r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12205
Expires: Fri, 27 Jan 2023 08:56:28 GMT
Date: Fri, 27 Jan 2023 05:33:03 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9149
Expires: Fri, 27 Jan 2023 08:05:32 GMT
Date: Fri, 27 Jan 2023 05:33:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 04:35:19 GMT
content-type: application/json
age: 3464
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15791
Expires: Fri, 27 Jan 2023 09:56:14 GMT
Date: Fri, 27 Jan 2023 05:33:03 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YcNSRIKWoYjdNpg1mmrybBj/zI3kgHddFRBcE8JxGAereWpV0w4wjgIRAEXqf8aTflaHFggd0lM=
x-amz-request-id: 02T8QV0C95A0GTXH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 04:49:16 GMT
age: 2627
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 05:33:03 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/5.14.0/css/all.min.css
104.17.24.14200 OK 10 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/5.14.0/css/all.min.css
IP 104.17.24.14:0
File type ASCII text, with very long lines (58749)
Hash fd91519379203e4f5d95a93f2997019b
806d29dabc59c13f96d58a1b6b0412c227bbfedf
48fdb6e3181b07a35045c83b2ab1cd884bbadf0d6e7edade1259d56b7c79bacf
GET /ajax/libs/font-awesome/5.14.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: text/css; charset=utf-8
content-length: 10391
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f0f47d3-e637"
last-modified: Wed, 15 Jul 2020 18:15:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 17841411
expires: Wed, 17 Jan 2024 05:33:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bCxbhKcmg4HNw%2BzwUnczYIk12DiQKoXa5vsU9qT1%2BvUzTzgTq35guWB%2B2d0sBypw80j%2FkPQp8OrB%2Fu9u%2Fbu8%2F%2BsqOQofv44CZFfAYLAijaBrpulG46ogXgv73Q%2FBDCLXjAgjcb%2Bk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78ff1c842e0f0afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.filescan.io/styles.eff1423b479252d4.css
104.26.14.230200 OK 46 kB URL HTTP/2 www.filescan.io/styles.eff1423b479252d4.css
IP 104.26.14.230:0
File type Unicode text, UTF-8 text, with very long lines (65403)
Hash 15f00ddf446f9126ce1f26033c88afa7
0e9b5b79440353fa60478726a087474a4594f666
d9047731627ff9182fe8afdc41e687b044c3953a6172f2fbd8919e1b0f3c796a
GET /styles.eff1423b479252d4.css HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: text/css
cf-bgj: minify
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-a7b4"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mHyvLscvVzSKl%2FCFnbCe6CHN5tqLx0h7GRycEtgH%2FjOmNrIHHuGgYnhBw%2BbMBasHQxc9WyuZZOs5sylw5hhrRPCkl8%2B0GqQFa2F4geYZ3QtUZbbgjgurVjtDKK7xUKySFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c84096cb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 2ebcc7cd4c50e87a984668828c1e612e
f693d36335f333e3647f9fb2460e34dd73e17421
27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 04:41:40 GMT
age: 3084
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 82e3abc4a7b17efedca67cf215f4bb60
e20e55d87591af7db3a4bcfc429048f85e389b85
df8901d4d87686fb11e17986f5d53cf513f675b4dd71f0a2e35c7ffbefa7fb9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-NKWFYZ6END
142.250.74.168200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-NKWFYZ6END
IP 142.250.74.168:0
File type ASCII text, with very long lines (19467)
Hash 44703cec5f4ffe34b9ed8560810bc7db
0ac480ade6c905484438e9e59eda265729fb191c
704b5f6a0fde55517b6f4fdfcf52d59279b012fa758f1fa93ffadc87b9263305
GET /gtag/js?id=G-NKWFYZ6END HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 27 Jan 2023 05:33:04 GMT
expires: Fri, 27 Jan 2023 05:33:04 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78206
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash c398b6b39d11d25b8ae9bc5cd94a1c98
640aa8c399ced71d0c2a9f5a90fbaf091b01d642
a6f07f7c6a4746acc25457c726701df33120628dfb578bc4982448d8efee5855
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A6F07F7C6A4746ACC25457C726701DF33120628DFB578BC4982448D8EFEE5855"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11403
Expires: Fri, 27 Jan 2023 08:43:07 GMT
Date: Fri, 27 Jan 2023 05:33:04 GMT
Connection: keep-alive
www.filescan.io/main.ccd195925fd0a689.esm.js
104.26.14.230200 OK 320 kB URL HTTP/2 www.filescan.io/main.ccd195925fd0a689.esm.js
IP 104.26.14.230:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 320 kB (319518 bytes)
Hash f509097106e151c3a9538e4d36d1b2ef
b02953570552eb0b626a2ab4fb815ba802d9151f
b90e6f92278c93eeb51a315838fcc1d7056d8e4fd14b65995c530ae691462f3a
GET /main.ccd195925fd0a689.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=887936
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-41a73"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wF3G%2FZJVEJvF65Urf6OhTzwTL%2FpG4vbA%2BLW9V1UQCC5uYmTdyOyB1ZREeJ4YL7I%2FH%2BNV%2FlQfmLHP9kld5XrEljWmgv60Ig4W0r8B8W3nD79Hohd2BAawSKBv5GVEQ2eFvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c840978b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 82e3abc4a7b17efedca67cf215f4bb60
e20e55d87591af7db3a4bcfc429048f85e389b85
df8901d4d87686fb11e17986f5d53cf513f675b4dd71f0a2e35c7ffbefa7fb9e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:33:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.filescan.io/api/system/logo?theme=light&type=top_menu&time=1671033841
104.26.14.230200 OK 106 kB URL HTTP/2 www.filescan.io/api/system/logo?theme=light&type=top_menu&time=1671033841
IP 104.26.14.230:0
File type PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced\012- data
Size 106 kB (105965 bytes)
Hash 10b0e82e74b4fdfa27ac09e9b82cd1e5
d9bfbd7134f6f1c38147cf25916963ef82092294
0a0fe2021298229ccc4e74bf9f5abf8230837720ff5fd584c096e95d1d3f43e8
GET /api/system/logo?theme=light&type=top_menu&time=1671033841 HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: image/png
content-length: 105965
content-disposition: attachment; filename="fsio-owl-blue-transparent.png"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
etag: f7b4874a8e8e4a661d54abf40b9aa6b3
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubdomains;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NY%2FhIf7vCmTsIKnOE8m1ICnKjqiN3U30EEXy3e3jA9oAlfUF7u8HA8f00ASkuq5xvU9PY6k4xjQ4AANVTDHe0OP4c5zWKztYu9oxfIuSV0vwuSWIMdhDI2cDNrndtHBHhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c879bd9b500-OSL
X-Firefox-Spdy: h2
ipapi.co/json/
104.26.9.44200 OK 22 kB IP 104.26.9.44:0
Hash 3d59d761a785b1c6f754e52ca940318b
2614442e5e684e315e7a20feccb14c3b6bc62858
4bd14bafa6eda6acda0b157c6669d9ebc7e264f0486bd4c92a6a3e868e5f7f06
OPTIONS /json/ HTTP/1.1
Host: ipapi.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: no-cookies
Referer: https://www.filescan.io/
Origin: https://www.filescan.io
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: text/html; charset=utf-8
vary: Origin
access-control-allow-origin: https://www.filescan.io
access-control-allow-headers: accept, accept-encoding, authorization, content-type, dnt, origin, user-agent, x-csrftoken, x-requested-with
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R8Os0XNRcEL6BdG8YBGY3n2h%2FbqEgBGrN%2BykG7pcx%2F8MoEeO635zAfDY8h%2BbMFT7BRqOYAlxI1B85eOjfXro0hmwchUCsvXL1p5OGxM6w80A5ly6kjNJJa8d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c889c7a0b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/assets/icons/favicon-16x16.png
104.26.14.230200 OK 1.2 kB URL HTTP/2 www.filescan.io/assets/icons/favicon-16x16.png
IP 104.26.14.230:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash a05c409ff64eb9112e51ad5951d16d59
4249f181db5dbfe0c759b4d6b71f3bace82546f6
9f1e071548fb6a6824294b7ce416a4a51e932999ce1b06765c6d48390fb8d130
GET /assets/icons/favicon-16x16.png HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.1.1502399706.1674797585
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: image/png
content-length: 1204
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
etag: "63c51e66-4b4"
expires: Sat, 25 Feb 2023 06:14:52 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: HIT
age: 83892
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lebX04M60dNIx8EpFiUsvggJp8%2FkU5MdUJ8MOD%2BOPZXpGyE2FaokdsANlvn%2Bj3ue1yh54V2vD3kmiseEn8AlwWGKtb5B8L3gha%2BmGuyalQsw4R3sLUHdNJH2ySBi6T%2F8Aw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ff1c89dd25b500-OSL
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.78200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.78:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 27 Jan 2023 03:45:20 GMT
expires: Fri, 27 Jan 2023 05:45:20 GMT
cache-control: public, max-age=7200
age: 6464
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
104.26.14.230200 OK 36 kB URL HTTP/2 www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
IP 104.26.14.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (422)
Hash 37b82960696822adf64150ed3288a667
c0f0c36a10dcaa4cca38d4ae830c79fb8e60dd6a
aaaf37ec776f973f8bdac7c9079e7be3413a76eccd1830a6ec9502ab966648ac
GET /reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70 HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:03 GMT
content-type: text/html
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
vary: Accept-Encoding
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubdomains;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AIJ8PGmhGCfMdwLcSLCjl2BXr0ZIRgVz1PP6QkQBPIjjEQl0baLDm5n%2FM45Q0OgTRcuL06xIUqs%2FiXcVHHK2oxvDJ9QCEXY71HvlcfQYHB2IAYQ1U%2BEw78KW7W%2FY3QRwdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c81a831b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=587355035&t=pageview&_s=1&dl=https%3A%2F%2Fwww.filescan.io%2Freports%2F969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0%2F25680b12-7356-4830-85f7-60179697ed70%2Foverview&dp=%2Freports%2F969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0%2F25680b12-7356-4830-85f7-60179697ed70&ul=en-us&de=UTF-8&dt=FileScan.IO%20-%20Next-Gen%20Malware%20Analysis%20Platform&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IADAAEABAAAAACAAI~&jid=585534838&gjid=375180795&cid=1502399706.1674797585&tid=UA-198485172-2&_gid=741294704.1674797585&_r=1&_slc=1&z=849101013
142.250.74.78200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=587355035&t=pageview&_s=1&dl=https%3A%2F%2Fwww.filescan.io%2Freports%2F969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0%2F25680b12-7356-4830-85f7-60179697ed70%2Foverview&dp=%2Freports%2F969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0%2F25680b12-7356-4830-85f7-60179697ed70&ul=en-us&de=UTF-8&dt=FileScan.IO%20-%20Next-Gen%20Malware%20Analysis%20Platform&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IADAAEABAAAAACAAI~&jid=585534838&gjid=375180795&cid=1502399706.1674797585&tid=UA-198485172-2&_gid=741294704.1674797585&_r=1&_slc=1&z=849101013
IP 142.250.74.78:0
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=587355035&t=pageview&_s=1&dl=https%3A%2F%2Fwww.filescan.io%2Freports%2F969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0%2F25680b12-7356-4830-85f7-60179697ed70%2Foverview&dp=%2Freports%2F969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0%2F25680b12-7356-4830-85f7-60179697ed70&ul=en-us&de=UTF-8&dt=FileScan.IO%20-%20Next-Gen%20Malware%20Analysis%20Platform&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IADAAEABAAAAACAAI~&jid=585534838&gjid=375180795&cid=1502399706.1674797585&tid=UA-198485172-2&_gid=741294704.1674797585&_r=1&_slc=1&z=849101013 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.filescan.io
Connection: keep-alive
Referer: https://www.filescan.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.filescan.io
date: Fri, 27 Jan 2023 05:33:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 1f4c8e17a668764556ab61c7c31e53c7
ada5ee5917ab9faf3d55a6da1d5bfc3077e42de2
8ac89ed8b6650ea140c2eac1b1dd61f8498e97e278e6bd6debfd803a588e2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:33:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 1f4c8e17a668764556ab61c7c31e53c7
ada5ee5917ab9faf3d55a6da1d5bfc3077e42de2
8ac89ed8b6650ea140c2eac1b1dd61f8498e97e278e6bd6debfd803a588e2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:33:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.filescan.io/api/system/config
104.26.14.230200 OK 1.7 kB URL HTTP/2 www.filescan.io/api/system/config
IP 104.26.14.230:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (2993), with no line terminators
Hash a909350680e5844b0506e480f3e3c5cf
ddad8d92cdc81d8f4a9fc9c48c9adcfa47a7db9e
25d431295a887be7eb7ae8ed8eeb1ec0172a224bb6f855944dcfa096fc4bdea5
GET /api/system/config HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: application/json
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubdomains;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tm07CiHAQtuzYt8Ig%2FdMMscbrcYkieLjHJTtFbXQhYcVcBxFj1o3xAMk0OXq%2FRX%2FM9p07UzGBJOeW9naCp4mjUM1kBvE57%2BmQx%2BCtKceCqh7sh%2B%2BuUwnGkHrSN89sB8BgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c860adcb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-198485172-2&cid=1502399706.1674797585&jid=68959234&gjid=1527275352&_gid=741294704.1674797585&_u=YADAAUABAAAAACAAI~&z=1550950920
173.194.73.154200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-198485172-2&cid=1502399706.1674797585&jid=68959234&gjid=1527275352&_gid=741294704.1674797585&_u=YADAAUABAAAAACAAI~&z=1550950920
IP 173.194.73.154:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-198485172-2&cid=1502399706.1674797585&jid=68959234&gjid=1527275352&_gid=741294704.1674797585&_u=YADAAUABAAAAACAAI~&z=1550950920 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.filescan.io
Connection: keep-alive
Referer: https://www.filescan.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.filescan.io
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 27 Jan 2023 05:33:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 1f4c8e17a668764556ab61c7c31e53c7
ada5ee5917ab9faf3d55a6da1d5bfc3077e42de2
8ac89ed8b6650ea140c2eac1b1dd61f8498e97e278e6bd6debfd803a588e2468
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 05:33:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-NKWFYZ6END>m=2oe1p0&_p=587355035&cid=1502399706.1674797585&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674797584&sct=1&seg=0&dl=https%3A%2F%2Fwww.filescan.io%2Freports%2F969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0%2F25680b12-7356-4830-85f7-60179697ed70%2Foverview&dt=FileScan.IO%20-%20Next-Gen%20Malware%20Analysis%20Platform&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-NKWFYZ6END>m=2oe1p0&_p=587355035&cid=1502399706.1674797585&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674797584&sct=1&seg=0&dl=https%3A%2F%2Fwww.filescan.io%2Freports%2F969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0%2F25680b12-7356-4830-85f7-60179697ed70%2Foverview&dt=FileScan.IO%20-%20Next-Gen%20Malware%20Analysis%20Platform&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-NKWFYZ6END>m=2oe1p0&_p=587355035&cid=1502399706.1674797585&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674797584&sct=1&seg=0&dl=https%3A%2F%2Fwww.filescan.io%2Freports%2F969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0%2F25680b12-7356-4830-85f7-60179697ed70%2Foverview&dt=FileScan.IO%20-%20Next-Gen%20Malware%20Analysis%20Platform&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.filescan.io
Connection: keep-alive
Referer: https://www.filescan.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.filescan.io
date: Fri, 27 Jan 2023 05:33:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2846
Expires: Fri, 27 Jan 2023 06:20:32 GMT
Date: Fri, 27 Jan 2023 05:33:06 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2846
Expires: Fri, 27 Jan 2023 06:20:32 GMT
Date: Fri, 27 Jan 2023 05:33:06 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2846
Expires: Fri, 27 Jan 2023 06:20:32 GMT
Date: Fri, 27 Jan 2023 05:33:06 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2846
Expires: Fri, 27 Jan 2023 06:20:32 GMT
Date: Fri, 27 Jan 2023 05:33:06 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2846
Expires: Fri, 27 Jan 2023 06:20:32 GMT
Date: Fri, 27 Jan 2023 05:33:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde58379f-114f-469a-b64a-4c60841b1a18.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde58379f-114f-469a-b64a-4c60841b1a18.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4b88ea6f29f683c4b46a7487fce35a5
fa64e1287967459f665d337865a2333b4fdc4c33
f0290a9132b343d91426385e31c61cad787b5e82878b5015c13d4c356e387787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde58379f-114f-469a-b64a-4c60841b1a18.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5703
x-amzn-requestid: 39b3ba3a-d049-4555-a04a-e3d55b90478f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1d1F8nIAMFTEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c58-2dc0f52e71e822f71fed1456;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Llt0BnmCEL0H6v4DHYktatbn7H8KeQhNW0AXkP_EOxOmjx8aQuMdiA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 04:45:35 GMT
age: 2851
etag: "fa64e1287967459f665d337865a2333b4fdc4c33"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1695371c247eedad65b4cac82f01215d
50510052f0e22e23f747c761d57cdf72910ac533
aadde426229f04f6a489b87d6949a485b19d4fd035cb244b6094549efc08013f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6394
x-amzn-requestid: 859587bc-081f-4092-8fed-40e3f2bc8ee4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOjE6FJNIAMFz6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf4bb8-28848a07545a0e557f1250b1;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 03:08:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KIQ-V8uU0HwYAPEfXMUw7T2IYlStHuZ0mwWdVFUNf46i6ugVGZm-Bw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 11:50:55 GMT
age: 63731
etag: "50510052f0e22e23f747c761d57cdf72910ac533"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81aa4520-e26c-4be4-877f-1d3af6c27241.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81aa4520-e26c-4be4-877f-1d3af6c27241.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ed3df3868d4a13270faf944f911637a7
1b69b2433956c79510bc4a013648a5fb12882884
e13e2ca5d6552a96eb972936f553937a5aff566eb37f39b0928f15d3eeab617f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81aa4520-e26c-4be4-877f-1d3af6c27241.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11372
x-amzn-requestid: d50f0c0e-a383-419a-a3ca-630d5fd32821
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPAw_E_rIAMF0hQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf7b39-64abe6b72176db7d7b67f315;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 06:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P--KVawXg_IYJa8S3gcxIL5XZZGwRbhclRRRMUFlWmMAqzVus7RdnA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:47:08 GMT
age: 27958
etag: "1b69b2433956c79510bc4a013648a5fb12882884"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 23:01:22 GMT
age: 23504
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7158416f60576804ccff03307319fe
a342f94625e913fa6b8d862a59979f1e3ad80dd1
5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: cc977ea9-c418-4a5a-a13b-c86e16bbe6ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRGPFGL5oAMFiSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d050c6-2d540cac5ca7d4e64cfdb8bc;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 21:42:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uZnA5gkRlZyqamh_n3992G9PlMJa4gJ-mjSOQEysII73dDKLXmeXsg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 12:26:22 GMT
age: 61604
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53bbd20e-50aa-4ce8-8565-a97b3c8ee694.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53bbd20e-50aa-4ce8-8565-a97b3c8ee694.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02c8d9f27e0d17c38a55da6699dfb96e
6804d00e292afc0b7aadb08b11e7650488dacaa2
1ce3b93f1348649ddca495022525daf6d760823edd67bb9e506c7ee031a849b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53bbd20e-50aa-4ce8-8565-a97b3c8ee694.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7973
x-amzn-requestid: acaa2abf-9789-4953-b3ab-98064a9a0137
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fXrXvHvBIAMFkQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2f297-2dc2c04e2a491b3f7f5e8370;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 21:37:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Dw4ycOqAZkaeJgMvGEOlqphQjDZVO5umrvlSh_Gnx9i_6saWVl8dLw==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:47:56 GMT
age: 27910
etag: "6804d00e292afc0b7aadb08b11e7650488dacaa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.filescan.io/9652.ef46db3751d8e999.css
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/9652.ef46db3751d8e999.css
IP 104.26.14.230:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /9652.ef46db3751d8e999.css HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:07 GMT
content-type: text/css
content-length: 0
cf-bgj: minify
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: "63c51e66-0"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qPgrjU7r2oAY6SIInc4%2Bl9IKqLWOwuHtLg5gqDqQmGq1VvRbZ%2Fc12TzNNqh34748VHSAE7eo2pi0X%2F1d00Cm%2B6%2FcYu9XC3zyyBQXbtj%2BvOmWSCCJvA5h4P2y592rvWWkPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ff1c982f0eb500-OSL
X-Firefox-Spdy: h2
www.filescan.io/4688.b0587303536487ae.esm.js
104.26.14.230200 OK 170 kB URL HTTP/2 www.filescan.io/4688.b0587303536487ae.esm.js
IP 104.26.14.230:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 170 kB (170048 bytes)
Hash b4f47bc233f43ca71223232e489f2557
6fc61b93aa7ebdcde3415e68cb781aed7bae9d75
11e22b3782b6848cc22bd2c8ea89d14e0c8113a338a3ad87f945f33cbe679c45
GET /4688.b0587303536487ae.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=684120
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-25eb0"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=26b4V6cbO%2FQzdkfx6xRdxrQKllwGapJm8IXPpv3JPLvw85yldxHM4rQTTV4zAKWsgDi0SiqmP3GVSV9vjECryVZ%2FGLJugHhErc%2BgsVXoa%2FVKPXpuL8AU5R9XVYhOnWK9QA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c982f13b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/main.53dc3bed0127782e.css
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/main.53dc3bed0127782e.css
IP 104.26.14.230:0
GET /main.53dc3bed0127782e.css HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1606
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-646"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hhHGaIcbqxnw9UBwHMUj5wKnklzC14TiLXwNo07cuMSGXFTAoXIFvj6okUxB6PD9sHCtk%2Fntflgt3MkhE2W1nuUQLV5UXxNYHvcKzJ%2FGWkjznuvkaYLONwchZrQomWFHqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c84096fb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/api/system/mitre
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/api/system/mitre
IP 104.26.14.230:0
GET /api/system/mitre HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
No-Cookies: 1
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: application/json
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubdomains;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LjZeybmR1Oy1F%2FRaHwKOUWkGEq%2BaLUyP%2FrOeTygEcTlaaFLDlKNfFjsg9gjWQcaTyW5mB8aleYzXbetJWL4P3ciIG1irHmhBIsErIKdY6Dw8MISS5xZsmRsvzHYZ4A0Szg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c87cbfeb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/9034.e3763ca0397b9c32.esm.js
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/9034.e3763ca0397b9c32.esm.js
IP 104.26.14.230:0
GET /9034.e3763ca0397b9c32.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: application/javascript
cf-bgj: minify
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-58f"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=48m6XV5d1%2Fd1nQaLr%2BcX3%2BItqWM%2BmGHdJNtEND83DxB1UZAfBwjoY7GLPYULoCYfzu4ZfuIjWy2uWOy8NTF3XtIGnfCf%2B1jwp84wclzb0pK7LcL7Tcb0cwPdK5CMABCGHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ff1c885c63b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/7004.2dc57b25f05e55a3.esm.js
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/7004.2dc57b25f05e55a3.esm.js
IP 104.26.14.230:0
GET /7004.2dc57b25f05e55a3.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=375519
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-201d6"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W5z%2FU7T%2FcCQ1IDzKkuA2nt8ipmK0FghEsbOfG%2FKg1T%2BO5PKuOJXBgOhHQ8OG8oxsg%2Bj9ZO57M4kILOjNvEfIVJG4f3JNiYFBuRmpW3QROJQdfDgh7xrZvAT3BaMbWcurBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c983f2eb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/8959.180f76892a158641.esm.js
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/8959.180f76892a158641.esm.js
IP 104.26.14.230:0
GET /8959.180f76892a158641.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:07 GMT
content-type: application/javascript
cf-bgj: minify
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-2354a"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tlwNRTvSLY7%2FukyzsksgFXKcXsm9TVSxM%2BcFKPASl9NtnaIxmsrjZnA%2BI8dOWeHSft1E7QgmVAYq72hs9%2FxP4zh%2Fr9Ff%2F%2FAMOzUm1uUhYyOWqEoTM8hdfgNDRdPLPeU%2BDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c984f3cb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/runtime.8153cb83c107133c.esm.js
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/runtime.8153cb83c107133c.esm.js
IP 104.26.14.230:0
GET /runtime.8153cb83c107133c.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:04 GMT
content-type: application/javascript
cf-bgj: minify
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-1788"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vlit%2BjOu09yETebzbEdOKLwH2E6AzMY5YjRy3lvZpLmRNDv%2FD6NPPbIbItoTDEQkCk9DJssq3LuLvBevRbH9LAayfVsiVl%2FAA0H9U09BVcUy4%2FYfca2xRPrpSyzL6%2BcTZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78ff1c840974b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/1846.b6878c65835ce7bc.esm.js
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/1846.b6878c65835ce7bc.esm.js
IP 104.26.14.230:0
GET /1846.b6878c65835ce7bc.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=89737
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-66d2"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uvZ34iqPg6h1OtS1dndt0fu4hwZUVQEJyzs5F0svAvRN%2BMNe2h53aOuo94rZuwpGSX3aKesOJ3tRWZrAfrHsqEaHI%2F0fEk7kfq551hfy5tSGWftyTxVwiWoS30A3QjAxmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c982f07b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/8222.7464772ad7122b70.esm.js
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/8222.7464772ad7122b70.esm.js
IP 104.26.14.230:0
GET /8222.7464772ad7122b70.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1896719
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-8ce3e"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HAHhyD7yIZRZUz0ZV3ucCW7ZzHJyk4HLTaEQwjBzT6pXpVJl573zGi2Dhzgnh4q9lZtc4ZWo1gQjEEyluEz5v4%2FOg3SlD65xzRGwUzB28X%2FpMi5u5XEuc3%2F5%2FNP5LzJxsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c984f3bb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/9449.8383c93362435fac.esm.js
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/9449.8383c93362435fac.esm.js
IP 104.26.14.230:0
GET /9449.8383c93362435fac.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:07 GMT
content-type: application/javascript
cf-bgj: minify
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-fea"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q2SBTwdS3X2gUTkVQf%2B%2B1msZXGcwqQge69sdXvqb6D5n0yO%2F0kgdd4ydgoWYbpouy4OgDq1NL4QgFmTsyDzgR1xgHoyykuL5d2KcqnDI2RngrEVH7srDPsFi3RCkGuirBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c983f2fb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/common.84bc3f0b392beae9.esm.js
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/common.84bc3f0b392beae9.esm.js
IP 104.26.14.230:0
GET /common.84bc3f0b392beae9.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:07 GMT
content-type: application/javascript
cf-bgj: minify
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-1173"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7w1whyJxfOEZehPzMIScAkTfW53nJx7695KFNFFDXSB5iyDjZ%2FxGAVhPWLNSueyAzJzaEsDH9q4OFT8CeZUcRlvqNvgAdZVuYu8%2BJc%2Fnf3%2BNuUs6QIWDRAKodb%2BU3qhu7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c983f38b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.filescan.io/api/reports/25680b12-7356-4830-85f7-60179697ed70/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0?filter=general&filter=allSignalGroups&filter=allTags&filter=overallState&filter=positionInQueue&filter=taskReference&filter=subtaskReferences&filter=interestingScore&filter=finalVerdict&filter=fd%3AfileDownloadResults&filter=fd%3AextractedUrls&filter=dr%3AdomainResolveResults&filter=v%3AvisualizedSample.compressedBase64&filter=v%3ArenderedImages&filter=wi%3AwhoisLookupResults&filter=ur%3ArenderResults&filter=f%3Aall&filter=o%3Aall&sorting=allSignalGroups(description%3Aasc%2CallMitreTechniques%3Adesc%2CaverageSignalStrength%3Adesc)&sorting=allOsintTags(tag.name%3Aasc)&sorting=f%3AdisassemblySections(levelOfInformation%3Adesc)&sorting=f%3AextendedData.importsEx(module.suspicious%3Adesc)
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/api/reports/25680b12-7356-4830-85f7-60179697ed70/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0?filter=general&filter=allSignalGroups&filter=allTags&filter=overallState&filter=positionInQueue&filter=taskReference&filter=subtaskReferences&filter=interestingScore&filter=finalVerdict&filter=fd%3AfileDownloadResults&filter=fd%3AextractedUrls&filter=dr%3AdomainResolveResults&filter=v%3AvisualizedSample.compressedBase64&filter=v%3ArenderedImages&filter=wi%3AwhoisLookupResults&filter=ur%3ArenderResults&filter=f%3Aall&filter=o%3Aall&sorting=allSignalGroups(description%3Aasc%2CallMitreTechniques%3Adesc%2CaverageSignalStrength%3Adesc)&sorting=allOsintTags(tag.name%3Aasc)&sorting=f%3AdisassemblySections(levelOfInformation%3Adesc)&sorting=f%3AextendedData.importsEx(module.suspicious%3Adesc)
IP 104.26.14.230:0
GET /api/reports/25680b12-7356-4830-85f7-60179697ed70/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0?filter=general&filter=allSignalGroups&filter=allTags&filter=overallState&filter=positionInQueue&filter=taskReference&filter=subtaskReferences&filter=interestingScore&filter=finalVerdict&filter=fd%3AfileDownloadResults&filter=fd%3AextractedUrls&filter=dr%3AdomainResolveResults&filter=v%3AvisualizedSample.compressedBase64&filter=v%3ArenderedImages&filter=wi%3AwhoisLookupResults&filter=ur%3ArenderResults&filter=f%3Aall&filter=o%3Aall&sorting=allSignalGroups(description%3Aasc%2CallMitreTechniques%3Adesc%2CaverageSignalStrength%3Adesc)&sorting=allOsintTags(tag.name%3Aasc)&sorting=f%3AdisassemblySections(levelOfInformation%3Adesc)&sorting=f%3AextendedData.importsEx(module.suspicious%3Adesc) HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
No-Cookies: 1
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:06 GMT
content-type: application/json
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubdomains;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oG0vs9lFaYDQXJQgMEPxFRcq5X2BzD4fmlDgp54TwiYRmGesKyWbC6GGHfOfOzEoXl%2FfUSd%2FjDDUkoLkjOU5sjxZlhh1TN9EeQTIgqZ9683%2ByzdI%2FWs9cfwLL215tbZ6lw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c954d3fb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto+Mono:wght@400;700&display=swap
142.250.74.138200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto+Mono:wght@400;700&display=swap
IP 142.250.74.138:0
GET /css2?family=Roboto+Mono:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Jan 2023 05:33:04 GMT
date: Fri, 27 Jan 2023 05:33:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.filescan.io/7836.9836aed946eb1ee3.esm.js
104.26.14.230200 OK 0 B URL HTTP/2 www.filescan.io/7836.9836aed946eb1ee3.esm.js
IP 104.26.14.230:0
GET /7836.9836aed946eb1ee3.esm.js HTTP/1.1
Host: www.filescan.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filescan.io/reports/969333741123f88b553b9dbc7b02852b417bee21264a3d8ceb8ad81c2f8778d0/25680b12-7356-4830-85f7-60179697ed70/overview
Cookie: _ga_NKWFYZ6END=GS1.1.1674797584.1.0.1674797584.0.0.0; _ga=GA1.2.1502399706.1674797585; _gid=GA1.2.741294704.1674797585; _gat=1; _gat_gtag_UA_198485172_2=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 05:33:07 GMT
content-type: application/javascript
cf-bgj: minify
content-security-policy: default-src 'self'; connect-src 'self' https://*.google-analytics.com https://stats.g.doubleclick.net https://ipapi.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.amcharts.com; frame-src 'self' data: https://app.termly.io; img-src 'self' data: https://app.termly.io https://www.google-analytics.com https://www.googletagmanager.com https://fastapi.tiangolo.com https://cdn.amcharts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com; object-src 'none'
etag: W/"63c51e66-4bdf"
last-modified: Mon, 16 Jan 2023 09:52:38 GMT
strict-transport-security: max-age=63072000; includeSubdomains;
vary: Accept-Encoding
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3orgelZdFiIca5XnwEO2BA2fkOpLouEh4qiae%2BGAqeniCwOKO6MxDkCOsHmiA5ONxijyjnItbh2AChNcaJzcm8tgnQbDaS24agKqG10Jr%2BQWuqLO4D0GmTdc4E4uao1YIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78ff1c981f01b500-OSL
content-encoding: br
X-Firefox-Spdy: h2