curite.net/round/index.html
200 OK 3.0 kB URL HTTP/2 curite.net/round/index.html
IP
ASN #12703 Pulsant (Scotland) Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (446), with CRLF, LF line terminators
Hash 51ac876c25e6110973395a04c82da1ec
8f3d996033dcb8e952a2e8ba39f3fc1be4bcca5f
3618de32205fb3b1f90d4b5d51ae263a45c8d2cb7bc5e0974e7d847fa4d21b15
Analyzer Verdict Alert openphish Webmail Providers
fortinet Phishing
quad9 Sinkholed
GET /round/index.html HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
last-modified: Mon, 30 Jan 2023 12:51:12 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 3048
content-type: text/html
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 25389646a2daae58c728e01095973033
651619a503a0f21dd5a8135cce5240f51bae1ab5
8ecd890bd13e92a07acabbd187e71d59adc1f896b249ac1165444ea1f9e21bef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8ECD890BD13E92A07ACABBD187E71D59ADC1F896B249AC1165444EA1F9E21BEF"
Last-Modified: Tue, 14 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16082
Expires: Thu, 16 Mar 2023 20:43:47 GMT
Date: Thu, 16 Mar 2023 16:15:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1424d2734290cfd767b86da0ee0da3bc
875b1243bca41177411ac6af710d2bb96f45a0ac
70b5bb76774526a0cf131445ae2f8639085c3449812497df457f4bc78089917b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70B5BB76774526A0CF131445AE2F8639085C3449812497DF457F4BC78089917B"
Last-Modified: Wed, 15 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18339
Expires: Thu, 16 Mar 2023 21:21:24 GMT
Date: Thu, 16 Mar 2023 16:15:45 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 16 Mar 2023 16:14:23 GMT
content-type: application/json
age: 82
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cef8425d927aae677234ca535562b58b
823b45ffe59ac234f49d38516baf528a9daded85
c2d2e2be0e1484259271be471ff46345fd332c071389f9ef92f637e7ee666ea6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2D2E2BE0E1484259271BE471FF46345FD332C071389F9EF92F637E7EE666EA6"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4464
Expires: Thu, 16 Mar 2023 17:30:09 GMT
Date: Thu, 16 Mar 2023 16:15:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: x7vErQ8B6n4T/jCt/ual3qXHIEJZQeeMGkNApvUCw8Mgs4D8kqCRcCfWdorwNviFStQZUFR6jEA=
x-amz-request-id: 43CDRW12A9PHFXQJ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 16 Mar 2023 15:23:15 GMT
age: 3150
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 16 Mar 2023 16:15:45 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
curite.net/round/program/js/common.min_ff728c7e.js
200 OK 5.1 kB URL HTTP/2 curite.net/round/program/js/common.min_ff728c7e.js
IP
ASN #12703 Pulsant (Scotland) Ltd
File type ASCII text, with very long lines (1479)
Hash 63a0b731e18ae4485406c1fe069e9db6
99b28227681c716a9f66516d1d91b9a6c6db3ffd
78b9d50c7d519f0c453b435b16ed2fdfc0ad207053869ba09686cc24c9a507c6
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /round/program/js/common.min_ff728c7e.js HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:32:46 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 5072
content-type: application/javascript
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/ui.min_ff728c7e.js
200 OK 8.7 kB URL HTTP/2 curite.net/round/skins/larry/ui.min_ff728c7e.js
IP
ASN #12703 Pulsant (Scotland) Ltd
File type ASCII text, with very long lines (551)
Hash e0b4d36c74942d89d92c048f658b7d16
549fa76ddec7144a9af693efd4be3279d54000a3
dd5fb2fb2e09486bc10290c3bb9426bd6b564c559378a35ea322b84bba0a4bbd
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /round/skins/larry/ui.min_ff728c7e.js HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:33:00 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 8690
content-type: application/javascript
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/plugins/jqueryui/themes/larry/jquery-ui_740d8c7e.css
200 OK 9.5 kB URL HTTP/2 curite.net/round/plugins/jqueryui/themes/larry/jquery-ui_740d8c7e.css
IP
ASN #12703 Pulsant (Scotland) Ltd
File type ASCII text, with very long lines (2363)
Hash 6733540f9135bdf9c0ddd3167fa8bf5b
8b1d3881af8a553a132f602224f172f7df2d7543
ae84bc9658671ac3852c245a1e480a4348bfdf729ebcb2a35b6076480f0b8cdd
Analyzer Verdict Alert quad9 Sinkholed
GET /round/plugins/jqueryui/themes/larry/jquery-ui_740d8c7e.css HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:32:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 9466
content-type: text/css
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/styles.min_ff728c7e.css
200 OK 9.2 kB URL HTTP/2 curite.net/round/skins/larry/styles.min_ff728c7e.css
IP
ASN #12703 Pulsant (Scotland) Ltd
File type ASCII text, with very long lines (45176), with no line terminators
Hash d433ca7e20939798f0101a44056eabb8
927deec128ffef0ea5c227b6401ebca9881fa0d8
4c414799f38e6115f4cd8d515fb0ad464413d0edb4056740fc1e45194709117d
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/styles.min_ff728c7e.css HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:33:00 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 9195
content-type: text/css
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/plugins/legacy_browser/js/jquery.min_3e417dbb.js
200 OK 33 kB URL HTTP/2 curite.net/round/plugins/legacy_browser/js/jquery.min_3e417dbb.js
IP
ASN #12703 Pulsant (Scotland) Ltd
File type ASCII text, with very long lines (32346)
Hash 5dd860b7b11d363629c932d812c76767
5c91ab016f98a733e2875aec060ec42896c4ea56
0710c0b5d0b880c4070e2b7c8fbe51fd9e7d8ac869d1bd8696e040eb399561ea
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /round/plugins/legacy_browser/js/jquery.min_3e417dbb.js HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:32:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 33384
content-type: application/javascript
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/program/js/app.min_ff728c7e.js
200 OK 45 kB URL HTTP/2 curite.net/round/program/js/app.min_ff728c7e.js
IP
ASN #12703 Pulsant (Scotland) Ltd
File type ASCII text, with very long lines (711)
Hash e66d523b6dbee215d363404f0dfea855
8f278c93dd21ff1196baec7b3750890fce404fd9
c5c54cc5efaf901ba8a8d110f4e264512eee245cf17a0377756c2a6ea0277dc9
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /round/program/js/app.min_ff728c7e.js HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:32:46 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 45431
content-type: application/javascript
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/plugins/jqueryui/js/i18n/jquery.ui.datepicker-es_740d8c7e.js
200 OK 600 B URL HTTP/2 curite.net/round/plugins/jqueryui/js/i18n/jquery.ui.datepicker-es_740d8c7e.js
IP
ASN #12703 Pulsant (Scotland) Ltd
Hash da188945713da8b3f12c0947f3e2e17d
4d3df921afd6ae6d7f912aeddcd1bd7d7e989b7a
95ef7b6e669ff0a3187a894effca2f794cbf85d8bc8cfd9f7c71bef3f8b80a42
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /round/plugins/jqueryui/js/i18n/jquery.ui.datepicker-es_740d8c7e.js HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:32:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 600
content-type: application/javascript
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/plugins/legacy_browser/skins/larry/iehacks.min_3e417dbb.css
200 OK 1.1 kB URL HTTP/2 curite.net/round/plugins/legacy_browser/skins/larry/iehacks.min_3e417dbb.css
IP
ASN #12703 Pulsant (Scotland) Ltd
File type ASCII text, with very long lines (5242), with no line terminators
Hash dc759c1f585c9877f7cfe145694b2bf6
bc415825ef44bcd31fbff5c02a312209bb9e2179
4acaaf45066fad6b9d8b8950bef0b8ca00d1cf0ba499e69e7d4bebbad2247aec
Analyzer Verdict Alert quad9 Sinkholed
GET /round/plugins/legacy_browser/skins/larry/iehacks.min_3e417dbb.css HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:32:46 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 1089
content-type: text/css
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/plugins/legacy_browser/js/iehacks_3e417dbb.js
200 OK 1.4 kB URL HTTP/2 curite.net/round/plugins/legacy_browser/js/iehacks_3e417dbb.js
IP
ASN #12703 Pulsant (Scotland) Ltd
Hash e3040353947e2ae2b00742a10ac2011b
999dbbac317e7b5c891866426d72fa92a6cb7004
e0af95e72f4c91dc752fa783add9c966cab1539f0d43848b5af7ae2a1985f3e4
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /round/plugins/legacy_browser/js/iehacks_3e417dbb.js HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:32:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 1354
content-type: application/javascript
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/program/js/jstz.min_a1cb4820.js
200 OK 5.0 kB URL HTTP/2 curite.net/round/program/js/jstz.min_a1cb4820.js
IP
ASN #12703 Pulsant (Scotland) Ltd
File type ASCII text, with very long lines (12915)
Hash 620741e02e8b1d90fe680cdfa66106dc
789d2df81d016cc2e48b819c49e796c9d63d3d66
25ac0ba61a3c47c8ac3e9b6b8ca84edee99c5c7056a351fbf5976ea124333c77
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /round/program/js/jstz.min_a1cb4820.js HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:32:48 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 4976
content-type: application/javascript
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/roundcube_log.png
200 OK 7.2 kB URL HTTP/2 curite.net/round/roundcube_log.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 177 x 49, 8-bit/color RGBA, non-interlaced\012- data
Hash a77af1662e2eee5d9c5d6790fc4310a4
c2b53d6abf79f0ad2446079163dd0e5927621087
d330293af1f4effd956d0aafca1209c848d1a214cab5c3994f17f2ef840a9240
Analyzer Verdict Alert quad9 Sinkholed
GET /round/roundcube_log.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Jul 2020 06:58:36 GMT
accept-ranges: bytes
content-length: 7216
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/favicon.ico
200 OK 34 kB URL HTTP/2 curite.net/round/skins/larry/images/favicon.ico
IP
ASN #12703 Pulsant (Scotland) Ltd
File type MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Hash ef9c0362bf20a086bb7c2e8ea346b9f0
fc3ef03acb552dfe09279dccadd99ba8eea5217c
20c30fd4340308d6a4ab222acae353fc2460793ac76645bb1ef1d9d61f4f0a9e
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/favicon.ico HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 34494
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/x-icon
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, ETag, Backoff, Expires, Alert, Pragma, Cache-Control, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 16 Mar 2023 16:14:31 GMT
age: 75
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/ajaxloader.gif
200 OK 1.4 kB URL HTTP/2 curite.net/round/skins/larry/images/ajaxloader.gif
IP
ASN #12703 Pulsant (Scotland) Ltd
File type GIF image data, version 89a, 16 x 16\012- data
Hash c25240cc70fa55720a429dda913693c3
afc2f0a7b5553c0f6fa40faa444ba9f40a6bc650
85cbd9b9f9010b5030a4268afbcd5af1c7993de495f3fcc72256f299c9729768
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/ajaxloader.gif HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 1434
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/gif
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4353e40dea39897876467013220ab1ad
ecdbe764620d0d760f9333ff2c30d0f7d9b5d9a8
f23a16dcfff2a742fcbd5fff52cb6edcb9485eea5e732574f3124371b21abfb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F23A16DCFFF2A742FCBD5FFF52CB6EDCB9485EEA5E732574F3124371B21ABFB3"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13767
Expires: Thu, 16 Mar 2023 20:05:13 GMT
Date: Thu, 16 Mar 2023 16:15:46 GMT
Connection: keep-alive
curite.net/round/skins/larry/images/addcontact.png
200 OK 265 B URL HTTP/2 curite.net/round/skins/larry/images/addcontact.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash c1d8a9a5f3afe96020c1c9220652a3a4
9d63a7b07726f56a7c6b704f95583fec7d68ef3c
f096e89432cdb9516c40188402a8002ff3b7d2ef75bd8dcc552bd0b776ee7d77
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/addcontact.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 265
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/messages_dark.png
200 OK 601 B URL HTTP/2 curite.net/round/skins/larry/images/messages_dark.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 22 x 111, 8-bit/color RGBA, non-interlaced\012- data
Hash 8e5325b6bc78e8838138a6162e7d75bc
6b50300ef37a24a7f116f511a2ad99b8f3b47e49
fc4aef55a2180ec5ed7db61c1e9c46c6966136c21d86762f414aab947e620c75
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/messages_dark.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 601
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/messages.png
200 OK 1.3 kB URL HTTP/2 curite.net/round/skins/larry/images/messages.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 20 x 110, 8-bit colormap, non-interlaced\012- data
Hash 72e916129e088cedb87261223ef57e96
365ac51308f2a2df0e1fa8dbf5fabbab086baf9b
6e67def07dc1314d8404e019ecdb847a3dab3d26a4f31e545e81333db25be0b5
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/messages.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 1264
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/splitter.png
200 OK 134 B URL HTTP/2 curite.net/round/skins/larry/images/splitter.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 39 x 39, 2-bit colormap, non-interlaced\012- data
Hash 6d32a58602744d0049ebad31fce114a7
7ee6a6645cdc6eab150dc7b3e6a04d374f45cc47
88b650b2204982c01ebed21fff63ece898b76734424d5a785dff204a790cbb9f
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/splitter.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 134
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/selector.png
200 OK 118 B URL HTTP/2 curite.net/round/skins/larry/images/selector.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 23 x 32, 2-bit colormap, non-interlaced\012- data
Hash 0d5b22d446de2b17942a7c0c5f1bc692
16c49ad4a6f2f2be49310da9fe89d641e6aa6073
6b554f693e3888407bb5217c3e9c619c471398a9ae8d6fcf1d284b6d9beddd3d
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/selector.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 118
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/ajaxloader_dark.gif
200 OK 1.8 kB URL HTTP/2 curite.net/round/skins/larry/images/ajaxloader_dark.gif
IP
ASN #12703 Pulsant (Scotland) Ltd
File type GIF image data, version 89a, 16 x 16\012- data
Hash cf1bb985a52a1295f782ffb8f4c96150
ed0293efaf490ad8cd8f1ff8d54523f6981856a2
2c562c6ca2471b474c5d3fd5644b17614e31a6cf27ee3b022d61f153c1baffbc
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/ajaxloader_dark.gif HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 1849
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/gif
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/quota.png
200 OK 1.4 kB URL HTTP/2 curite.net/round/skins/larry/images/quota.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 24 x 504, 8-bit colormap, non-interlaced\012- data
Hash aaa4c6fee94ce555840737261c5c11ec
96bedbe0403eb9dbdae09966d5330ea4ca03ff43
1913a29d546d09dcc5aae49d7791e8db972adfed11194980b6fe4a1b479ce05f
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/quota.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 1389
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/watermark.jpg
200 OK 5.0 kB URL HTTP/2 curite.net/round/skins/larry/images/watermark.jpg
IP
ASN #12703 Pulsant (Scotland) Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 280x280, components 3\012- data
Hash e78410fc59c722d9a75c0eec9259506b
160ee34132370419db286d89ba938053580d7633
d19c8e540b1a863fbfae9fbb500290d5a3c4f9fdef989e19f7e5d4148237a183
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/watermark.jpg HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 5000
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/jpeg
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/filetypes.png
200 OK 4.7 kB URL HTTP/2 curite.net/round/skins/larry/images/filetypes.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 25 x 626, 8-bit colormap, non-interlaced\012- data
Hash a0f55c02b728a90b18aa4d44ed3df57e
94bde2de2ec0fd8c7d01e34bcc46bb3b05944001
7818dd64565bff50328cec0a552e8b4790fc5bbc538f37d7f7ce05ed87fed405
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/filetypes.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 4718
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/listicons.png
200 OK 10 kB URL HTTP/2 curite.net/round/skins/larry/images/listicons.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 48 x 2360, 8-bit colormap, non-interlaced\012- data
Hash c458e41a4b5462b808695eb226c87b4c
64d854985d93164eff4fe0d54cf1a4cad6addbf3
7ebebfc80fd23649c2d8c9fb81babe8be585931a12fc90befded5f3e37f1eaef
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/listicons.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 10409
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
curite.net/round/skins/larry/images/buttons.png
200 OK 9.1 kB URL HTTP/2 curite.net/round/skins/larry/images/buttons.png
IP
ASN #12703 Pulsant (Scotland) Ltd
File type PNG image data, 52 x 2145, 8-bit colormap, non-interlaced\012- data
Hash d70cace6418426b8e20abb0302a32742
df8026b3c1e72b38485b51e5e65f03a37533a14d
283246420c8ddc585831699f9623caf0985097ce116a5d640f4d869becfcceca
Analyzer Verdict Alert quad9 Sinkholed
GET /round/skins/larry/images/buttons.png HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 12 Apr 2018 03:13:48 GMT
accept-ranges: bytes
content-length: 9130
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:46 GMT
content-type: image/png
date: Thu, 16 Mar 2023 16:15:46 GMT
server: Apache
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WwrSFKX2/8NXZrszics3Eg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: L7omUe1yifqhaEW0oq4Ov3Gm/us=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15644
Expires: Thu, 16 Mar 2023 20:36:31 GMT
Date: Thu, 16 Mar 2023 16:15:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15644
Expires: Thu, 16 Mar 2023 20:36:31 GMT
Date: Thu, 16 Mar 2023 16:15:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15644
Expires: Thu, 16 Mar 2023 20:36:31 GMT
Date: Thu, 16 Mar 2023 16:15:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15644
Expires: Thu, 16 Mar 2023 20:36:31 GMT
Date: Thu, 16 Mar 2023 16:15:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c2898f-dfca-4b38-8bb4-ea9223acf947.gif
200 OK 18 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c2898f-dfca-4b38-8bb4-ea9223acf947.gif
IP
File type GIF image data, version 89a, 296 x 148\012- data
Hash f370e83ad32370272aff3de804fc9847
cc9dee8e36b4930360c9495a9733ebe34b303c78
0e706585240425dec6d2a3a6e34ebdc070d803a50a866bff66c5a9e9dc16a701
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6c2898f-dfca-4b38-8bb4-ea9223acf947.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 17452
x-amzn-requestid: f3bd1a50-8c20-411f-97ae-a6b884c2acc4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14nHHWAIAMFw0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123afa-6f4827544877224e3a2c8bab;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:39:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 8bcadAdGqO9JqyL9TsON6_AUIVcUDK7LrIJgz2Wyvt1lVvgm9Tla-g==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 b2d3922a177f6cecf9222a78a0a1ad32.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:45:20 GMT
age: 66627
etag: "cc9dee8e36b4930360c9495a9733ebe34b303c78"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bd8586a0a52f516ac521f2a3752b049
3cfd233164ae5350f2fb61250641b70e788cf58a
8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783"
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15644
Expires: Thu, 16 Mar 2023 20:36:31 GMT
Date: Thu, 16 Mar 2023 16:15:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd435609e-78df-456d-97d1-ce3dab50f1ca.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd435609e-78df-456d-97d1-ce3dab50f1ca.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2879c5f7846d25cc2d3f8a648051f80c
73a375bcdbb98a4879b07665749a209847786489
0adc5ed54782fbf9b24e4c87dad1951fc540c70219baf2de6bc6a593b10088fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd435609e-78df-456d-97d1-ce3dab50f1ca.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12047
x-amzn-requestid: 48b40973-09ed-4ac0-9ab3-8893312796a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BzcRUHALoAMFZNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641140d4-6e632e3720eb233f6ff920fb;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 03:51:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 6I5F3FK8dHrbUZZI0MBJzrtXA7PNySeNHI7QI5IzVgNJLjHK2NSzNg==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 05:08:44 GMT
age: 40023
etag: "73a375bcdbb98a4879b07665749a209847786489"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash be71491cee9b47dc3ffb23b4fdff25b3
79c7d22c8df6d305f46c5779ccb9f25169d4d111
e785896e5840fb901ddd0118bef3ccad6b59a96d8eef0e8ccd9c95a3c261ba45
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8487
x-amzn-requestid: f904b483-c6ae-4318-9932-4e48d8188585
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvTpAEUAIAMFUig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f996c-5905cad6148df52e4f10ecf5;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:45:16 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: iFDVPB-wzZyIG9xYU-f3rnebwRbaWDo90aD520OcgsptZR0vmkc2ew==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 f3ac324bf05099849ebda59e8136db0e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 22:00:52 GMT
age: 65695
etag: "79c7d22c8df6d305f46c5779ccb9f25169d4d111"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04285abf-0522-44d5-a610-dbdc572f8fe2.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04285abf-0522-44d5-a610-dbdc572f8fe2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d5eecb38b600f3ae033932d71741b6d0
d71287bc6c7e50bd37ee73c6c61a005b1fe668e3
09df757cd6681e511c8d83e8e2a0fdd3b19b2b8f3823e57541d7838df2f3371e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04285abf-0522-44d5-a610-dbdc572f8fe2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6454
x-amzn-requestid: 75db4751-34af-4af4-9233-4bd44b3a78c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14BnEUiIAMFw2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a0a-5c0c24470a9e35e564d243ca;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: qtypC9EvYuK_evQLVpMrv3J8RA0Ym7D4PKp4b7FsKOftt1M-UiDYJQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9825a45e2b387a61504c0c3df20048ee.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:35:06 GMT
age: 67241
etag: "d71287bc6c7e50bd37ee73c6c61a005b1fe668e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf18cafd-6d4c-4553-9c73-25d72f724795.webp
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf18cafd-6d4c-4553-9c73-25d72f724795.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 660709688360bca87ae14758d956c97e
425f5e45db2d8e846644a3b7242ebf3898bd27ec
8748c18187494d83210395915b055e76b3754c47717f8c166a05c11a98c806aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf18cafd-6d4c-4553-9c73-25d72f724795.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7939
x-amzn-requestid: 6a321606-ddf6-4055-9e10-0f25515a337b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14nTHAYoAMFzBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123afb-1d01b9ac74b5933443527208;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:39:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: t7PbQpCjGVS0WNIIYSe_HJ8yX4W9iVwh13v3DvJfmz1ybnm0PFxB8A==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:47:58 GMT
etag: "425f5e45db2d8e846644a3b7242ebf3898bd27ec"
content-type: image/jpeg
age: 66469
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35bbebd-fe94-4a9a-89ef-f9766e41b86e.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35bbebd-fe94-4a9a-89ef-f9766e41b86e.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4062ca109e37235c9996cd13acaca8ab
d4fcc855ddd9f7a949b66ba5bceba73f7b0c91bd
800e19d4c2fbb828aedb80542563c95b8f1d6022ff604576ed4943f1fc6d607b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35bbebd-fe94-4a9a-89ef-f9766e41b86e.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11594
x-amzn-requestid: b0875d40-ec76-4541-9e9c-0a86c89bdf22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14BfHOkoAMFXIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a09-43982eb560373c1449a90e35;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 9vw7FbJkRKJmWRew3sc10KV1-9ZCZAeZSiALYPCHv-F6Gj6DNcLdDg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Mar 2023 21:51:07 GMT
etag: "d4fcc855ddd9f7a949b66ba5bceba73f7b0c91bd"
content-type: image/jpeg
age: 66280
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
curite.net/round/plugins/jqueryui/js/jquery-ui.min_740d8c7e.js
200 OK 0 B URL HTTP/2 curite.net/round/plugins/jqueryui/js/jquery-ui.min_740d8c7e.js
IP
ASN #12703 Pulsant (Scotland) Ltd
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /round/plugins/jqueryui/js/jquery-ui.min_740d8c7e.js HTTP/1.1
Host: curite.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://curite.net/round/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Nov 2018 04:32:44 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Fri, 15 Mar 2024 16:15:45 GMT
vary: Accept-Encoding
content-encoding: gzip
content-type: application/javascript
date: Thu, 16 Mar 2023 16:15:45 GMT
server: Apache
X-Firefox-Spdy: h2
91.238.161.13
34.117.237.239
23.36.77.32