7.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f51879b87cb99b4883f320fe4abe44032968c42e32b88dc5f788b40ddc6494db 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10558 x-amzn-requestid: 46ac11b3-d99b-4dbf-bc92-8ad5d6664669 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: enjB8Hb1oAMF3xQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63bfb20c-2e6a19716318b0650102ba96;Sampled=0 x-amzn-remapped-date: Thu, 12 Jan 2023 07:09:00 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: ihSFjnrsza9aXOhc74WW1VVVigtrhg5xOvTLj_k831G0WOFcXxUZBw== via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Sat, 14 Jan 2023 14:55:32 GMT age: 54302 etag: "4be269ad35497a42bf7fce03d711ddf9496abbb4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10558 Md5: 6f82c507da28e1b4557ea7f2bdf0f7fc Sha1: 4be269ad35497a42bf7fce03d711ddf9496abbb4 Sha256: f51879b87cb99b4883f320fe4abe44032968c42e32b88dc5f788b40ddc6494db
GET / HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/ FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 23.36.76.194 HTTP/1.1 302 Moved Temporarily Server: AkamaiGHost Content-Length: 0 Location: https://cdn-adef.akamaized.net/404 Date: Sun, 15 Jan 2023 06:00:35 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /404 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://xlld.totalsecurityguardplus.site/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/404 FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1 23.36.76.194 HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 134 Date: Sun, 15 Jan 2023 06:00:35 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 134 Md5: 9c7c01b7650d428a3540bd1d22390a2f Sha1: 1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0 Sha256: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1
GET / HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://xlld.totalsecurityguardplus.site/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/ FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 23.36.76.194 HTTP/1.1 302 Moved Temporarily Server: AkamaiGHost Content-Length: 0 Location: https://cdn-adef.akamaized.net/404 Date: Sun, 15 Jan 2023 06:00:38 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: urlquery: - Fraud - Fake AntiVirus / Security software
GET /404 HTTP/1.1 Host: cdn-adef.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://xlld.totalsecurityguardplus.site/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-adef.akamaized.net/404 FQDN: cdn-adef.akamaized.net IP: 23.36.76.194 HASH: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1 23.36.76.194 HTTP/1.1 404 Not Found Content-Type: text/html Content-Length: 134 Date: Sun, 15 Jan 2023 06:00:38 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 134 Md5: 9c7c01b7650d428a3540bd1d22390a2f Sha1: 1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0 Sha256: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1

                                        
                                            GET /c/f887d54b65766323?clickid={conversion}&bid={bid}&s1={s1}&s3={s3}&s4={pubfeed}&s5={subid}&s6={banner}&s7={campaign}&s8={conversion}&sid1={sid1}&aff_sub2={aff_sub2}&ac={ac}&sa={pubfeed}-{subid}&source_id2={source_id2}&sub1={sub1} HTTP/1.1 

                                        
                                            
Host: xlld.totalsecurityguardplus.site

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         52.51.27.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=utf-8

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:32 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Set-Cookie: unique_id=63c396800005cb81; Path=/; Expires=Thu, 16 Mar 2023 06:00:32 GMT
unique_id2=63c396800005d590; Path=/; Expires=Sat, 15 Apr 2023 06:00:32 GMT
impression=; Path=/; Expires=Sun, 15 Jan 2023 06:00:32 GMT
63c396800005d590_sl=[268852]; Path=/; Expires=Sun, 29 Jan 2023 06:00:32 GMT 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12092)

                                                Size:   2791

                                                Md5:    4a0f182c44a1d761ac2a18c03ba91bab

                                                Sha1:   22bb85d76ed0cf8ca18021c586d32bdfd71b00ca

                                                Sha256: 5e3a9c85c4feea4327eb7df03631f5742c32c6c6203ea2c4aa636a67c2277ae6

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "619281D3B9753BC6D2845786DA75E8566687362769517AACF90F953FFBB8407C" 

                                        
                                            
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4102 

                                        
                                            
Expires: Sun, 15 Jan 2023 07:08:54 GMT 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:32 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    3063227f59d1935298b0620fa7919145

                                                Sha1:   478e1d8bef04b1f95381cac01829c03b6779d420

                                                Sha256: 619281d3b9753bc6d2845786da75e8566687362769517aacf90f953ffbb8407c

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "761AAB02513E7A0EC55EA59109E88B39CBD4E17DF0CD2035AA37A4693F22D1F3" 

                                        
                                            
Last-Modified: Thu, 12 Jan 2023 23:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8329 

                                        
                                            
Expires: Sun, 15 Jan 2023 08:19:21 GMT 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:32 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    64765d3d978fd74d7bc47d55d4f097cf

                                                Sha1:   92eb3f0d55ba99be28105c0b28ef7dd456817f1f

                                                Sha256: 761aab02513e7a0ec55ea59109e88b39cbd4e17df0cd2035aa37a4693f22d1f3

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sun, 15 Jan 2023 06:00:32 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /landings/268852/1665677718/js/site-protect.2.0.js?1665677719 HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/javascript

                                        

                                        
                                            
x-amz-id-2: onD8gCd8O5Gl5usc1MfbtRvY+0uJyU20Q+SFmL5O1bqlelXvwypqe/CmB0VH0pZQPmiZLloKZTA= 

                                        
                                            
x-amz-request-id: 8614X84KTZFR7YSA 

                                        
                                            
Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT 

                                        
                                            
ETag: "311a4a9bfb7699c36f9310aa8484b360" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:32 GMT 

                                        
                                            
Content-Length: 1073 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   1073

                                                Md5:    85e3bd021961fdac95655a71435375f5

                                                Sha1:   9d03222c7a2acb3c790270e3f07bebc485759db2

                                                Sha256: bd6d5b382238afd5ee6299972b66f4e22521fe96487dfc620be38e1743d71887

                                        
                                            GET /landings/268852/1665677718/js/second_back_multi.js?1665677719 HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/javascript

                                        

                                        
                                            
x-amz-id-2: 9jgAQVwWv7D84QxmnLdKg3c9qt+oBO2GGu/xVSiVSOqFL1nfeIYml1NPJSbR5+jCBidi9xwsNdc= 

                                        
                                            
x-amz-request-id: G11RD9Y45HRGJ73N 

                                        
                                            
Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT 

                                        
                                            
ETag: "12af65fd8656be95d31d144fa257727d" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:32 GMT 

                                        
                                            
Content-Length: 732 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   732

                                                Md5:    64bb7cb9f3a6cb788156ff60cf17c587

                                                Sha1:   18e341baa9e99c034dc3b2cff1b7b9d90626082d

                                                Sha256: 3be73c0c23bffc4bd19a14a3351ca8b7719bd10bda3ca5807c6661f4211064da

                                        
                                            GET /landings/268852/1665677718/js/interactive.js?1665677719 HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/javascript

                                        

                                        
                                            
x-amz-id-2: MQDT+t9QabiW0BSeAXleg+cSFbqkmPKIJALEkIo/kpPLvHaO409H2ZgFIsQeKl/NdCr7hWhj6Xg= 

                                        
                                            
x-amz-request-id: 8613A5H4FQBXP6HH 

                                        
                                            
Last-Modified: Thu, 13 Oct 2022 16:15:22 GMT 

                                        
                                            
ETag: "4556c2fbe499483bd54ee664e83bd0af" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:32 GMT 

                                        
                                            
Content-Length: 4961 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (24491), with no line terminators

                                                Size:   4961

                                                Md5:    e332e3d27c8b834beeb86c7309f642cf

                                                Sha1:   c09dcf00146664a766d79b84cee7e5c1299f89fb

                                                Sha256: d3b8f64254adfb0eebe5a286b58b04702da9b8b09f704f3ef5512ee14c733160

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sun, 15 Jan 2023 05:33:45 GMT 

                                        
                                            
age: 1608 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET /landings/268852/1665677718/images/icon-white.png HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
x-amz-id-2: oFzDAusA1yUFTq1/NsJSyJNZGLfOAxLcNeIvKEjNofF/V5egpt8kSQ6dp7urFeMwquIGA0bAG8A= 

                                        
                                            
x-amz-request-id: FWMDEDMFQ45CCP95 

                                        
                                            
Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT 

                                        
                                            
ETag: "c391e0f03315c1de2f0c3091c1170b38" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Length: 2178 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:33 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 73 x 84, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   2178

                                                Md5:    c391e0f03315c1de2f0c3091c1170b38

                                                Sha1:   4c6d1e87a69be58cd9fb9acdaee354580a2da1b6

                                                Sha256: 8b7a5ce48e7e6a77ba8c97eae67a4556c325b7a80ad8bc1e831d08069e8ed37c

                                        
                                            GET /landings/268852/1665677718/images/protect.png HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
x-amz-id-2: Kz7c6umXQWVdzpdKvq17ZIDmfsOzmo1ooTQkWgz5DCBM5/NKJTZ/Xw6L8i2bRy2E6E4fwqEQt2I= 

                                        
                                            
x-amz-request-id: G11XBMWPS484ERFQ 

                                        
                                            
Last-Modified: Thu, 13 Oct 2022 16:15:20 GMT 

                                        
                                            
ETag: "9979fef59356099c8f41e2248fb3765d" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Length: 70593 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:33 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 543 x 300, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   70593

                                                Md5:    9979fef59356099c8f41e2248fb3765d

                                                Sha1:   b675d4030621b8de6bb823085ff9d9b8613c5f48

                                                Sha256: d00309ba24e28a196d0ce99ced950476954b7435a539e5157556cdb4c23fd310

                                        
                                            GET /landings/268852/1665677718/images/logo-red-full.png HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
x-amz-id-2: lPI6GLumB7VjTdfb8EsCq9LBZob6PKhk3lynVxJ3XyK7qrxoRep0SN/EPBsZQSiQJ7qmKe9yUhE= 

                                        
                                            
x-amz-request-id: G11K43CH467XT9P5 

                                        
                                            
Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT 

                                        
                                            
ETag: "63fb2900e5622e4a6cadfd616f84476e" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Length: 7254 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:33 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 230 x 64, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   7254

                                                Md5:    63fb2900e5622e4a6cadfd616f84476e

                                                Sha1:   60d9f07aa5e9fd0595f00e7ce41eb80a51927f8c

                                                Sha256: 6dbe00201def9dbf69293b028055f8ea0513ef52cb1f2e60212a5061c37d283d

                                        
                                            GET /landings/268852/1665677718/images/globe-alpha.png HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
x-amz-id-2: jmOIawtUQxKQkVFsnR5sm4cr5S5EEyHjNqsJYx4xzkdtIVEQeXfq3nYOQU9PyW3YW35Qa3THuKM= 

                                        
                                            
x-amz-request-id: G11H2CMP2A4JG8RX 

                                        
                                            
Last-Modified: Thu, 13 Oct 2022 16:15:21 GMT 

                                        
                                            
ETag: "bc336a3a0c484d7c65299b9c4af45596" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Length: 302963 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:33 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 1440 x 700, 8-bit gray+alpha, non-interlaced\012- data

                                                Size:   302963

                                                Md5:    bc336a3a0c484d7c65299b9c4af45596

                                                Sha1:   36cb2608b4fef19277220dab7e0cb0a623eee289

                                                Sha256: af9a953b12a4994939f45054e31302a7b1f59577f69c21376821cf9b922b414b

                                        
                                            GET /images/favicon.ico HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/x-icon

                                        

                                        
                                            
x-amz-id-2: mzbDFFn0Yhqdz4XL9s4sX6yByljdNVrKhKiK+UtK4DVRgNzfBI6OtL7EakQiGwqEsC19uC++cQI= 

                                        
                                            
x-amz-request-id: 78F19547EBC3B810 

                                        
                                            
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT 

                                        
                                            
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Content-Length: 4103 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:33 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   4103

                                                Md5:    4cdf3256cd7b8ec3917adb79d6bf457e

                                                Sha1:   bc615337e9223183a126c8fb649774866fb53e69

                                                Sha256: fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0

                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 

                                        
                                            
Host: translate.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.110

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/javascript; charset=utf-8

                                        

                                        
                                            
cache-control: no-cache, no-store, max-age=0, must-revalidate 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Mon, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
date: Sun, 15 Jan 2023 06:00:33 GMT 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy: same-origin-allow-popups 

                                        
                                            
content-encoding: gzip 

                                        
                                            
server: ESF 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
x-frame-options: SAMEORIGIN 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
set-cookie: CONSENT=PENDING+810; expires=Tue, 14-Jan-2025 06:00:33 GMT; path=/; domain=.google.com; Secure 

                                        
                                            
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   26821

                                                Md5:    11c98223971fa4d66da6160f72e4b07e

                                                Sha1:   e43378d5f1219407fc2c6624c4b9c318c8a9e878

                                                Sha256: c92b4b40d2e76c59a48a57a4d524c75fee12400ff17733e35d163dbd36a0a26c

                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 

                                        
                                            
Host: translate.googleapis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.74

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-encoding: br 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy: same-origin; report-to="rosetta" 

                                        
                                            
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]} 

                                        
                                            
content-length: 3632 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Sun, 15 Jan 2023 05:56:47 GMT 

                                        
                                            
expires: Sun, 15 Jan 2023 06:56:47 GMT 

                                        
                                            
cache-control: public, max-age=3600 

                                        
                                            
age: 226 

                                        
                                            
last-modified: Mon, 09 Jan 2023 20:58:00 GMT 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (22967)

                                                Size:   3632

                                                Md5:    f7bf2121608909b56672e6398ac2335c

                                                Sha1:   864ef3bac46b08ab6609fad23f00d5f09815647d

                                                Sha256: b9d3a8600d9b6edf9c71b793c42782282ecfb01e2026e0128608b949e91e152c

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         216.58.211.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:33 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    83579ff88cab4d4d05d4741599104d9c

                                                Sha1:   fe74c219f8655a4ca36fe397884e55ab63d1288a

                                                Sha256: a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9

                                        
                                            GET /404 HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Range: bytes=0- 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: audio 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Content-Length: 134 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:33 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   134

                                                Md5:    9c7c01b7650d428a3540bd1d22390a2f

                                                Sha1:   1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0

                                                Sha256: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1

                                        
                                            GET /images/branding/product/1x/translate_24dp.png HTTP/1.1 

                                        
                                            
Host: www.gstatic.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         216.58.211.3

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Origin 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable" 

                                        
                                            
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} 

                                        
                                            
content-length: 846 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Sun, 15 Jan 2023 03:58:41 GMT 

                                        
                                            
expires: Mon, 15 Jan 2024 03:58:41 GMT 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
last-modified: Thu, 14 Oct 2021 09:08:00 GMT 

                                        
                                            
age: 7313 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   846

                                                Md5:    e9cd262114358f26b7608b56905185dc

                                                Sha1:   6dbde0a96deaab2b529723ce26c62043cf9180ab

                                                Sha256: 5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99

                                        
                                            GET /images/branding/product/2x/translate_24dp.png HTTP/1.1 

                                        
                                            
Host: www.gstatic.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://translate.googleapis.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         216.58.211.3

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Origin 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable" 

                                        
                                            
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} 

                                        
                                            
content-length: 1842 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Sun, 15 Jan 2023 05:15:42 GMT 

                                        
                                            
expires: Mon, 15 Jan 2024 05:15:42 GMT 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
last-modified: Thu, 14 Oct 2021 09:08:00 GMT 

                                        
                                            
age: 2692 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   1842

                                                Md5:    c69c796362406f9e11c7f4bf5bb628da

                                                Sha1:   e489ce95ab56208090868882113d7416abf46775

                                                Sha256: 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" 

                                        
                                            
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=20247 

                                        
                                            
Expires: Sun, 15 Jan 2023 11:38:01 GMT 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:34 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    6b6a65d2536cc8f99e68793ae265b595

                                                Sha1:   f65e75f8419bd83e26f49def7fa2604db5f77b4d

                                                Sha256: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" 

                                        
                                            
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=20247 

                                        
                                            
Expires: Sun, 15 Jan 2023 11:38:01 GMT 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:34 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    6b6a65d2536cc8f99e68793ae265b595

                                                Sha1:   f65e75f8419bd83e26f49def7fa2604db5f77b4d

                                                Sha256: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9" 

                                        
                                            
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=20247 

                                        
                                            
Expires: Sun, 15 Jan 2023 11:38:01 GMT 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:34 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    6b6a65d2536cc8f99e68793ae265b595

                                                Sha1:   f65e75f8419bd83e26f49def7fa2604db5f77b4d

                                                Sha256: 94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8e68a8bb-322d-4bae-b7c5-1119e3ee275e.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6024 

                                        
                                            
x-amzn-requestid: 0c4e6a89-2fbc-42c8-ae1b-0cf608c134cb 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ewH9tFrJoAMFsVg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63c32057-0731faff3ab762d4793376e7;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 14 Jan 2023 21:36:23 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: pWzVYiC2sHEVtlZzGN8FfxB1K3i14JfYzRn60x18gNP01nzlsEve9A== 

                                        
                                            
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 14 Jan 2023 21:46:07 GMT 

                                        
                                            
age: 29667 

                                        
                                            
etag: "0d0bb45beee28e37376cfc3de11074c6f981ff99" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6024

                                                Md5:    12751079fc17bca8630a1ea2b4334a75

                                                Sha1:   0d0bb45beee28e37376cfc3de11074c6f981ff99

                                                Sha256: 15b949a3524291d6c8bd8ef759d3cdb29d6fafd43f3ffba408f6aa7be7c14e7f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9539 

                                        
                                            
x-amzn-requestid: 33735807-3403-41ee-a488-a3f25f9b12d5 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ewX9XFvoIAMFzMg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63c339ee-65def8747314ecb63b000a4c;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 14 Jan 2023 23:25:34 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: D6FaDcaWbJehldBR7ASM60ey56hQS1H4ZpLlGqI-ptDupfJT-iugfw== 

                                        
                                            
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 15 Jan 2023 05:58:31 GMT 

                                        
                                            
age: 123 

                                        
                                            
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9539

                                                Md5:    a23d61d610c7b55d943fcb2636a01b65

                                                Sha1:   82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065

                                                Sha256: 28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd45fb-ae78-4593-88df-aa9d625197e7.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10558 

                                        
                                            
x-amzn-requestid: 46ac11b3-d99b-4dbf-bc92-8ad5d6664669 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: enjB8Hb1oAMF3xQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63bfb20c-2e6a19716318b0650102ba96;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 12 Jan 2023 07:09:00 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: ihSFjnrsza9aXOhc74WW1VVVigtrhg5xOvTLj_k831G0WOFcXxUZBw== 

                                        
                                            
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 14 Jan 2023 14:55:32 GMT 

                                        
                                            
age: 54302 

                                        
                                            
etag: "4be269ad35497a42bf7fce03d711ddf9496abbb4" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10558

                                                Md5:    6f82c507da28e1b4557ea7f2bdf0f7fc

                                                Sha1:   4be269ad35497a42bf7fce03d711ddf9496abbb4

                                                Sha256: f51879b87cb99b4883f320fe4abe44032968c42e32b88dc5f788b40ddc6494db

                                        
                                            GET /404 HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Content-Length: 134 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:35 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   134

                                                Md5:    9c7c01b7650d428a3540bd1d22390a2f

                                                Sha1:   1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0

                                                Sha256: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1

                                        
                                            GET /404 HTTP/1.1 

                                        
                                            
Host: cdn-adef.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: http://xlld.totalsecurityguardplus.site/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         23.36.76.194

                                        
                                            HTTP/1.1 404 Not Found 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Content-Length: 134 

                                        
                                            
Date: Sun, 15 Jan 2023 06:00:38 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   134

                                                Md5:    9c7c01b7650d428a3540bd1d22390a2f

                                                Sha1:   1de74307526c98f84fe5ef2f7dce7ae7c1f77dd0

                                                Sha256: 08c97b6bb3dda74ce86e43cfe75fe216618aa8d1f1e04fa9fc5ef57d3b1a69e1

URL	xlld.totalsecurityguardplus.site/c/f887d54b65766323?clickid={conversion}&bid={bid}&s1={s1}&s3={s3}&s4={pubfeed}&s5={subid}&s6={banner}&s7={campaign}&s8={conversion}&sid1={sid1}&aff_sub2={aff_sub2}&ac={ac}&sa={pubfeed}-{subid}&source_id2={source_id2}&sub1={sub1}
IP	52.51.27.131 (Ireland)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-01-15 06:00:43 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	18 Fraud - Fake AntiVirus / Security software
Tags	fake_software fraud

Overview

Domain Summary (16)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.51.27.131

Last 5 reports on ASN: AMAZON-02

Last 3 reports on domain: totalsecurityguardplus.site

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (11)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (67)

Overview

Domain Summary (16)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.51.27.131

Last 5 reports on ASN: AMAZON-02

Last 3 reports on domain: totalsecurityguardplus.site

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (11)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (67)

Network Intrusion Detection Systems