Overview

URL 102.53.15.18/
IP102.53.15.18
ASNItissalat Al-MAGHRIB
Location Morocco
Report completed2022-10-04 09:20:01 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-04 2 102.53.15.18/ Malware
2022-10-04 2 102.53.15.18/MasterviewWebUI/raphael/colorwheel.js Malware
2022-10-04 2 102.53.15.18/MasterviewWebUI/raphael/colorpicker.js Malware
2022-10-04 2 102.53.15.18/MasterviewWebUI/MasterviewWebUI.nocache.js Malware
2022-10-04 2 102.53.15.18/MasterviewWebUI/raphael/raphael2-min.js Malware
2022-10-04 2 102.53.15.18/MasterviewWebUI/5B84D802966FB6B3B93E241E95430B96.cache.js Malware
2022-10-04 2 102.53.15.18/version.json Malware
2022-10-04 2 102.53.15.18/Photo.scr Malware
2022-10-04 2 102.53.15.18/MasterviewWebUI/deferredjs/5B84D802966FB6B3B93E241E95430B96/9. (...) Malware
2022-10-04 2 102.53.15.18/MasterviewWebUI/deferredjs/5B84D802966FB6B3B93E241E95430B96/6. (...) Malware
2022-10-04 2 102.53.15.18/images/bg-img.jpeg Malware
2022-10-04 2 102.53.15.18/MasterviewWebUI/deferredjs/5B84D802966FB6B3B93E241E95430B96/4. (...) Malware
2022-10-04 2 102.53.15.18/fonts/franchise-bold-webfont.woff Malware
2022-10-04 2 102.53.15.18/fonts/fontomas-webfont.woff Malware
2022-10-04 2 102.53.15.18/fonts/BebasNeue-webfont.woff Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

URL 102.53.15.18/Photo.scr
IP  102.53.15.18
Magic PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows\012- data
Size 1578496
MD5 aba2d86ed17f587eb6d57e6c75f64f05
SHA1 aeccba64f4dd19033ac2226b4445faac05c88b76
SHA256 807126cbae47c03c99590d081b82d5761e0b9c57a92736fc8516cf41bc564a7d
Analyzer Analysed Verdict Comment
VirusTotal 2022-08-24 10:12:56 64/70


Passive DNS (12)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS netdna.bootstrapcdn.com (1) 3413 2012-09-07 15:11:00 UTC 2022-10-04 06:01:58 UTC 104.18.10.207
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-04 02:06:24 UTC 93.184.220.29
mnemonic passive DNS fonts.gstatic.com (2) 0 2014-08-29 13:43:22 UTC 2022-10-03 23:48:04 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS 102.53.15.18 (24) 0 No data No data 102.53.15.18 Unknown ranking
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-10-04 00:45:50 UTC 143.204.55.35
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-03 08:07:24 UTC 34.160.144.191
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-03 09:28:24 UTC 52.88.220.109
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-04 04:18:32 UTC 34.120.237.76
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-10-04 02:04:45 UTC 142.250.74.10
mnemonic passive DNS r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-10-03 07:33:36 UTC 23.36.77.32
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-03 09:28:24 UTC 34.117.237.239
mnemonic passive DNS ocsp.pki.goog (4) 175 2017-06-14 07:23:31 UTC 2022-10-03 07:14:52 UTC 142.250.74.3


Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 102.53.15.18

Date UQ / IDS / BL URL IP
2022-10-04 09:20:01 +0000
0 - 0 - 15 102.53.15.18/ 102.53.15.18

Last 5 reports on ASN: Itissalat Al-MAGHRIB

Date UQ / IDS / BL URL IP
2022-12-08 00:21:33 +0000
0 - 0 - 2 ch.hjjhhjgfhjfghjghjfg.com/c7BW52818743570592 (...) 102.48.99.127
2022-12-05 00:41:50 +0000
3 - 0 - 0 2factor.ddns.net/mt/activation/?key=sdfhmcmls (...) 102.50.154.53
2022-12-05 00:34:25 +0000
3 - 0 - 0 2factor.ddns.net/mt/activation/mywallet.php 102.50.154.53
2022-12-05 00:23:46 +0000
3 - 0 - 0 2factor.ddns.net/mt/activation/?key=sdfhmcmls (...) 102.50.154.53
2022-12-05 00:23:44 +0000
3 - 0 - 0 2factor.ddns.net/mt/activation/mywallet.php 102.50.154.53

Last 1 reports on domain: 102.53.15.18.

Date UQ / IDS / BL URL IP
2022-10-04 09:20:01 +0000
0 - 0 - 15 102.53.15.18/ 102.53.15.18

No other reports with similar screenshot



JavaScript

Executed Scripts (19)


Executed Evals (0)


Executed Writes (1)

#1 JavaScript::Write (size: 54, repeated: 1) - SHA256: 166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da

                                        < !doctype html > < html > < head > < /head><body></body > < /html>
                                    


HTTP Transactions (51)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
ETag: "3664421315"
Last-Modified: Wed, 14 Mar 2018 19:09:15 GMT
Content-Length: 2037
Date: Tue, 04 Oct 2022 11:29:03 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   2037
Md5:    8ee06ac989ea0bbbbe78a144ec1918c5
Sha1:   386fd367c29e31d471ea9e13743da97750435975
Sha256: 95af6c4c716d8d8499ba1073467b2cf8ce6b219cfb7b4097a244e4990eed282f

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "AB48F17E54075E1ECF034278E82BCACD2E3689773186CC84FBA9B79AAC907294"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3614
Expires: Tue, 04 Oct 2022 10:20:04 GMT
Date: Tue, 04 Oct 2022 09:19:50 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 08:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1_SguXVsATqivTOf0TNauN87vNTyrKLo0C6eebsSQshb-ZIVpYS4lw==
Age: 1966


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D681A4C2E20A6019C7E2D980CBFA77B34DB9356899099296C3B8B4263CA5FB5F"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3416
Expires: Tue, 04 Oct 2022 10:16:46 GMT
Date: Tue, 04 Oct 2022 09:19:50 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: d1MEMHBF4txgEgzECA2GUJqfqXXHKTBaqm0HFz492r2zviWq35kqzCwGLuXGSU1qqMlRgGHQ2G8=
x-amz-request-id: XQE7QST2230TSF2D
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 04 Oct 2022 08:54:08 GMT
age: 1542
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 04 Oct 2022 09:19:50 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /font-awesome/3.2.1/css/font-awesome.css HTTP/1.1 
Host: netdna.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         104.18.10.207
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Date: Tue, 04 Oct 2022 09:19:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CDN-PullZone: 252412
CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
CDN-RequestCountryCode: DE
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=31919000
Content-Encoding: gzip
Last-Modified: Mon, 25 Jan 2021 22:04:51 GMT
CDN-CachedAt: 08/03/2021 17:42:29
CDN-EdgeStorageId: 601
CDN-RequestPullCode: 200
CDN-RequestPullSuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
X-Content-Type-Options: nosniff
CDN-ProxyVer: 1.0
CDN-Status: 200
CDN-RequestId: 9026c9e4abb125cb82a6f9e5488a7cfc
CDN-Cache: HIT
CF-Cache-Status: HIT
Age: 10316311
Server: cloudflare
CF-RAY: 754cd6945a63b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (301)
Size:   5959
Md5:    46428eb0a79918b2732aead48bde4e1d
Sha1:   bf2e90411cadf7ff24dd75f66de72bab963dcf12
Sha256: 157e3a5f0b547ee3823a0d0d9e861599eec7f704d427b9f5adcb5367f2e7eca9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 09:19:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 09:19:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /unit.css HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
ETag: "3764275889"
Last-Modified: Tue, 17 Feb 2015 13:46:25 GMT
Content-Length: 56
Date: Tue, 04 Oct 2022 11:29:03 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   56
Md5:    3307476664c40b953a81f22a063bb531
Sha1:   719d6fcd29bdb98865ada42563e586c4da3e057a
Sha256: 8647b0d5ad23719d030c3b0b4486d4b4e0d764fd8c13e92804ef08c5c7a44dd1
                                        
                                            GET /MasterviewWebUI/raphael/colorwheel.js HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
ETag: "79271301"
Last-Modified: Mon, 11 Aug 2014 07:40:50 GMT
Content-Length: 7966
Date: Tue, 04 Oct 2022 11:29:03 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text
Size:   7966
Md5:    a0207270d96b00283b3155135d69f445
Sha1:   6dc0739c3ecb3b69aa44090be4f7e0b6effffe8a
Sha256: 87e3c34421a29f02f1d7b033e8344786497a34983717c9145540a6f41956273b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /MasterviewWebUI/raphael/colorpicker.js HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
ETag: "1194890641"
Last-Modified: Mon, 11 Aug 2014 07:40:50 GMT
Content-Length: 7321
Date: Tue, 04 Oct 2022 11:29:03 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text
Size:   7321
Md5:    28376b0718f9056a74895eaf4c3400cf
Sha1:   9597aec8b10c5a2b81a9db960ad84e5e9e547b10
Sha256: 05c26815052166e8a990194b816681c9f0754a674cb905dfbacb5b3da75c0b90

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /MasterviewWebUI.css HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
ETag: "4267916699"
Last-Modified: Mon, 04 Aug 2014 11:53:36 GMT
Content-Length: 5593
Date: Tue, 04 Oct 2022 11:29:03 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text
Size:   5593
Md5:    9e2ec821ce19a458f86e1b47161880ff
Sha1:   3daf6915eb640042da82a19d10194b238415555d
Sha256: b373e94fc358c41a97e3ac1422d8d45a6fb05efbbf5e33920a09138c73c2b2c2
                                        
                                            GET /MasterviewWebUI/MasterviewWebUI.nocache.js HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
ETag: "2127997472"
Last-Modified: Mon, 11 Aug 2014 10:07:48 GMT
Content-Length: 10683
Date: Tue, 04 Oct 2022 11:29:03 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3530)
Size:   10683
Md5:    339671b2ad3167423a3a2cb243698dce
Sha1:   5b4d4cd22dbdc4cf844a36f268a4c6c4e6cef3e4
Sha256: af0e65785b10f6781a3a13180823219042448583b96e25cceca9ae23c9879a17

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 08:29:33 GMT
Expires: Tue, 04 Oct 2022 09:26:52 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4L1TqTyDs7xuRjzWnJP8pIDWVthg8hkMC6VRM4zLdNJpHiESUlD2RQ==
Age: 3017


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /MasterviewWebUI/raphael/raphael2-min.js HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
ETag: "4135047611"
Last-Modified: Mon, 11 Aug 2014 07:40:50 GMT
Content-Length: 116604
Date: Tue, 04 Oct 2022 11:29:03 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   116604
Md5:    c8377ae8fd7f3a9767ffa53c0abb3707
Sha1:   86d50a5ea8607da6bba4d45d97bf9f602b9df266
Sha256: b6fdceacd03ca04c840199b1251e86cb8d41fb5d310b166d8043054b311b5055

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5568
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 09:19:51 GMT
Last-Modified: Tue, 04 Oct 2022 07:47:03 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /MasterviewWebUI/WebApp/style.css HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
ETag: "2006651065"
Last-Modified: Mon, 11 Aug 2014 07:25:02 GMT
Content-Length: 1610
Date: Tue, 04 Oct 2022 11:29:04 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text
Size:   1610
Md5:    a158df0b67328ce9f0960affd7ae603f
Sha1:   2a196dc29349f0ad84f6647127afd9e388d1f313
Sha256: 61a2c8d6ce4f843e0519537c8422070862b371e701775c03355aa0f551fc197d
                                        
                                            GET /MasterviewWebUI/WebApp/avgrund.css HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
ETag: "1738149941"
Last-Modified: Mon, 11 Aug 2014 07:25:02 GMT
Content-Length: 3000
Date: Tue, 04 Oct 2022 11:29:04 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text
Size:   3000
Md5:    c7e6ab8a0243b0df72803a2970ae8c07
Sha1:   01a72252930887a4a65daadb38f447149fadc6af
Sha256: a679476482b520a9f711310f09506f4515e56bb15a261654997c3a0bcfe824da
                                        
                                            GET /MasterviewWebUI/popover.css HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
ETag: "388833657"
Last-Modified: Mon, 11 Aug 2014 10:06:22 GMT
Content-Length: 2671
Date: Tue, 04 Oct 2022 11:29:04 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text
Size:   2671
Md5:    1034072b836b27b67318f54e2a47fe29
Sha1:   6ab77e6456cecc70ab60bf6e725cbe8fc2a50efd
Sha256: 919a169eb12828636c347e188915f4fc2d70c281e626ece246927124a4ab61b9
                                        
                                            GET /MasterviewWebUI/masterview.css HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
ETag: "3949498621"
Last-Modified: Mon, 11 Aug 2014 09:57:18 GMT
Content-Length: 910
Date: Tue, 04 Oct 2022 11:29:04 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text
Size:   910
Md5:    adaedd2a6499a812de27a2d24c1cd67a
Sha1:   3bd3c800290e19d92f9110301354e77d3fbd8fa3
Sha256: 7095a87a28fd4678b58f7e811d961b670568d3be8814afcdc04512e9ca5558c8
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 09:19:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://102.53.15.18
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 17:10:21 GMT
expires: Wed, 27 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 576570
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size:   23580
Md5:    e1b3b5908c9cf23dfb2b9c52b9a023ab
Sha1:   fcd4136085f2a03481d9958cc6793a5ed98e714c
Sha256: 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
                                        
                                            GET /MasterviewWebUI/WebApp/webappwidgets.css HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
ETag: "3866235387"
Last-Modified: Mon, 11 Aug 2014 07:25:02 GMT
Content-Length: 4783
Date: Tue, 04 Oct 2022 11:29:04 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  assembler source, ASCII text
Size:   4783
Md5:    eef8123156d5b2b3bd7aa8362a2b94b8
Sha1:   a1babed34a462438437eb484e0a15a5b7a268afb
Sha256: 0ac88ed8748edbda37f5ee6ccb0d9d5f36f77f6867972b726aa831f5a14c1dae
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 04 Oct 2022 09:19:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /MasterviewWebUI/gwt/standard/standard.css HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
ETag: "2435982245"
Last-Modified: Tue, 10 Jun 2014 16:37:20 GMT
Content-Length: 27038
Date: Tue, 04 Oct 2022 11:29:04 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text
Size:   27038
Md5:    a81147c2bca305ce96eef3ee8f29d90b
Sha1:   ceda4c7542cfc3d935101c93aeda59f0b34a9ddb
Sha256: de9e10a67985aa1e0977e4287e2d4798fc63575346e1d27b162b3982ddf217b7
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UDtOMTfoBr5ayoubuuwwVw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.88.220.109
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UcOdZNWS5N32ZNv1GH2osDHfKh8=

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Accept-Ranges: bytes
Content-Length: 5430
Date: Tue, 04 Oct 2022 11:29:04 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel\012- data
Size:   5430
Md5:    ff0da20c6d220a1ba1934d84b9669551
Sha1:   82c62f81681debbbb505767ecb51f9f7572b5169
Sha256: 5a504aae61c6dfce9220a9fbd520d2af89b9bec89093ecc297b1048a916ee1a7
                                        
                                            GET /MasterviewWebUI/5B84D802966FB6B3B93E241E95430B96.cache.js HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
ETag: "157645201"
Last-Modified: Mon, 11 Aug 2014 10:07:48 GMT
Content-Length: 237762
Date: Tue, 04 Oct 2022 11:29:04 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text, with very long lines (31566)
Size:   237762
Md5:    ade7684692608ae5ba44e83c5d0fdbfd
Sha1:   ca10645dc6d1b9306263eb7594308d5f9d77e5d1
Sha256: 42fddfdebe7aba43ef330554fb5c8df282aee1994389343e5b5d0027bddf405d

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /version.json HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=utf-8
Content-Length: 2
Origin: http://102.53.15.18
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Accept-Ranges: bytes
Content-Length: 178
Date: Tue, 04 Oct 2022 11:29:05 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   178
Md5:    731732fd712722659d1ae5c842c57719
Sha1:   18f40678be9e5f042846d00b4e4ec2c00fa1aa6c
Sha256: 25eb4ad61ef05b83b844c4baa5fa0f142a546c0c41a818a2fba7ba571bb78c0c

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /Photo.scr HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/
Upgrade-Insecure-Requests: 1

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Accept-Ranges: bytes
Content-Length: 1578496
Date: Tue, 04 Oct 2022 11:29:04 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows\012- data
Size:   1578496
Md5:    aba2d86ed17f587eb6d57e6c75f64f05
Sha1:   aeccba64f4dd19033ac2226b4445faac05c88b76
Sha256: 807126cbae47c03c99590d081b82d5761e0b9c57a92736fc8516cf41bc564a7d

Alerts:
  Blocklists:
    - fortinet: Malware
  File Analyzers:
    - virustotal: 64/70
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16174
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 09:19:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16174
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 09:19:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16174
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 09:19:52 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16174
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 09:19:52 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8287b853-235b-49f5-9b5c-780827ac695b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9855
x-amzn-requestid: 15f15a2e-0028-40ac-be8f-8e20c37fd27e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHuGX7oAMFgDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-5fe693f30c91e4c82c8accb1;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ngoNHOX6fFTGa1Y_-yFOFUYYYqiLJCQOq3NISbmc3gX21YO0TLxx0w==
via: 1.1 b637bd7696854d7acbf96132dcf53200.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 23:32:19 GMT
etag: "a36475a0ec7d7b92593cadd4aa99ca38550f1cd1"
age: 35253
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9855
Md5:    7b7345414898d451d930431b46d4bd00
Sha1:   a36475a0ec7d7b92593cadd4aa99ca38550f1cd1
Sha256: 79b541c69c78df0e4a4c26438431fd6b52754b589d80e929a4203063712a540c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16174
Expires: Tue, 04 Oct 2022 13:49:26 GMT
Date: Tue, 04 Oct 2022 09:19:52 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DOS5kVEVqBrCVMKRw07fX-6HDgWVb9lJwkVM2pXs0PQHys6CBJUVfQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 41732
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9917
Md5:    d8c08f8066cc732de8befd6ccd629a95
Sha1:   22aab05208a01ae5def4d63dc145085630f57bcb
Sha256: f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: O1yNc4H21kixhUEE7099oNqs7a5ZnJBBjlZbsbmLvaXyzXzrK0dL3w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:33 GMT
age: 41719
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5504
Md5:    6c6882c60d7ca6f918c77104e3ad1d52
Sha1:   20ef861be49c652a938e0145e4ca3a60159367e2
Sha256: 861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f5624b4-8e2a-461e-a32a-38d6b5a3a8d2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11101
x-amzn-requestid: f98e84d9-1e66-4436-b793-219a777f2ba0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqcvE8JoAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5784-25bd2b234c1093de70074c92;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:43:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: becOxfqUowywFrxzDSeK7F1lFdDVTSHIF1TLC5k5aSlLPpsR6F8gjw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:42:37 GMT
age: 38235
etag: "db07d58d8feff4ea01866d095e5264ee5c8e1ca3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11101
Md5:    ae824db4a95391149198a4b6b8556c70
Sha1:   db07d58d8feff4ea01866d095e5264ee5c8e1ca3
Sha256: 19e96d204813247697e1858daf9e07d6c4cafd9ab1175a3bf39a7f07f6991521
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SGeDEPoXxsTV5UwkZnn3MJPbjhHhrKSsueHPxVapV_7Icl6daFk3oA==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 41732
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4858
Md5:    6779181f9c06975f2a662da743893939
Sha1:   585e7146fd24cdc2496b05baafea04091dc541e2
Sha256: 8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:51 GMT
age: 16621
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /MasterviewWebUI/deferredjs/5B84D802966FB6B3B93E241E95430B96/9.cache.js HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
ETag: "2959303261"
Last-Modified: Mon, 11 Aug 2014 10:07:48 GMT
Content-Length: 408060
Date: Tue, 04 Oct 2022 11:29:05 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   408060
Md5:    8ec475b2530edf17ad6f8b01fd0665f0
Sha1:   23e34f10b996eadd1e4a9583acb7887e5b0d43af
Sha256: b5015ec9916970a15778276b1496c89adb9bf28742708814f669cdfa4df880fa

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /MasterviewWebUI/deferredjs/5B84D802966FB6B3B93E241E95430B96/6.cache.js HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
ETag: "2415307490"
Last-Modified: Mon, 11 Aug 2014 10:07:48 GMT
Content-Length: 13761
Date: Tue, 04 Oct 2022 11:29:06 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  ASCII text, with very long lines (13760)
Size:   13761
Md5:    09d390710cca0f8b2743e7aedb5a64cd
Sha1:   f5d40187a7ea558a153d2f80c2e4188f55acb3b0
Sha256: 1b96eb3bb44bd937c0a2ded3c31edd813bce42971697774e623f7690043de2c0

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /images/bg-img.jpeg HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
ETag: "4138219228"
Last-Modified: Fri, 31 May 2013 09:05:28 GMT
Content-Length: 5801
Date: Tue, 04 Oct 2022 11:29:06 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 256x256, components 3\012- data
Size:   5801
Md5:    6b3faf794a1bd761cdf5513a4cbb861d
Sha1:   7ab93e265a0066518aba7333a541eeacfffc6421
Sha256: b45221fb1102127d479abb4b68266fe1e9d446aa73804345753c14c835e55b80

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /MasterviewWebUI/deferredjs/5B84D802966FB6B3B93E241E95430B96/4.cache.js HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
ETag: "60959991"
Last-Modified: Mon, 11 Aug 2014 10:07:48 GMT
Content-Length: 3469
Date: Tue, 04 Oct 2022 11:29:06 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (3468)
Size:   3469
Md5:    0a83dea4c39d0f9d52d150fd27801457
Sha1:   aff5c7984714c67ab733d9cfd7a69d30bae9cd55
Sha256: 76180cf12dbc9f60c42cf3368f6ea63ea72494eeb57458205f96bce30f876c90

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://102.53.15.18
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22504
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 17:15:31 GMT
expires: Wed, 27 Sep 2023 17:15:31 GMT
cache-control: public, max-age=31536000
age: 576263
last-modified: Tue, 26 Apr 2022 16:04:16 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22504, version 1.0\012- data
Size:   22504
Md5:    1c6c65523675abc6fcd78e804325bd77
Sha1:   898d9808304dc157f5dcb18ca169ec6e2b96b3d7
Sha256: 08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92
                                        
                                            GET /fonts/franchise-bold-webfont.woff HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Accept-Ranges: bytes
Content-Length: 14972
Date: Tue, 04 Oct 2022 11:29:06 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 14972, version 1.0\012- data
Size:   14972
Md5:    85a8ea96ef16769230b3aac44d2abb06
Sha1:   28071c545a6f35b1032766063c9d172b9af93423
Sha256: e54c42ee0275ff4eebc72e43cf9d5af559999359c61ec91dd85331738f90405b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /fonts/fontomas-webfont.woff HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Accept-Ranges: bytes
Content-Length: 2280
Date: Tue, 04 Oct 2022 11:29:07 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 2280, version 1.0\012- data
Size:   2280
Md5:    f28a1018cbde83704a8c482de127dd86
Sha1:   44903384e4d34da8f54b603afb87ce420e16dff9
Sha256: 203b129d97b34203e22b62aa0de0110199ce0d483067858f96942188f6e91728

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /fonts/BebasNeue-webfont.woff HTTP/1.1 
Host: 102.53.15.18
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://102.53.15.18/

                                         
                                         102.53.15.18
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Accept-Ranges: bytes
Content-Length: 11632
Date: Tue, 04 Oct 2022 11:29:07 GMT
Server: lighttpd/1.4.31


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 11632, version 1.0\012- data
Size:   11632
Md5:    6f04d3d6e28184a5ace603e80b97433e
Sha1:   1998cb7315be9d506cc738032bb81412b17f6036
Sha256: dd360ae94b4d7230efb497196eb6b948f8afeb2e41ec8ff6113309ee971c3721

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /css?family=Lato:400,900 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://102.53.15.18/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 09:19:50 GMT
date: Tue, 04 Oct 2022 09:19:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---