192.236.176.76/
200 OK 142 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size 142 kB (142088 bytes)
Hash 3a29165b00747f0b7237eb950316b503
24bd0625d23a2dbad693793367d0d055b7cbae37
6a5470e192d3338539e2e5fed7a6594f0625b7503cb1aaec20a5d2ddaccc5fe6
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET / HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:41 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0643dc6b6fed33b3537160b6bb77bcbf
aa43bd1fbb30d2219f3285c1ee4991ffb33562c5
f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F"
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10129
Expires: Sun, 15 Jan 2023 10:29:30 GMT
Date: Sun, 15 Jan 2023 07:40:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7168
Expires: Sun, 15 Jan 2023 09:40:09 GMT
Date: Sun, 15 Jan 2023 07:40:41 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 15 Jan 2023 06:42:05 GMT
content-type: application/json
age: 3516
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 64765d3d978fd74d7bc47d55d4f097cf
92eb3f0d55ba99be28105c0b28ef7dd456817f1f
761aab02513e7a0ec55ea59109e88b39cbd4e17df0cd2035aa37a4693f22d1f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "761AAB02513E7A0EC55EA59109E88B39CBD4E17DF0CD2035AA37A4693F22D1F3"
Last-Modified: Thu, 12 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10198
Expires: Sun, 15 Jan 2023 10:30:39 GMT
Date: Sun, 15 Jan 2023 07:40:41 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 07:40:41 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QmPU/nYj1prMEJDIdT2GDVRSzkVENnYgR32Jsqa55PquJ/4plI/u+2Er6coI92BHG4O+bYIep9A=
x-amz-request-id: 90P0VECAQK9HS54C
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 15 Jan 2023 06:44:03 GMT
age: 3398
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
192.236.176.76/assets/css/style.css
200 OK 70 kB URL HTTP/1.1 192.236.176.76/assets/css/style.css
IP
File type ASCII text, with very long lines (426), with CRLF line terminators
Hash 8bac82613961b37e786a00ceb6d5599a
3e72037d0ea19194b2eda560f74e117117cf8d21
25db9800483d0022568d0861b9e590d474fa262787c119a9f15a4b62a0f75fea
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/css/style.css HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Sat, 18 Jun 2022 23:46:55 GMT
Accept-Ranges: bytes
Content-Length: 70097
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: text/css
192.236.176.76/assets/js/form.js
200 OK 6.1 kB URL HTTP/1.1 192.236.176.76/assets/js/form.js
IP
File type ASCII text, with CRLF line terminators
Hash 2d003b6efc29272999cdc49c8f77e7d2
f14b178a8fa44b827c6516ca0604d35e4191d2d9
a801f10aac667c7eca1a65456f37a9ac29cf82c9598595e00531fc471d7ae520
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/js/form.js HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 27 May 2022 22:11:22 GMT
Accept-Ranges: bytes
Content-Length: 6102
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: application/javascript
192.236.176.76/assets/js/words.js
200 OK 21 kB URL HTTP/1.1 192.236.176.76/assets/js/words.js
IP
File type ASCII text, with CRLF line terminators
Hash e93c5ebfcbd8ba23fc254f73842628ea
12893a3c15969559369cbb71b19ae2be0b5c108a
8392dda51f0e72cd030cbd5f8cae4887316ff7601c862bc7693a8e077ee74568
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/js/words.js HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 20 Nov 2021 09:19:54 GMT
Accept-Ranges: bytes
Content-Length: 21397
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: application/javascript
192.236.176.76/assets/js/app.js
200 OK 16 kB URL HTTP/1.1 192.236.176.76/assets/js/app.js
IP
File type ASCII text, with very long lines (547), with CRLF line terminators
Hash 5daba10a4fa6f00f1e8de36e2478b79b
d6a954a9965c46325a76bb82a831cc2affcac230
4e29c7738821001931ecac974efea0004527a7b320122e71f1f8f88efaab2a40
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/js/app.js HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 19 Jun 2022 00:27:54 GMT
Accept-Ranges: bytes
Content-Length: 15463
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ac0e204e812ce8905ac046581ff4e95
c0322d4ecff9356cca1a8e55d62e8d2f9540eca7
de65a926e0a1ce8b9724754564cef8e4bbe7709cef911e5dbd30db03211e6673
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/code.jquery.com/jquery-3.6.0.min.js
200 OK 90 kB URL HTTP/1.1 192.236.176.76/code.jquery.com/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
Analyzer Verdict Alert quad9 Sinkholed
GET /code.jquery.com/jquery-3.6.0.min.js HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 17 Feb 2022 02:50:38 GMT
Accept-Ranges: bytes
Content-Length: 89501
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: application/javascript
192.236.176.76/assets/css/metamask.css
200 OK 794 kB URL HTTP/1.1 192.236.176.76/assets/css/metamask.css
IP
File type Unicode text, UTF-8 text, with CRLF, CR line terminators
Size 794 kB (793545 bytes)
Hash 4e4bf12953ee343fea54d5c004229aa2
882c6cbfc5e80b037183df8234eeda4c4efe3ec9
6aae39399e1f269497d306cd0ae884b5489a5065c5539ffa2668a5939316ff71
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/css/metamask.css HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 17 Dec 2021 11:47:32 GMT
Accept-Ranges: bytes
Content-Length: 793545
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: text/css
fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap
IP
Hash 920b00cd64d461ea1aa064d75f57eff9
321d7749801eb8f68567999c6464f6f6e0e86a87
d4b4efff577c49e57fbe4c4f544d408b8de34e23c8e2c500acef565e7803b805
GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 07:40:42 GMT
date: Sun, 15 Jan 2023 07:40:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.236.176.76/assets/images/box-1.png
200 OK 82 kB URL HTTP/1.1 192.236.176.76/assets/images/box-1.png
IP
File type PNG image data, 300 x 200, 8-bit/color RGB, non-interlaced\012- data
Hash 3e06ec023fc7753a29b0932295607804
2208d29f1c53644ea180d1912433abb8e3480c2f
2f0141fb9e98a18432e5a477ac1a9b24fe33e7f67bd74ca7fb53fa41463eb448
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-1.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:17:46 GMT
Accept-Ranges: bytes
Content-Length: 81577
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/15.png
200 OK 5.8 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/15.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash c92a879c154730c5ac23ce546a142bab
7e65de6c54d6763a7ccdc394b64ca77d49e8ac21
4c06d3913bfdd7221e44618347b81655cf2f86d4cfbe71f7b7b827e051e22104
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/15.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:44 GMT
Accept-Ranges: bytes
Content-Length: 5771
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/box-round-1.png
200 OK 4.3 kB URL HTTP/1.1 192.236.176.76/assets/images/box-round-1.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4efa7376add61639fbbf50684c70c8ab
44b377818eed2ce42f077c7214d19d1ecd708499
aec9cb69da734d6838e551235a9447816316186c76cdfc68cd134e1ded0e9b70
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-round-1.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:18:08 GMT
Accept-Ranges: bytes
Content-Length: 4268
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/12.png
200 OK 8.0 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/12.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash c536d8d155a861f787d58a373f3ec93d
5f77ba5bad3968fa2ea76c7ab32f9853bddd95a8
b74078c917bd7f31a0a657be970f735663eab535a3fc47df90d99fd363e6a7b2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/12.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:24 GMT
Accept-Ranges: bytes
Content-Length: 8002
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/11.png
200 OK 3.6 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/11.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash fb9b3c121dfcbf3b76076efa623de8ff
b0eb6869edadd978adeee69a1df24cd42c251f24
418620ef156fbb8c60a73be5f804fd5088afcd5a7403e19da9b980441ee938c2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/11.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:18 GMT
Accept-Ranges: bytes
Content-Length: 3609
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/box-2.jpg
200 OK 76 kB URL HTTP/1.1 192.236.176.76/assets/images/box-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x200, components 3\012- data
Hash 851af398c54ff59f88dd8215bdea0c90
a81dda1ee709655349067fc62658614bd99ee020
c64cdfc26418b1acac4e70e8bad3c3b301195327ce066dea7367be8d77a4ccf1
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-2.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:17:50 GMT
Accept-Ranges: bytes
Content-Length: 76434
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/wallet.svg
200 OK 1.2 kB URL HTTP/1.1 192.236.176.76/assets/images/wallet.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1173), with no line terminators
Hash 8e6b9c9f0e09b53b9e75bd934cdce204
4f543d6415fb147b11280bbd295cda76e5f706de
d7c3db2bddf3110dcff83280a91ec357268a3e2adcf2cad7f5c2f1c59a4736c8
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:56 GMT
Accept-Ranges: bytes
Content-Length: 1173
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/box-round-3.png
200 OK 4.3 kB URL HTTP/1.1 192.236.176.76/assets/images/box-round-3.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4efa7376add61639fbbf50684c70c8ab
44b377818eed2ce42f077c7214d19d1ecd708499
aec9cb69da734d6838e551235a9447816316186c76cdfc68cd134e1ded0e9b70
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-round-3.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:18:20 GMT
Accept-Ranges: bytes
Content-Length: 4268
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/box-round-2.jpg
200 OK 3.3 kB URL HTTP/1.1 192.236.176.76/assets/images/box-round-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash f4395c8ac4ac54a65f56aa7a69b43bd0
606050f665bfec3a725c7cf4e8687eb9679535cd
e4736f079ba8ebb7c4439bd7d3bebb8579c4eebde23288396f6ebaf3e25f7b74
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-round-2.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:18:14 GMT
Accept-Ranges: bytes
Content-Length: 3315
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/box-3.jpg
200 OK 32 kB URL HTTP/1.1 192.236.176.76/assets/images/box-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 371x200, components 3\012- data
Hash fec4631e12cc4141e1e2635ef44084b6
a7e9561dd810991f71bae0314a1ca92c451650df
2c558695c9958eaaca5c9f6ac5bb1a079f8980de4963693bf831f68577ac8812
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-3.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:17:56 GMT
Accept-Ranges: bytes
Content-Length: 32446
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/sale.svg
200 OK 1.1 kB URL HTTP/1.1 192.236.176.76/assets/images/sale.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1062), with no line terminators
Hash 0edec9905d8191838fa507442c7cd037
d9456d5baf1f2e2466d907ce0a93daf8283f190f
cd1e6c82fc02dfac88bede7cc326200f97213b362c6e5715d2b5d48f6cc9b2d7
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/sale.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:50 GMT
Accept-Ranges: bytes
Content-Length: 1062
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/security.png
200 OK 97 kB URL HTTP/1.1 192.236.176.76/assets/images/security.png
IP
File type PNG image data, 1500 x 1000, 8-bit/color RGB, non-interlaced\012- data
Hash ee348f630a972f4a0cc2cc74fcb7db7a
90d0abd95ac53fcbada5434087c2c5d132990c92
965ac99b7a9ec5202b90564257b53640604925f49e1ef00f47ea0764db9b13ca
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/security.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 05:59:36 GMT
Accept-Ranges: bytes
Content-Length: 97399
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/s/player/4248d311/www-player.css
200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/4248d311/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8a6331ed48be29c59230b0c7360068de
22a20436f427d6b8e26eb30ed9aab51a43d389bf
72f0818ab04697fc29d331b2add584f3cd5e269446c7297300701a4666c9d95e
GET /s/player/4248d311/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49911
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 16:03:02 GMT
expires: Fri, 12 Jan 2024 16:03:02 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/css
age: 229060
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.236.176.76/assets/images/creating.png
200 OK 32 kB URL HTTP/1.1 192.236.176.76/assets/images/creating.png
IP
File type PNG image data, 1500 x 1000, 8-bit/color RGB, non-interlaced\012- data
Hash 1db4d001bcd7641dfe5e3d076d1e499f
823bd5d86805d0157595338e8d28c67f2786ef22
0634513d55647004e621086940cf2dff4d363896da7f5d4b5b3926e60ae6f942
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/creating.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 06:00:10 GMT
Accept-Ranges: bytes
Content-Length: 32011
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/4248d311/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 16:03:11 GMT
expires: Fri, 12 Jan 2024 16:03:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 229051
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/player_ias.vflset/en_US/base.js
200 OK 611 kB URL HTTP/2 www.youtube.com/s/player/4248d311/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (517)
Size 611 kB (611243 bytes)
Hash 4bafbf546e35e79d802b8e836cf03e3b
cff2ccd4542a73b82c18cdac6b3e4af01198566e
da6660452c1ebd120eb25d4c1a742e2fe20cf5ccfbd3523acb5e1d5693170d70
GET /s/player/4248d311/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 611243
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 16:03:02 GMT
expires: Fri, 12 Jan 2024 16:03:02 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 229060
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.236.176.76/assets/images/media/safepal.png
200 OK 12 kB URL HTTP/1.1 192.236.176.76/assets/images/media/safepal.png
IP
File type PNG image data, 514 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 1d236ae8ccc14622ad076cdb6d6835e5
9031913560b5c3db05d9561e80653fd82af2646a
d6381609621fae329a549e57d43432a7d7000c20a200d0f5388da078bc7c63e4
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/safepal.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 11:06:52 GMT
Accept-Ranges: bytes
Content-Length: 11867
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/opensea-white.svg
200 OK 2.9 kB URL HTTP/1.1 192.236.176.76/assets/images/opensea-white.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2931), with no line terminators
Hash 270535333a04e0f7c6c352a4f2eba9ca
cbc9913a2608de3e31025ed329d7e3be4987b977
d79ac289a5efb3158ff63a02ee4dbe102a69890f69302bce8ef05c989d4d4e76
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/opensea-white.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:26 GMT
Accept-Ranges: bytes
Content-Length: 2931
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/media/coin98.png
200 OK 37 kB URL HTTP/1.1 192.236.176.76/assets/images/media/coin98.png
IP
File type PNG image data, 1004 x 293, 8-bit/color RGBA, non-interlaced\012- data
Hash 65c8e1ac373c711c710c994c3f19b2ae
a8e5540ee20d94721e5ba575685c1d97264a8f32
1908c3f5b1976cd9801caf8c9ada40ab10e2551106b8c637d54baa99d9e6da06
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/coin98.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 13:24:42 GMT
Accept-Ranges: bytes
Content-Length: 36575
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/wallet/trust-alternative.webp
200 OK 5.5 kB URL HTTP/1.1 192.236.176.76/assets/images/wallet/trust-alternative.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c9e78fe6c6e121908c1d04fdb68a8934
4460f24fadc7bf575ec84bf6022daca434947c8b
dbc6b5512ca6a2fc08f2af7f246d300c7b0ffce7da57bed015f2830a4239f515
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet/trust-alternative.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 17:19:40 GMT
Accept-Ranges: bytes
Content-Length: 5498
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/webp
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash e52f23c32021aa8af3acbe51b271b0c3
a6e73413422200a43128d5e2cd02b2b1959501ed
8bbb802b095d30aa8c586cedd72a2048cf3201491a9722806daef6f9680c7132
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "8BBB802B095D30AA8C586CEDD72A2048CF3201491A9722806DAEF6F9680C7132"
Last-Modified: Thu, 12 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14358
Expires: Sun, 15 Jan 2023 11:40:00 GMT
Date: Sun, 15 Jan 2023 07:40:42 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ac0e204e812ce8905ac046581ff4e95
c0322d4ecff9356cca1a8e55d62e8d2f9540eca7
de65a926e0a1ce8b9724754564cef8e4bbe7709cef911e5dbd30db03211e6673
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/assets/images/media/trust.png
200 OK 12 kB URL HTTP/1.1 192.236.176.76/assets/images/media/trust.png
IP
File type PNG image data, 512 x 247, 8-bit/color RGBA, non-interlaced\012- data
Hash f3ff07254b9994058d557ab3c86bb2bc
f2100a85293aa31fe7e0d14c1e058430099a161d
244793fb9439b1028ae8e4f2a1eb2649a9eb7faa67df04e30a0f5a1bc6c5966a
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/trust.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 01 Dec 2021 21:23:36 GMT
Accept-Ranges: bytes
Content-Length: 12291
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/collection.svg
200 OK 1.1 kB URL HTTP/1.1 192.236.176.76/assets/images/collection.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1090), with no line terminators
Hash 7bb57bdac85951065b5c528f747fc538
4f7ffba9056a1aeb138b10bb1df80d54b93fcf46
0304371ce0adc28148c52f73da46c6aa04a81a906a40ef51a8dc3824b4a27459
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/collection.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:54 GMT
Accept-Ranges: bytes
Content-Length: 1090
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9995
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/nft.svg
200 OK 966 B URL HTTP/1.1 192.236.176.76/assets/images/nft.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (966), with no line terminators
Hash 2d0a07dc21e172de5e86a7528a57c697
49fc96114ee20c1dad2f496413a284cf3ccfae9b
70af639883560c3e224a542b07775556966feedc29ee188ba0e2e97574f5f075
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/nft.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:52 GMT
Accept-Ranges: bytes
Content-Length: 966
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/media/coin98-2.png
200 OK 35 kB URL HTTP/1.1 192.236.176.76/assets/images/media/coin98-2.png
IP
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash 2f313667fbc9863ff992ab52869d7d81
8d73df9c64d1569260ee1ba054d378c892ee61fd
dc3deafae6ec83a38bab73557b4eb2276296cb35ca79876fff24d3a9e3ac5a4e
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/coin98-2.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 21:31:20 GMT
Accept-Ranges: bytes
Content-Length: 35290
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/css/fonts/EuclidCircularB-Regular-WebXL.ttf
200 OK 154 kB URL HTTP/1.1 192.236.176.76/assets/css/fonts/EuclidCircularB-Regular-WebXL.ttf
IP
File type TrueType Font data, 19 tables, 1st "BASE", 16 names, Macintosh, language 0x2, type 1 string, otCopyright (c) 2018 Swiss Typefaces Sarl. All rights reserved.\266Version 3.001FontEuclid is a \012- data
Size 154 kB (154192 bytes)
Hash d5aac9e768d285a459e8b4ea0ff490bf
4347a5a09e8e4014ec4a13634f20fafeb1c7b6c0
08b11e464af41dc1764715793aee5078e632b68606feb061b996f3ff8be7401c
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/css/fonts/EuclidCircularB-Regular-WebXL.ttf HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/assets/css/metamask.css
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Sun, 20 Jun 2021 15:08:20 GMT
Accept-Ranges: bytes
Content-Length: 154192
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: font/ttf
192.236.176.76/assets/images/nft/4.png
200 OK 4.1 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/4.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e1a49a417f8b9d62a662f9114f85aa10
6743f2cbfcc78f6f4d5850054d131daa874e5854
896d3d489f353b7b4f3995e0ec155ac30e0a76f5d02e2a2d4cfdc728d2db982f
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/4.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:42 GMT
Accept-Ranges: bytes
Content-Length: 4149
Keep-Alive: timeout=5, max=9995
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/eth.svg
200 OK 684 B URL HTTP/1.1 192.236.176.76/assets/images/nft/eth.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 6f8e2979d428180222796ff4a33ab929
49244279a17bc96f6760112da740103f6bf5aa76
c88a7b74c4d55a5b8080b148da4010b4d35f7e3aa178eab4f9b312e9b4e16547
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/nft/eth.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 18:29:04 GMT
Accept-Ranges: bytes
Content-Length: 684
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9995
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/nft/9.png
200 OK 5.3 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/9.png
IP
File type PNG image data, 98 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash ec5b51eb59932287963751ba5e75cd98
0a0175c8fae2c2462e9db457c95406e0825059a0
cafcd535a573c4e34e658dab37955414f6aa171255e7201273231aebb2f88ebb
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/9.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:06 GMT
Accept-Ranges: bytes
Content-Length: 5317
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/8.jpg
200 OK 2.3 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash ba47f9e14523f4fe2942eb76cd687ce0
4b2ed4b84b96dc1a8eabadc98e6e996cfa787707
6e50b34fc59004ea8e733203eaaed4d7fd5e2aeb2c812e82d6488a626ac44266
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/8.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:00 GMT
Accept-Ranges: bytes
Content-Length: 2313
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/nft/14.jpg
200 OK 5.0 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/14.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 9fede95006b696d4cb4ce6eb808ef8cb
e3778157a13851fc087eb893266bc39fef18b0aa
190c5b2c6b34a26461c43c8d0b30b5132b2e928b09702b81d5b546117a304adb
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/14.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:38 GMT
Accept-Ranges: bytes
Content-Length: 5020
Keep-Alive: timeout=5, max=9995
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/safety.png
200 OK 26 kB URL HTTP/1.1 192.236.176.76/assets/images/safety.png
IP
File type PNG image data, 1500 x 1000, 8-bit/color RGB, non-interlaced\012- data
Hash 2083686d34342fb331aa1af9f060e66c
f156340f8e8c4325d228f3713f75899f3541f161
450ba6bba349c42a6abb95e79cb90a49671d01a9eb52b879c7d74d24662a36c5
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/safety.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 05:59:58 GMT
Accept-Ranges: bytes
Content-Length: 26166
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/categories/art.webp
200 OK 257 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/art.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 257 kB (257268 bytes)
Hash 5306867e611ccf4ae4870f2a397ac666
05ddd42571a601d60d4fdef8539bc6e827d4d724
9a1d2967a227349ee6e2a778ff87f336b77cd406bac35dea39a05345d9a2fa04
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/categories/art.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 06:24:10 GMT
Accept-Ranges: bytes
Content-Length: 257268
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/media/math-2.png
200 OK 13 kB URL HTTP/1.1 192.236.176.76/assets/images/media/math-2.png
IP
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash a2e66b93a02f261b86bc5758166ef555
7b04f1275ee6be75af8acacaf9e56c620baa8e8a
d358840e3efc571222edc8fba26f0a7def6a0e413fc0daf07c2b110225966db6
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/math-2.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 21:33:08 GMT
Accept-Ranges: bytes
Content-Length: 12631
Keep-Alive: timeout=5, max=9992
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/wallet/metamask-alternative.webp
200 OK 62 kB URL HTTP/1.1 192.236.176.76/assets/images/wallet/metamask-alternative.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f67565450ff9a3c29c5a73f01a58ea72
9632ff494b58def54782d1d19218107283dcc836
5e45e1bc3b0e1c17fc51b0cc145a1f99bb0dd93959afa62d7166204dbcecdd3c
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet/metamask-alternative.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 17:18:56 GMT
Accept-Ranges: bytes
Content-Length: 62154
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/media/safepal-2.png
200 OK 8.4 kB URL HTTP/1.1 192.236.176.76/assets/images/media/safepal-2.png
IP
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash c9e253f7ac54c785a8e52b092d7cd5b5
d5cfe3a6b8c560c7dcf49f88b45a0991f120397b
c8ff5d607114ee0434fcc6a23047b04fbe9e7465a2c6d7d70c1dbf501ba0c277
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/safepal-2.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 21:32:04 GMT
Accept-Ranges: bytes
Content-Length: 8438
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/wallet/walletconnect-alternative.webp
200 OK 1.8 kB URL HTTP/1.1 192.236.176.76/assets/images/wallet/walletconnect-alternative.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bc79cf15ae946361ea45f926480b8906
4c596a3a3bc8bf270f3c2520558522b7caba9358
56f27987ad3ced2c98776375e3e0554ec3e49d9d30585eb3274723963eed3d70
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet/walletconnect-alternative.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 17:19:10 GMT
Accept-Ranges: bytes
Content-Length: 1750
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/sturec-promocard.webp
200 OK 536 kB URL HTTP/1.1 192.236.176.76/assets/images/sturec-promocard.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 536 kB (536108 bytes)
Hash 863f2eb63172027722ee6f6eee7c8fe3
77e91efb5e9dddc9f76d9c28597b0ca1b022f903
df48c77c9af155bfa7d0a40747c67ced85ba3b4b76be1cb949909e49e15c535b
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/sturec-promocard.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 14:14:24 GMT
Accept-Ranges: bytes
Content-Length: 536108
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/media/binance-2.png
200 OK 26 kB URL HTTP/1.1 192.236.176.76/assets/images/media/binance-2.png
IP
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash bb44e9b6506daab9507f1914762c4da7
e40f2cf474778dcbe4767937c04df9222fa93e18
14722564bad5407c92440fca9dc43c708e5c4ee350f72a08b4bbdc6ff8b0f966
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/binance-2.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 21:30:14 GMT
Accept-Ranges: bytes
Content-Length: 25833
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/bg.jpg
404 Not Found 315 B URL HTTP/1.1 192.236.176.76/assets/images/bg.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/bg.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/assets/css/style.css
HTTP/1.1 404 Not Found
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=9991
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
192.236.176.76/assets/images/avatar.jpg
200 OK 4.0 kB URL HTTP/1.1 192.236.176.76/assets/images/avatar.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x53, components 3\012- data
Hash 8db3346b4c7661ebd80d60d30f2376c3
92b7db5fd615fe69f8feacfe0b6c475d3ce90842
4c0d06d64a8c7b7e628df806e068ca0993f6bc0eda6e6bd949b8e267b12443e1
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/avatar.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Tue, 21 Dec 2021 19:52:40 GMT
Accept-Ranges: bytes
Content-Length: 4023
Keep-Alive: timeout=5, max=9992
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/restless-promocard.webp
200 OK 93 kB URL HTTP/1.1 192.236.176.76/assets/images/restless-promocard.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 784x784, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 79ec48a392a0ebb6fe5411c07d424fe7
c85a82ec45043d261186ddfbf9be1110437c71cc
d377595e910904dafaa69e0e189b8f26ee248e3ce8459be73cdc58944c6c6ad0
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/restless-promocard.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 14:14:36 GMT
Accept-Ranges: bytes
Content-Length: 93226
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9995
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/collectibles.webp
200 OK 52 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/collectibles.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 476ce7100d248414d01ebe385b9a3699
036cc014ba812783bd079e04bbc828ecd1f1094d
ccf8d844fce53f496903e474f331d318e9498ea957126a2152afee889f4a60ea
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/collectibles.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:36 GMT
Accept-Ranges: bytes
Content-Length: 52248
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9992
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/domain-names.webp
200 OK 52 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/domain-names.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 13f3061ad278717cf185a4e3be105d35
037ecd16b1646de7690a1a2b8c15c4260a5b0f19
84092dbeee0c446ec5a3fb0aa65b244c1d92ced4d0ed39f4e4e65f548e8f0fca
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/domain-names.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:42 GMT
Accept-Ranges: bytes
Content-Length: 51922
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9992
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/music.webp
200 OK 131 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/music.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 131 kB (130734 bytes)
Hash b74b0a9e12d5194fabe6686e6cd36fbe
483164561faed595318dddbabf17678eeaa7a78a
a336a33e8d6a3b74fee191121a0c950229bc6097f9018983181b730b875c741d
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/music.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:44 GMT
Accept-Ranges: bytes
Content-Length: 130734
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9990
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/photography-category.webp
200 OK 215 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/photography-category.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 215 kB (215364 bytes)
Hash 5b836f4bed45402184ccd898d52fa8bc
4e407d1900f8928da324c957cf43a99aab478ed0
bbf7fa21aa40409faa6416554f4bec4b482dc671c6338ca88050a61f2603a7fc
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/photography-category.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 06:32:42 GMT
Accept-Ranges: bytes
Content-Length: 215364
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9991
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/sports.webp
200 OK 129 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/sports.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 129 kB (129352 bytes)
Hash 9a0077fded7f3fb9b2618594ebc859e4
d8149685f5d0c6fe66311dee6e606f2e2c13d8b9
ebac54aa2f93a252975e3ca96d62dec0caa9a01e1f33668620aac442a0036ce7
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/sports.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 06:32:56 GMT
Accept-Ranges: bytes
Content-Length: 129352
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/virtual-worlds.webp
200 OK 97 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/virtual-worlds.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bd88b2dc4a25e15e246d200396492836
fdf5d8ea368487a3554cf4caba2a17a82a28e8a7
3b337c5115eccc66bbfebd7fc08aab4f6200c4f4a3773b680d42804aae1f4351
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/virtual-worlds.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:40 GMT
Accept-Ranges: bytes
Content-Length: 97424
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9991
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/nft/1.png
200 OK 3.7 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/1.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 1209d911b32dc2147b94d606b63cd4f0
c04dac737ecc115472f8825baacc9dcced062a7a
dd96bc841f3ea99e844d79b4af86eabf5626eae058c784a6237aa1136655a814
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/1.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:16 GMT
Accept-Ranges: bytes
Content-Length: 3716
Keep-Alive: timeout=5, max=9989
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/categories/trading-cards.webp
200 OK 180 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/trading-cards.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 180 kB (179596 bytes)
Hash a995601de89992960cb18f1ba89479d2
110346a4d12b8e47c3ad44385f85a916d15ee206
ecf70633eab5862ce8d0097d47f1c075be220c716a2a2e44930d2acca6c19811
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/trading-cards.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:38 GMT
Accept-Ranges: bytes
Content-Length: 179596
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9991
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/nft/2.jpg
200 OK 3.0 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 5f65d917c27e533b0027eb43700ff3b9
6e88f5cd8b42ebe39e8a228c3702fcfb2e334632
987545c8c5dd5389df9617568ca4fdda0916c3a6c4b0a46ef93676a0371355f8
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/2.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:26 GMT
Accept-Ranges: bytes
Content-Length: 2970
Keep-Alive: timeout=5, max=9988
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/nft/3.png
200 OK 2.6 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/3.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 096ff4156dffe840fa815d6caf9ff5e7
8871d70770ce4e1677b01160d1c00182328896f4
3aa8c59639a748328ada5ef2189b4a565cd0e3571c8fb38cd19c8de6a3304dc2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/3.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:34 GMT
Accept-Ranges: bytes
Content-Length: 2612
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/5.png
200 OK 22 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/5.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 9374e0e5ef2709b1e36b80f4df1939e6
00df4b7c5f571ed5658b9caecbeeb7838840859d
b8d6db569f4b3d492427b9b1f340f5d748cd5069dbd32058f15118efda9d8f5e
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/5.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:48 GMT
Accept-Ranges: bytes
Content-Length: 22249
Keep-Alive: timeout=5, max=9990
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/7.png
200 OK 4.1 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/7.png
IP
File type PNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 98a561436ae37cf62368739c2b2d0ab3
cb633d6ef0c36f4963df9c34725174ffaf1b7f65
51f8e39428b85eb68838441f98ae3dc70a5afb7d07a9efa3518e5cfca40d5ad2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/7.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:40:52 GMT
Accept-Ranges: bytes
Content-Length: 4130
Keep-Alive: timeout=5, max=9992
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/6.png
200 OK 1.5 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/6.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash bb6a788b5b6fe3130c5dcc982636532b
2ea62313ebbefbedb58aeaf8f136c754b5c31380
0ab3b532fe6146c7a8a2b5c8d8c9aa855824715ea8194784d75c5b56a7208425
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/6.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:40:40 GMT
Accept-Ranges: bytes
Content-Length: 1500
Keep-Alive: timeout=5, max=9987
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/categories/utility.webp
200 OK 471 B URL HTTP/1.1 192.236.176.76/assets/images/categories/utility.webp
IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/utility.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:56:08 GMT
Accept-Ranges: bytes
Content-Length: 140854
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/webp
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 16:40:43 GMT
expires: Fri, 12 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 226799
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.236.176.76/assets/images/nft/13.png
200 OK 7.9 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/13.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0bdfba71540624b348d9175b2e0d6e22
998e712d22141d691403202d2c3cd38c89d4e9ef
d2869ac97772c8fd23ccbf6c47b503dbf132e07960fb053ad37425d718ed2464
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/13.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:30 GMT
Accept-Ranges: bytes
Content-Length: 7925
Keep-Alive: timeout=5, max=9991
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/10.png
200 OK 12 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/10.png
IP
File type PNG image data, 100 x 99, 8-bit/color RGB, non-interlaced\012- data
Hash af6b6c4bcaf2214f3c45fde6f99f94b5
4eb18bf98ba3ddde19e752641b3ab88e7a8202dc
571ef4a6a96c9926a20ef6e316802d92f2e522752135cb0f0a62264f59c556ef
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/10.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:12 GMT
Accept-Ranges: bytes
Content-Length: 11838
Keep-Alive: timeout=5, max=9989
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/media/binance.png
200 OK 40 kB URL HTTP/1.1 192.236.176.76/assets/images/media/binance.png
IP
File type PNG image data, 1024 x 232, 8-bit/color RGBA, non-interlaced\012- data
Hash 6ac926b828ca0430d7103bacd062b086
595d827a956b675299b0190468c602c7d66a5a7f
7ffb4dce58b9714be95d1627ebe80e420ca58e489d95f371b19927e0493ec31f
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/binance.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 11:28:34 GMT
Accept-Ranges: bytes
Content-Length: 40053
Keep-Alive: timeout=5, max=9986
Connection: Keep-Alive
Content-Type: image/png
fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
200 OK 128 kB URL HTTP/2 fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://192.236.176.76
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 20:33:17 GMT
expires: Fri, 12 Jan 2024 20:33:17 GMT
cache-control: public, max-age=31536000
age: 212845
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2
200 OK 155 kB URL HTTP/2 fonts.gstatic.com/s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 155276, version 1.0\012- data
Size 155 kB (155276 bytes)
Hash 0ba49c096a77b67734434cebcaf2e14d
2f9e28ab559782402f27332633c843c40209d95a
35dca8a7145a17c8d1306f25a3ca091578e15396f0b22d61eb8e73262ac75577
GET /s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://192.236.176.76
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 155276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 14 Jan 2023 13:50:31 GMT
expires: Sun, 14 Jan 2024 13:50:31 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 11 Aug 2022 01:57:05 GMT
content-type: font/woff2
age: 64211
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/assets/css/fonts/Roboto-Bold.ttf
200 OK 167 kB URL HTTP/1.1 192.236.176.76/assets/css/fonts/Roboto-Bold.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data
Size 167 kB (167336 bytes)
Hash 9ece5b48963bbc96309220952cda38aa
013f1bbcbbd80991a5f00fca52a90d0d7ab8b81f
baf44ce81636cc927fc27768437e5da853bac699e8aaf832d042f0dfed29b4b4
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/css/fonts/Roboto-Bold.ttf HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/assets/css/metamask.css
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 09 Jan 2013 13:00:00 GMT
Accept-Ranges: bytes
Content-Length: 167336
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9990
Connection: Keep-Alive
Content-Type: font/ttf
192.236.176.76/assets/images/media/math.png
200 OK 7.2 kB URL HTTP/1.1 192.236.176.76/assets/images/media/math.png
IP
File type PNG image data, 340 x 183, 8-bit colormap, non-interlaced\012- data
Hash 4473ff9c2c057d6ac4240bd6e7759349
e17b560f53974ef252fbb322e7c8d034aebd6690
b0b38756b915f03c8070087f049eccac8a0a7e80e7d6aafedfc2bf87946c68ee
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/math.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 10:39:18 GMT
Accept-Ranges: bytes
Content-Length: 7158
Keep-Alive: timeout=5, max=9990
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/assets/images/unnamed.png
200 OK 15 kB URL HTTP/1.1 192.236.176.76/assets/images/unnamed.png
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/unnamed.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Fri, 17 Jun 2022 07:35:24 GMT
Accept-Ranges: bytes
Content-Length: 581891
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/media/metamask-fox.svg
200 OK 3.2 kB URL HTTP/1.1 192.236.176.76/assets/images/media/metamask-fox.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3231), with no line terminators
Hash c06f3a3e804ebc7343949fdca3fdd7f8
d96957b5a42c4f69e11a55e388234a26daf4a039
b855851451c3eb7220bc7331d6cf7f19dad4580ebc35610211f028848ba7fc34
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/media/metamask-fox.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 14:05:54 GMT
Accept-Ranges: bytes
Content-Length: 3231
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9985
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/media/walletconnect-logo.png
200 OK 3.4 kB URL HTTP/1.1 192.236.176.76/assets/images/media/walletconnect-logo.png
IP
File type PNG image data, 286 x 176, 8-bit colormap, non-interlaced\012- data
Hash 509cd98112fdc9b7a07e516fecce320e
8fc19b5b4ab53036f479124499677398d15f11f8
ec2eada2aace5a4e51644986b6b4fa0e750dcba4390d9bb1a8ec3fd378049ee3
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/walletconnect-logo.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 15:00:24 GMT
Accept-Ranges: bytes
Content-Length: 3415
Keep-Alive: timeout=5, max=9988
Connection: Keep-Alive
Content-Type: image/png
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 15 Jan 2023 07:33:45 GMT
age: 417
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/assets/images/theweeknd-promocard.webp
200 OK 549 kB URL HTTP/1.1 192.236.176.76/assets/images/theweeknd-promocard.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 549 kB (549248 bytes)
Hash 7943e86715fbcefd5796f2d6c1b0c1c7
8fb31d5a0b0d22f05c4ac6b0f522fe8bab022e5d
041a3bb1cf6615f09801ac1badbccc2a3a314d54a726f94ff083991b0a0cf69e
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/theweeknd-promocard.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:42 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 14:14:06 GMT
Accept-Ranges: bytes
Content-Length: 549248
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: image/webp
ocsp.digicert.com/
200 OK 471 B IP
Hash c01ec61f7ca77158f474b3ab519c12fa
fc82ae0fcd73a83a980b75709a08e65239894e4a
f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6378
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Last-Modified: Sun, 15 Jan 2023 05:54:25 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
192.236.176.76/assets/images/32x32.webp
200 OK 422 B URL HTTP/1.1 192.236.176.76/assets/images/32x32.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9ba41886d6ada0a2620317827a729606
bc53be78ad9418abaf8225b7f49f28baa77a3c98
e4bd91072de073dd0a39ad4f7ac4afd25bdb6051d224005eafc19bd28e384b45
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/32x32.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 07:40:43 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:56:02 GMT
Accept-Ranges: bytes
Content-Length: 422
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9984
Connection: Keep-Alive
Content-Type: image/webp
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc715115d3d54cf1b08c665c03c19d7e
78f390517b89a9de3e4607cf2a0afca67c3f15a5
84703f8544d9ed6e06966bc810ad23ad0e5d756c3ac02584d25d1844ccdc56ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f8ae4ab9ee17e2598e9299bdc0f44c0
ab4c7d1750edf513359218ab6d0b81cdd4dcb90c
75e680ab62ee77f0811fdb770d1c913dd41a911e7efb4ca99bc4cfe7fcb432c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 07:32:35 GMT
expires: Sun, 15 Jan 2023 07:47:35 GMT
cache-control: public, max-age=900
age: 488
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sun, 15 Jan 2023 07:40:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9g6l9Br1Ssr99qB5tqvHAg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TDaMpXZkGdosa7dh+5DLAKoZPHM=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc715115d3d54cf1b08c665c03c19d7e
78f390517b89a9de3e4607cf2a0afca67c3f15a5
84703f8544d9ed6e06966bc810ad23ad0e5d756c3ac02584d25d1844ccdc56ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f8ae4ab9ee17e2598e9299bdc0f44c0
ab4c7d1750edf513359218ab6d0b81cdd4dcb90c
75e680ab62ee77f0811fdb770d1c913dd41a911e7efb4ca99bc4cfe7fcb432c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 15 Jan 2023 07:40:43 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4dc72ba06ace9ad5795c9de974b66afa
d56fbd77e052b69ce1eaf5e43d24596d162c45fa
f8986ca3bd2b5c850b42dc287b7ea42b02eb8dee4943344ade7a03946d6f7325
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 8.1 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (11021), with no line terminators
Hash 8affb11e6b711165be621e0d533085dc
91509076fa0ba8980bd1c7bce22e4dfa94eb30e5
c561dfffff85172c436189003eb4fd9397f01491c6a41a42db88d282607c19cc
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 15 Jan 2023 07:40:43 GMT
server: ESF
cache-control: private
content-length: 8091
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b111ef82a33bd2b2b3d2b52034492d14
7f753449a31cb983369fbfa8394569f3ca5c6219
fff2ff42d2cb0bfdb042c83b88175f25cc5224afb44e9488da817bccded79ce8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js
IP
File type ASCII text, with very long lines (36162)
Hash e9bf756aa2fac02f3307febffa242635
d0da1ab271c03a49fe6499a38e6f3c34d396c5d4
12655f58f30c13fae1942aae99ace0d8e450ead33ec120b89d78fd98a279e0bb
GET /js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14349
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 14 Jan 2023 12:52:14 GMT
expires: Sun, 14 Jan 2024 12:52:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
age: 67709
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/gfGuPd1CELo/maxresdefault.webp
200 OK 24 kB URL HTTP/2 i.ytimg.com/vi_webp/gfGuPd1CELo/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 94d015ce62cec9dc2c61420a977da42b
c657a723c06ab007f5dd99b12bcbc500f534bded
cc374be9c2cde17b898c0a88a66162c972adf073e335828e60555b699c76b58e
GET /vi_webp/gfGuPd1CELo/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 24130
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 07:00:24 GMT
expires: Sun, 15 Jan 2023 09:00:24 GMT
cache-control: public, max-age=7200
age: 2419
etag: "1633564202"
content-type: image/webp
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b111ef82a33bd2b2b3d2b52034492d14
7f753449a31cb983369fbfa8394569f3ca5c6219
fff2ff42d2cb0bfdb042c83b88175f25cc5224afb44e9488da817bccded79ce8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c3c110ba961e9dc11d65a482bb71ea85
de802119be339e1bb1ee339384075955e9289015
8319d6b6949a0a198d8a162c4e72504a0f9f5e9ea9c9192e2e192b7d997d2a7d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/uPCDZ2LTlORkwQ8e_cj5B-ax9KBoVZA0xxp6wWiUH2deSV8uoaV6gjvr7pL1-0sGrPr_5yK7_ww=s68-c-k-c0x00ffffff-no-rj
200 OK 2.2 kB URL HTTP/2 yt3.ggpht.com/uPCDZ2LTlORkwQ8e_cj5B-ax9KBoVZA0xxp6wWiUH2deSV8uoaV6gjvr7pL1-0sGrPr_5yK7_ww=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 184161ae4a7d95a66d334b8e86b5c138
177f1960c06ecd54e8b15728d5e8491b9e049abf
f4cd6bdb68a11d75123376a8d84333fd2e97059aa3185ca07ae443378bb2d47d
GET /uPCDZ2LTlORkwQ8e_cj5B-ax9KBoVZA0xxp6wWiUH2deSV8uoaV6gjvr7pL1-0sGrPr_5yK7_ww=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2154
x-xss-protection: 0
date: Sun, 15 Jan 2023 05:51:45 GMT
expires: Sun, 08 Jan 2023 14:53:53 GMT
cache-control: public, max-age=86400, no-transform
age: 6538
etag: "v2"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c3c110ba961e9dc11d65a482bb71ea85
de802119be339e1bb1ee339384075955e9289015
8319d6b6949a0a198d8a162c4e72504a0f9f5e9ea9c9192e2e192b7d997d2a7d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 07:40:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 15 Jan 2023 07:40:43 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0e763009d99aa2f3733c1259cb69fb7c
341ce981b2ce188a053b36a4b12198689b9ec7b1
476f7de50af663a60a0791b2e1c9dd6e83aaf1114dc336eddb7dbfb5884e93a0
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 962
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 15 Jan 2023 07:40:43 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 871ced6cfe919499937981d7534580e9
2e8c0fb97592bd7868be241ade707d1b38e49c34
35a05f202611c548fd0768c5f1b3d749a0dd50ade93e6df29940547480c5ec91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14342
Expires: Sun, 15 Jan 2023 11:39:46 GMT
Date: Sun, 15 Jan 2023 07:40:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 871ced6cfe919499937981d7534580e9
2e8c0fb97592bd7868be241ade707d1b38e49c34
35a05f202611c548fd0768c5f1b3d749a0dd50ade93e6df29940547480c5ec91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14342
Expires: Sun, 15 Jan 2023 11:39:46 GMT
Date: Sun, 15 Jan 2023 07:40:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 871ced6cfe919499937981d7534580e9
2e8c0fb97592bd7868be241ade707d1b38e49c34
35a05f202611c548fd0768c5f1b3d749a0dd50ade93e6df29940547480c5ec91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14342
Expires: Sun, 15 Jan 2023 11:39:46 GMT
Date: Sun, 15 Jan 2023 07:40:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 871ced6cfe919499937981d7534580e9
2e8c0fb97592bd7868be241ade707d1b38e49c34
35a05f202611c548fd0768c5f1b3d749a0dd50ade93e6df29940547480c5ec91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35A05F202611C548FD0768C5F1B3D749A0DD50ADE93E6DF29940547480C5EC91"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14342
Expires: Sun, 15 Jan 2023 11:39:46 GMT
Date: Sun, 15 Jan 2023 07:40:44 GMT
Connection: keep-alive
fonts.googleapis.com/css2?family=Material+Icons+Sharp
200 OK 6.7 kB URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Sharp
IP
Hash 9ee6cf0167f12865918f6cdeba38089c
d40b2cec15654836e5065286f31692870e82a6fa
a505126ca423b2e24ddbc70f4efcc68d9cf8d6c07eb017e5f5c0801263f439db
GET /css2?family=Material+Icons+Sharp HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 07:40:42 GMT
date: Sun, 15 Jan 2023 07:40:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 74ac30be02dee9dcfeee79a7dc54edff
1368d81de22ea2e4054a3e1a8f01ef337c63e35b
8abc2f276906dfb9ce75c2526d2c2cfa6aea6dbe13f4046de1040cd611cbbc1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9801
x-amzn-requestid: 39d84a20-55f7-4b7c-abc4-9ac1ff100da9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqSkoGCZoAMF1zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0caea-4f7a1cf676335cc83018dc51;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 03:07:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rUFicgD94yxyZhMtQm-aYS-QpZXn07rLRBhnBLMTIQh6qHKOX_LRFg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 05:32:33 GMT
age: 7691
etag: "1368d81de22ea2e4054a3e1a8f01ef337c63e35b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Two+Tone
200 OK 7.0 kB URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Two+Tone
IP
Hash 86aa66a9ef0ecd929bd09f6c00a8ee26
a8b0f965d3270f07114a1a24a582483b70a84d0c
9294253119e1a3f95046b91808dc9e4c9a4493aee2dd83ea781638e15c9e5f31
GET /css2?family=Material+Icons+Two+Tone HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 07:40:42 GMT
date: Sun, 15 Jan 2023 07:40:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c609c89120eef87bbdd0d8ee5ee18f9
be8e369be0ccc707b904546798aacc9afe413cfa
feaa9f41b45aaa71d87008fe3112bc09e41cf6c2c500b4bc1adc125c7c82eee1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4981
x-amzn-requestid: b6c3a2c1-b88e-4eb9-9c22-788748559fea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ewISXEQ9oAMFbkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c320db-0a9f9ac1084e4f02006598cf;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: a8kL20Yet_IuO2ZztlKmenTGOFa4BCYHi2B-4B1W1eq5-tCqGK3isg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 21:38:35 GMT
etag: "be8e369be0ccc707b904546798aacc9afe413cfa"
content-type: image/jpeg
age: 36129
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Round
200 OK 9.9 kB URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Round
IP
Hash fa5225ece952b08b794b537881c900ec
b221a5a2a6b492826136aed4e5abd3ea16633d43
4e0eff9e2440c5cce6d7e0157efc54ff51c05c177022d3e5f871f70a2b789a74
GET /css2?family=Material+Icons+Round HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 07:40:42 GMT
date: Sun, 15 Jan 2023 07:40:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 90fc5463f271bab652af099cb526f189
805c27d8f82a5eb6583814313c36f5e7699408e5
749dca33aa337b494fb113896bf035bc9dcb17068ecffdf30fc5ac85a4ac5185
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5495
x-amzn-requestid: d76b8f1d-37a2-47ac-9acf-1b0a44a4a5fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqsroF62IAMF-mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0f4b0-67700bfd11f1ad5d0aaab92d;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 06:05:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: i1qN9bIaz5ekgkM81KehmDDQpzBULDfPkp-fjEOHiZxFVogDBOIGzg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 23:08:05 GMT
age: 30759
etag: "805c27d8f82a5eb6583814313c36f5e7699408e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.opensea.io/gas-free/video-background.svg
200 OK 0 B URL HTTP/2 static.opensea.io/gas-free/video-background.svg
IP
GET /gas-free/video-background.svg HTTP/1.1
Host: static.opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 07:40:42 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdsv4zeXqUuap7ZHtxBQ21htxixgBfJlRFfz6TZdvVkxamQCb5XxIxGi0GI401w11xqjWWSS-ncaCkPSUhPaR3Qg
x-goog-generation: 1630524348914119
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 20064
x-goog-hash: crc32c=8vorDw==, md5=9AtoCsBIAExuRya7g4YFUA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
last-modified: Wed, 01 Sep 2021 19:25:48 GMT
etag: W/"f40b680ac048004c6e4726bb83860550"
cache-control: public,max-age=3600
cf-cache-status: HIT
age: 2419
set-cookie: __cf_bm=mBgujeN7WoFlA2Hep0oarQnz42XVXIVuvDIZbLHQu9s-1673768442-0-AZlitZY6gCyfQCu95yj4Dhs16aRotqKTGFdk6YbUx/ZVZh7zvGBQhLb7akzG/A6ccMevHs84ribT+DK2PHathF8=; path=/; expires=Sun, 15-Jan-23 08:10:42 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 789cf6fde8ab1c0a-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Outlined
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Outlined
IP
GET /css2?family=Material+Icons+Outlined HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 07:40:42 GMT
date: Sun, 15 Jan 2023 07:40:42 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/4248d311/www-embed-player.vflset/www-embed-player.js
200 OK 0 B URL HTTP/2 www.youtube.com/s/player/4248d311/www-embed-player.vflset/www-embed-player.js
IP
GET /s/player/4248d311/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 109432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jan 2023 16:03:11 GMT
expires: Fri, 12 Jan 2024 16:03:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 12 Jan 2023 01:15:11 GMT
content-type: text/javascript
age: 229051
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons
IP
GET /css2?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 07:40:42 GMT
date: Sun, 15 Jan 2023 07:40:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.opensea.io/Logos/opensea-pride.svg
200 OK 0 B URL HTTP/2 static.opensea.io/Logos/opensea-pride.svg
IP
GET /Logos/opensea-pride.svg HTTP/1.1
Host: static.opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 07:40:42 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdtIVqRWXYBhwTKccY5tTi-iVomiBLIjTatnBsZuqFaN46Mc4tOiM0nKTEd3_M7mLV3LTd9CQ1DBubK1mx6sxvN3483IR-aG
last-modified: Sat, 04 Jun 2022 00:44:06 GMT
etag: W/"c6663547ec3b4fce760ea28efc547df9"
x-goog-generation: 1654303446305079
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4301
x-goog-hash: crc32c=cQBNsw==, md5=xmY1R+w7T852DqKO/FR9+Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
cache-control: public,max-age=3600
cf-cache-status: REVALIDATED
set-cookie: __cf_bm=UVZdxdxnZsvXA34rxrDP.bF6aqD6CZEySYOyk4WcA1c-1673768442-0-AexDjA8K+zsHM/3bEczjF8bVbJziGUqMdI2v01kvsVugKAABk8Fbxl0GSigzJsEtolY0kHEJmQNSsR4kmNDHg5g=; path=/; expires=Sun, 15-Jan-23 08:10:42 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 789cf6fda87d1c0a-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
200 OK 0 B URL HTTP/2 www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
IP
GET /embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 15 Jan 2023 07:40:42 GMT
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=B9_DxNhZYBI; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=DCi3eB-3M48; Domain=.youtube.com; Expires=Fri, 14-Jul-2023 07:40:42 GMT; Path=/; Secure; HttpOnly; SameSite=none
DEVICE_INFO=ChxOekU0T0RjNE1EY3lNREV3TXpFM09UZzJPQT09EPrbjp4GGPrbjp4G; Domain=.youtube.com; Expires=Fri, 14-Jul-2023 07:40:42 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+082; expires=Tue, 14-Jan-2025 07:40:42 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.236.176.76
23.33.119.27
93.184.220.29
104.18.16.184