r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12626
Expires: Sat, 14 Jan 2023 01:13:07 GMT
Date: Fri, 13 Jan 2023 21:42:41 GMT
Connection: keep-alive
24.199.99.13/
200 OK 438 B IP
File type HTML document, ASCII text
Hash 9929c24aa2fb4945300223c627f5c43c
aa898ca31f172eef4d875b800ea1f9e4fb39771b
4a8c4e486093de78721c3a96ea52a569172fdece08f9b85748ad3b08a0cc7223
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 438
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cab5b63e128895128726181aff42e42e
d39c36237554fcd41addec0664d7fe7f7d157c06
18e82a5b82eb8f2d8b49df824c336015f19367c5a05467ad139a56db59f88852
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E82A5B82EB8F2D8B49DF824C336015F19367C5A05467AD139A56DB59F88852"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7115
Expires: Fri, 13 Jan 2023 23:41:16 GMT
Date: Fri, 13 Jan 2023 21:42:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0f4ecf4f26be1ba09e61135b1b488bf4
f16b8277e00033bc990a8bcce54b693cb3c87d62
3018c2a228f0a894d217e8e8b0b8dd060527f06879cd2f469bac6c8766acbbf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3018C2A228F0A894D217E8E8B0B8DD060527F06879CD2F469BAC6C8766ACBBF8"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6122
Expires: Fri, 13 Jan 2023 23:24:43 GMT
Date: Fri, 13 Jan 2023 21:42:41 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 13 Jan 2023 21:41:58 GMT
content-type: application/json
age: 43
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: HzUj7TP2kfZz0DQawe/JLF0C9lkzyQhvc9c4RU1HPk5emgfT6ColrCaFYs5a/PacDlsouTz+cPcwAxZnFZq43w==
x-amz-request-id: 6Z0R1QPE2G8V6WE0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 13 Jan 2023 20:43:27 GMT
age: 3554
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jan 2023 21:42:41 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
200 OK 7.3 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (504)
Hash ad286b735478b2750b7e24d489cc148e
67cc63516875628a51682330eeb3a82e3ea8779b
7dea22b7f0ec2ea9cdb9a57a59cef8961670b795ccc3468bcb3661a40b8112a7
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
NIDS Severity Alert suricata medium ET WEB_CLIENT Tech Support Scam - Windows Firewall M3 2021-08-17
suricata medium ET WEB_CLIENT Tech Support Scam - Windows Firewall M4 2021-08-17
GET /Wince0Security-helplinerxx8/index.html?phone=AUS HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:12 GMT
ETag: "9719-5f1dd05de40a9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7259
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
200 OK 27 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
File type ASCII text, with very long lines (32180)
Hash b1e4b2a99336201b37fb8cea5d57abb9
d57980f0d0eaaf57ec33ddc9ed027274cfa86027
c805bfd991983f57b5b7878b998f7529e9b7e2df4bc2d39ba493934e23ba3f8a
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://24.199.99.13/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 21:42:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 19092949
expires: Wed, 03 Jan 2024 21:42:41 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WTzM5p4tVUuvT8k1aqKFJS47ddteT6CTNHaVkBh0c%2B%2BOqFhkda8RDh8XmHhfScgnP3gZuv4SIMRGXKY%2FkeojCdWNCjPHxoWiGrvwMQ3jjLN6wbgwjadLvof42oemLosRTKC%2BNxYt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78914d9e6d33b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-1.4.4.min.js
200 OK 27 kB URL HTTP/1.1 code.jquery.com/jquery-1.4.4.min.js
IP
File type ASCII text, with very long lines (820)
Hash 7a0b6602f591a171b37338148088e123
a5e2c755b9176d236e8deb230f161e0aafab8a91
330c910343479c293e1b6c48514dc806da2cb34560467ff2518076f75e10d8d8
GET /jquery-1.4.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 27078
Content-Type: application/javascript; charset=utf-8
Last-Modified: Fri, 20 Aug 2021 17:47:53 GMT
Accept-Ranges: bytes
Server: nginx
ETag: W/"611feac9-13309"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1673646161.dop212.sk1.t,1673646161.cds203.sk1.c
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
200 OK 24 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65326)
Hash 849f3e827da80e4e4c6a8c49689f057d
035d81aaaf6da3ffa5ce241179a9e14d533e7a3b
9546dbb82c3facf833e4adb713ce7e57a34dd53f6b55697ef1e1877bdbd8bb73
GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://24.199.99.13
Connection: keep-alive
Referer: http://24.199.99.13/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 13 Jan 2023 21:42:41 GMT
age: 10102937
x-served-by: cache-fra19147-FRA, cache-bma1677-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24100
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c16b1530bbcd3d9226362c0a6100f014
a49685aa2869a3674bc4c8fc58acd47f655c2111
ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 21:42:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash fe5c9e6a10dd15814fa1eb5e740b6033
dd35d619cef7f3e166b24fc99a97309ed432be85
e95600f066407bb61ba88a075fb3218e4bad1122db0ec848a505cd7ed573f0a8
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "FE5D1B8254C6AA66FEBC82C59AE5563B543B2EE7"
Expires: Sat, 14 Jan 2023 08:00:00 GMT
Last-Modified: Fri, 13 Jan 2023 20:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 3316
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78914d9f1922b509-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash 6ae46672a531108277946cabf6343d5b
dd8913bf08b7f43e8483f7bda5fbee49b549c6dd
6bbe4c2cf914b5e2f9f6000540c7675e4247d0af2bf0d3356077330d54a0b2dc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3381
Cache-Control: max-age=108165
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 21:42:41 GMT
Etag: "63c0c6a1-117"
Expires: Sun, 15 Jan 2023 03:45:26 GMT
Last-Modified: Fri, 13 Jan 2023 02:49:05 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
24.199.99.13/Wince0Security-helplinerxx8/js/interactive89e5.js?1665074482
404 Not Found 274 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/js/interactive89e5.js?1665074482
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 457a171847af60bcf095882aa7769f1e
26ff6d24c3ebfd7f434e6f62f6e6d2faaffcba4f
2aee4636756f1a2b494b42dbaffcf2155a904fcb8d006c47109c752475cf7469
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/js/interactive89e5.js?1665074482 HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 404 Not Found
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 274
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
24.199.99.13/Wince0Security-helplinerxx8/style.css?1665074482
200 OK 389 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/style.css?1665074482
IP
File type ASCII text, with CRLF line terminators
Hash f7eccee75618aad83533421e82bcf433
5bb1ff6f998e9c2d1045d7ff76233a465f3cff28
d435b2a5dd58d17e686d80733981d2d184690457d35c886dd23d1761a4a8e62b
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/style.css?1665074482 HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:19 GMT
ETag: "696-5f1dd064c7b9a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 389
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.googletagmanager.com/gtag/js?id=UA-203071415-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-203071415-1
IP
File type ASCII text, with very long lines (1921)
Hash f51e30a28c19896cb3a7499f7c541df7
8af4e230b573f9ee5b909aef908b8db5a0931f67
da05784dc69acfbf879d8f93b6ca95d31917134d675be75d913cadbda8ed2ad7
GET /gtag/js?id=UA-203071415-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://24.199.99.13/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 13 Jan 2023 21:42:41 GMT
expires: Fri, 13 Jan 2023 21:42:41 GMT
cache-control: private, max-age=900
last-modified: Fri, 13 Jan 2023 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44189
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c16b1530bbcd3d9226362c0a6100f014
a49685aa2869a3674bc4c8fc58acd47f655c2111
ff063e27670433897ba82fdf8048fc228587ab2f01c21e2970f03b3df9093539
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 21:42:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 13 Jan 2023 21:33:45 GMT
age: 536
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
24.199.99.13/Wince0Security-helplinerxx8/before.js
200 OK 218 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/before.js
IP
File type ASCII text, with CRLF line terminators
Hash 54d8f5c9c3561450c0069e73e9827bea
691bfeba5625d45b20046525108cbb77024e8cee
1fb72d2e756121119360fee096951bd269496b2dde615604dade39010a9b562b
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/before.js HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:08 GMT
ETag: "16e-5f1dd05a52f2f-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 218
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
24.199.99.13/Wince0Security-helplinerxx8/fullscreen.js
200 OK 157 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/fullscreen.js
IP
File type ASCII text, with CRLF line terminators
Hash 779a2131ae70af8531c81e03cc7cf254
efaebac82c3a02672072745b5924939669b74fbe
661b56b7b9faf475f4a110cb242cf49cc294f6cf46a1e7b16baf6806da494b84
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/fullscreen.js HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:11 GMT
ETag: "f5-5f1dd05d79986-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 157
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
24.199.99.13/Wince0Security-helplinerxx8/main.js
200 OK 414 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/main.js
IP
File type ASCII text, with CRLF line terminators
Hash b422842850b554c56c664fa141fd0943
7a20f93081a059e6b12e49803edfb13d5574be4f
0dd7e335fa881224bea371115dc81d97cd08c23577a8afa5b5ecd74434bafa23
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/main.js HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:14 GMT
ETag: "50a-5f1dd05ffd278-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 414
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
24.199.99.13/Wince0Security-helplinerxx8/modernizr.js
404 Not Found 274 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/modernizr.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 457a171847af60bcf095882aa7769f1e
26ff6d24c3ebfd7f434e6f62f6e6d2faaffcba4f
2aee4636756f1a2b494b42dbaffcf2155a904fcb8d006c47109c752475cf7469
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/modernizr.js HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 404 Not Found
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 274
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
24.199.99.13/Wince0Security-helplinerxx8/main.css
200 OK 2.6 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/main.css
IP
File type ASCII text, with CRLF line terminators
Hash 1d723c587dd21e2874e03987963c4f00
bb18940ac8eee488177c3dfc68ff5d8725492562
8a6857220f42b68c1950e9dd25c2bb460606714b1697fdd7c21a3f5ba01eb5de
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/main.css HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:13 GMT
ETag: "2dc4-5f1dd05f92b55-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2596
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
24.199.99.13/Wince0Security-helplinerxx8/bootstrap.js
200 OK 22 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/bootstrap.js
IP
File type ASCII text, with very long lines (65299)
Hash 8cffe231e10bbcd8ba5f2a299a72243d
fb32d41e34b530466f57552a14f63affadc20b46
5b5f5a17d2b22241bc140d6f4ee60d6a653de9fb2c8aa4c21eb02621e8bd8a50
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/bootstrap.js HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:41 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:09 GMT
ETag: "1499a-5f1dd05b5f817-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 21848
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
24.199.99.13/Wince0Security-helplinerxx8/light.js
200 OK 248 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/light.js
IP
File type ASCII text, with CRLF line terminators
Hash ab5616b234fd9225c1437ddf8e50cfc7
8ca041d927e6de218fc4bea84785841b0ad6620c
037b4e9b6531e6d7c02bbd36ab1a93cc3f84362f19b0225b5524ce9dcea5f962
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/light.js HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:13 GMT
ETag: "1f7-5f1dd05ef1930-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 248
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
24.199.99.13/Wince0Security-helplinerxx8/images/ico_tray2.gif
404 Not Found 274 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/images/ico_tray2.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 457a171847af60bcf095882aa7769f1e
26ff6d24c3ebfd7f434e6f62f6e6d2faaffcba4f
2aee4636756f1a2b494b42dbaffcf2155a904fcb8d006c47109c752475cf7469
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/images/ico_tray2.gif HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 404 Not Found
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 274
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
24.199.99.13/Wince0Security-helplinerxx8/images/ico_tray3.gif
404 Not Found 274 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/images/ico_tray3.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 457a171847af60bcf095882aa7769f1e
26ff6d24c3ebfd7f434e6f62f6e6d2faaffcba4f
2aee4636756f1a2b494b42dbaffcf2155a904fcb8d006c47109c752475cf7469
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/images/ico_tray3.gif HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 404 Not Found
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 274
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
24.199.99.13/Wince0Security-helplinerxx8/minimize.jpeg
200 OK 2.2 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/minimize.jpeg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x39, components 3\012- data
Hash 1ba392dce74f8987dca48bf65d817c8f
db0b8444c46125105b52f272bd422a7f52da1f72
a05245b6f7fd752af4a7b0131bbdfdf3eaee6c5a25a81cb498e0f0759189473c
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/minimize.jpeg HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:15 GMT
ETag: "8c7-5f1dd06119560"
Accept-Ranges: bytes
Content-Length: 2247
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.digicert.com/
200 OK 471 B IP
Hash b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2905
Cache-Control: max-age=130349
Content-Type: application/ocsp-response
Date: Fri, 13 Jan 2023 21:42:42 GMT
Etag: "63c11f26-1d7"
Expires: Sun, 15 Jan 2023 09:55:11 GMT
Last-Modified: Fri, 13 Jan 2023 09:06:46 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
200 OK 67 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://24.199.99.13
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 21:42:42 GMT
content-type: font/woff2
content-length: 66624
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "db812d8a70a4e88e888744c1c9a27e89"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 01/01/2023 12:36:06
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1054
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 16bb8da36a704726c230efdeda1fe08e
cdn-cache: HIT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78914da15f43b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
24.199.99.13/Wince0Security-helplinerxx8/modernizr.js
404 Not Found 274 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/modernizr.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 457a171847af60bcf095882aa7769f1e
26ff6d24c3ebfd7f434e6f62f6e6d2faaffcba4f
2aee4636756f1a2b494b42dbaffcf2155a904fcb8d006c47109c752475cf7469
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/modernizr.js HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 404 Not Found
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 274
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
24.199.99.13/Wince0Security-helplinerxx8/microsoft.png
200 OK 1.0 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/microsoft.png
IP
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/microsoft.png HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:14 GMT
ETag: "415-5f1dd0609f43c"
Accept-Ranges: bytes
Content-Length: 1045
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
24.199.99.13/Wince0Security-helplinerxx8/que.png
200 OK 349 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/que.png
IP
File type PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data
Hash 7454c652e0733d92de6c920c2d646ae0
34a5bd8c7401f95e346895b0e5ccffbf0e9ad638
44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/que.png HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:18 GMT
ETag: "15d-5f1dd063bd1f3"
Accept-Ranges: bytes
Content-Length: 349
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
24.199.99.13/Wince0Security-helplinerxx8/setting.png
200 OK 364 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/setting.png
IP
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/setting.png HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:18 GMT
ETag: "16c-5f1dd06445d77"
Accept-Ranges: bytes
Content-Length: 364
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
24.199.99.13/Wince0Security-helplinerxx8/bell.png
200 OK 1.1 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/bell.png
IP
File type PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash a3555871399f1f67bfacaf437974b03a
b6337de87cd7a75a73cd804774651d14c83fe76a
2e48fef820929c21295e13444901f60e3aed61ba6f8c773ff1466e6843e76b49
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/bell.png HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:08 GMT
ETag: "454-5f1dd05ab3a12"
Accept-Ranges: bytes
Content-Length: 1108
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
24.199.99.13/Wince0Security-helplinerxx8/pc.png
200 OK 4.9 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/pc.png
IP
File type PNG image data, 166 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash cc5132b56ba46b03dd998aa1fe220106
403e007a0b17d76a9945fa5ec46a9d01733b3040
598699133be5eef63e3b9b5540609ec0dc91d7af9c7f70a3b890e57491a70ae0
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/pc.png HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:17 GMT
ETag: "1355-5f1dd062b18ab"
Accept-Ranges: bytes
Content-Length: 4949
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eeL3qbSE3BXmW/KbUaX2ng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: N6c7Bx1ApLF69cs+Zl14LjM+mhk=
24.199.99.13/Wince0Security-helplinerxx8/virus-scan.png
200 OK 26 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/virus-scan.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 2c497dfff84bd8c5af9254c9d6278ce1
667e72e7ba6f00a54629e28133317022d4b59af6
b2dc4153ee7019c70a1095d5d1304d540e3bba045d99e141f63e5b13362e5a4e
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/virus-scan.png HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:20 GMT
ETag: "650f-5f1dd06666c46"
Accept-Ranges: bytes
Content-Length: 25871
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
24.199.99.13/Wince0Security-helplinerxx8/PoP.webp
200 OK 54 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/PoP.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 997x426, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 63aea8a8e165d432031a74771a801755
045ba3be4f21deb9e8a39e57d720b1b49aa64d06
8cab0ece5d8fcb1c13b6eca6766b3c9b731e0fc5078f92e51590cb325762869a
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/PoP.webp HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/main.css
HTTP/1.1 200 OK
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:17 GMT
ETag: "d234-5f1dd0633560f"
Accept-Ranges: bytes
Content-Length: 53812
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
24.199.99.13/Wince0Security-helplinerxx8/images/ico_tray1.gif
404 Not Found 274 B URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/images/ico_tray1.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 457a171847af60bcf095882aa7769f1e
26ff6d24c3ebfd7f434e6f62f6e6d2faaffcba4f
2aee4636756f1a2b494b42dbaffcf2155a904fcb8d006c47109c752475cf7469
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/images/ico_tray1.gif HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 404 Not Found
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 274
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
24.199.99.13/Wince0Security-helplinerxx8/wa0lDErtm0s.mp3
206 Partial Content 201 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/wa0lDErtm0s.mp3
IP
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural\012- data
Size 201 kB (200832 bytes)
Hash 0116152611dd51432e852781f8cc7e82
2408d3d281b25649894f78a4e19f7f8a8ac735f9
fc59bbb18f923747b9cd3f3b23537ff09c5ad2fdfc1505a4800a3f269a234e65
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/wa0lDErtm0s.mp3 HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 206 Partial Content
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:21 GMT
ETag: "31080-5f1dd066dfdca"
Accept-Ranges: bytes
Content-Length: 200832
Content-Range: bytes 0-200831/200832
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: audio/mpeg
24.199.99.13/Wince0Security-helplinerxx8/wa0lDErtm0s.mp3
206 Partial Content 89 kB URL HTTP/1.1 24.199.99.13/Wince0Security-helplinerxx8/wa0lDErtm0s.mp3
IP
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural\012- data
Hash 2efccc7c2cac1817990f92a8c3ea7ee8
b463e32505cf224c762ebe7c42331d7a8eaa07fd
63186bf53e0ad82ebae38375acbb9fced1cc98638a3da6e397e7b56cbe9f3dd9
Analyzer Verdict Alert quad9 Sinkholed
GET /Wince0Security-helplinerxx8/wa0lDErtm0s.mp3 HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 206 Partial Content
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Mon, 09 Jan 2023 23:21:21 GMT
ETag: "31080-5f1dd066dfdca"
Accept-Ranges: bytes
Content-Length: 200832
Content-Range: bytes 0-200831/200832
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: audio/mpeg
24.199.99.13/favicon.ico
404 Not Found 274 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 457a171847af60bcf095882aa7769f1e
26ff6d24c3ebfd7f434e6f62f6e6d2faaffcba4f
2aee4636756f1a2b494b42dbaffcf2155a904fcb8d006c47109c752475cf7469
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: 24.199.99.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://24.199.99.13/Wince0Security-helplinerxx8/index.html?phone=AUS
HTTP/1.1 404 Not Found
Date: Fri, 13 Jan 2023 21:42:42 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 274
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19786
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Fri, 13 Jan 2023 21:42:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19786
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Fri, 13 Jan 2023 21:42:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19786
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Fri, 13 Jan 2023 21:42:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51f29fa68742d72a5ad8ad54a973424d
4941e01c8718adfe7ce13d551e80549236e561df
83b4e946e058ae662e559703f64896ce4c5de969045cf8e3e00806297eab0007
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00386939-61dd-4d7a-a930-6df89a8e0c57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6895
x-amzn-requestid: 9367b7b5-6904-4308-85ca-69231b2d6fc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eXnqzFBlIAMFcQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b95311-5774375508659511014974c0;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 11:10:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iVPiVZnh-zRlIEguoiOssDfs0bg74oM1nZyUNfY5XqRIsE_KArUZhA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 21:46:34 GMT
age: 86169
etag: "4941e01c8718adfe7ce13d551e80549236e561df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba61442e6ededd7b49f6244613df0e63
385f45b5920174ca20bcc2d9c02eedb4641f48a9
5e5cd1fd026dc72d0c3c5032fbae17f3383c64ee2714808c892c094353f31012
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7792e19-fdcf-4706-b221-7d3353e6b9ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5990
x-amzn-requestid: 54a83ca0-eb61-4212-8c98-e1e182b860ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ejsZiEeBoAMF7kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63be2770-3565b4d43d28ee3c0fd16ed0;Sampled=0
x-amzn-remapped-date: Wed, 11 Jan 2023 03:05:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SUICoi37lPgXPQu4PTLCmc-6l2G9SHKz8f2qhZgHBMEbuuSi5zMiaQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:38:24 GMT
age: 65059
etag: "385f45b5920174ca20bcc2d9c02eedb4641f48a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: epfDqEAZIAMFudQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 06:50:08 GMT
age: 53555
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6934d824-7534-44bc-aa4b-a15b6eb4c9c8.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6934d824-7534-44bc-aa4b-a15b6eb4c9c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb3062f9905c7c6f159cd203f5fdfe64
bcf17c475a27fae03369d1677dc0bedf6793e6b2
33dc1a810207f498c28b764cc26afa00b16594629ae6777957ccffd8e2c51f8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6934d824-7534-44bc-aa4b-a15b6eb4c9c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9432
x-amzn-requestid: 2835c1c8-0a8e-4985-be89-d641d5425971
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eph50HONIAMF3vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c07d0b-53c6156514cdb1a463add03b;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:35:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EOLxwKB_KBf_zkLlBLFn9nrDGM-FfONoTWUGR2093kLhka3wkb6yhg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:02:02 GMT
age: 85241
etag: "bcf17c475a27fae03369d1677dc0bedf6793e6b2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c276d1876bfcc6ec4dfb94bcdd2f6c8
177a80d7d4d3fc273a712cada41abdd87b138a6c
abceeefeec2fc658e285a2898e38a36643501bfa1d66f33e216f100e456a8c06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb840d484-56de-4f38-ad4b-0cb93e4b1274.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8785
x-amzn-requestid: 4844b27a-1080-4d95-9a35-c8ab7cdd9acb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eph7sEajoAMF_gg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c07d17-2520efc6579a4fbc25cdb515;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RKH9tjX9MxE-NWDVWa4KZqrXKnzx-2200m_vm18DyYeWII0U6NgsVA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 12 Jan 2023 22:00:02 GMT
etag: "177a80d7d4d3fc273a712cada41abdd87b138a6c"
content-type: image/jpeg
age: 85361
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e514f1b711f68a1699f9d0d269ca9a8a
71621fabcc4ae2a8c3180e22e63fac1217c4032f
cc10cadc4477cc6faa1973343b9019b1b4bc94e5ec9fab114a4b755f24872f35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa56e9680-25b8-493c-8831-f933aca26e52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9697
x-amzn-requestid: 6279e4e0-7268-422a-878c-3983bffa37d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: edG9MHqjoAMF3dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bb8521-59063fac03eb407d74cabd38;Sampled=0
x-amzn-remapped-date: Mon, 09 Jan 2023 03:08:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LdM05QUvlJcxt8IaDM9Wr4_CM5-SrhsBRAkVcdkVxNiyrJveNFHK9g==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 05:12:42 GMT
age: 59401
etag: "71621fabcc4ae2a8c3180e22e63fac1217c4032f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://24.199.99.13/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 13 Jan 2023 21:42:41 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 565, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 19:04:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e9a84d03a1f7c6aa17012c712a6e5dd5
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 19090409
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78914d9eed280b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
24.199.99.13
93.184.220.29
104.18.20.226
95.101.11.115