dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
301 Moved Permanently 405 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d893b42c2f6509defa8a1e7bb3d3ac37
736230c1267f581fc6dedb62809fca427d4e5164
eda3d7649c03f29aae93c08b88ec2652455a7b7659bed49335e10de492b41978
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 05 Jan 2023 14:24:14 GMT
Server: Apache/2.4.41 (Ubuntu)
Location: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Content-Length: 405
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 326898eb925368408f6f42ee173b9d89
b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8
96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10796
Expires: Thu, 05 Jan 2023 17:24:11 GMT
Date: Thu, 05 Jan 2023 14:24:15 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ce8af3d72e7e9af609039abee59c8b87
8e1b16591fbc632df35f15e23da55ee86af31bc3
52edddbda4a3a3b778f61a491b21e6ea439e9d8024189e636b1f37b2dd7226fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52EDDDBDA4A3A3B778F61A491B21E6EA439E9D8024189E636B1F37B2DD7226FC"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9811
Expires: Thu, 05 Jan 2023 17:07:46 GMT
Date: Thu, 05 Jan 2023 14:24:15 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 05 Jan 2023 13:36:29 GMT
content-type: application/json
age: 2866
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 225d42543c0190cdb3686bf236533f4f
13a0940800fce078487372b6b3ca614dd1ab6c31
766bbe15eb1642ac39e9b71669fbb44252471c8de5adb555cd1a76db44fbe7bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "766BBE15EB1642AC39E9B71669FBB44252471C8DE5ADB555CD1A76DB44FBE7BC"
Last-Modified: Mon, 02 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5148
Expires: Thu, 05 Jan 2023 15:50:03 GMT
Date: Thu, 05 Jan 2023 14:24:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Yc0vfAwpstkarPpCV1n28dFysVnl74w/imtQY4PEOMbWnY0K83tJllfJolloUdC5kFX8GjUU968=
x-amz-request-id: 5YA1XZKCTFXP55XF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 05 Jan 2023 13:59:34 GMT
age: 1481
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 14:24:15 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7719ea2bd7ef457593795e843e75cdbd
1c2da37eb3bb9ce072a15bca9fc9d02c6826c27c
408ef64307164c39332f41aa76a5b87eac326885d3e0fa3b14a1af10dcba8b4e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "408EF64307164C39332F41AA76A5B87EAC326885D3E0FA3B14A1AF10DCBA8B4E"
Last-Modified: Thu, 05 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21435
Expires: Thu, 05 Jan 2023 20:21:30 GMT
Date: Thu, 05 Jan 2023 14:24:15 GMT
Connection: keep-alive
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
200 OK 7.7 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (504)
Hash 9245fc4fcdc48de0f982c9bd8764ff92
b8dc74f946c01451114c4d368538191e28ad765a
3844dbaf8c1571c5959fe0c36f5a281803ed1c17bd1dc776c15a4c4b181e7390
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:40 GMT
ETag: "991c-5f183ee0958ff-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7659
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/uodf5wer75sdf7er5.us.css
200 OK 24 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/uodf5wer75sdf7er5.us.css
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (65326)
Hash 2c24cdf72824eafdf0869112250fbcb7
6393bb4bd9d2c406471c3db6a86c250034885d5c
2f9fef610e18d81e5b22fe6a3c7f514501d1bb3678a40b0fce6197e1568f0912
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/uodf5wer75sdf7er5.us.css HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:42 GMT
ETag: "27681-5f183ee2bc5b3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 24110
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a430d46fb27196c8b03f382c1bafbb23
0b31940d1067eb87c24c6d356689d7f9f90231a6
3e9cd331b1c2c1eca94ff12ec1b685e1c1c1909e30e8b3cf4493dc6eac786df8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:24:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/dd34gy654tt45.us.js
200 OK 22 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/dd34gy654tt45.us.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (65299)
Hash 8cffe231e10bbcd8ba5f2a299a72243d
fb32d41e34b530466f57552a14f63affadc20b46
5b5f5a17d2b22241bc140d6f4ee60d6a653de9fb2c8aa4c21eb02621e8bd8a50
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/dd34gy654tt45.us.js HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:37 GMT
ETag: "1499a-5f183ede4b9c9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 21848
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/lw35tnt573424236tjh665.us.css
200 OK 2.6 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/lw35tnt573424236tjh665.us.css
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with CRLF line terminators
Hash 8fb6f1e0b45db8311502ada9f9cd7563
b136299d681be642862c6900f51e293fede35e28
8458c8354539109b875f37373d178cd5a7dbb8d87ee889ffb1247e121a529919
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/lw35tnt573424236tjh665.us.css HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:40 GMT
ETag: "2f41-5f183ee135b8e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2587
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/pyrtrr53423hgh3267hho6454g.us.css
200 OK 6.3 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/pyrtrr53423hgh3267hho6454g.us.css
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (27531)
Hash 31b6167bb8459dc2fa3ca169725f9d4b
791fe544a2cb4d27f1eb9b9ecf3b282f752f2e8f
3e9449617db2dfc6ab8adcd40153067991fb81916a4424325e3c7dcf63542fec
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/pyrtrr53423hgh3267hho6454g.us.css HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:41 GMT
ETag: "6c2e-5f183ee1aae99-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6272
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/487er86s4dhjurtyh.us.js
200 OK 4.5 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/487er86s4dhjurtyh.us.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text, with very long lines (11084), with no line terminators
Hash 6716e06cf1f37f84f0c8d3914bb44f7d
8b5eca583880639d2e83b68c9a02c2ba472bd422
323b945928e870330abb8a5046568f56d767d232d6a02cb1e6ecefa725ec879c
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/487er86s4dhjurtyh.us.js HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:36 GMT
ETag: "2b4c-5f183edd2b84e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4511
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/cdnjs.cloudflare.com/ajax/libs/froala-editor/2.8.5/css/froala_style.min.css
200 OK 1.6 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/cdnjs.cloudflare.com/ajax/libs/froala-editor/2.8.5/css/froala_style.min.css
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (7048)
Hash 74db55934849aee470cf0435186a054e
4a9e7fded8c13eb54e9c7d663ae6a99042b1a623
e263b9daec7ced107993d0fd0204a5a9d4913471a2d0a120018ec8ae6486cf55
GET /Testoe-eod/cdnjs.cloudflare.com/ajax/libs/froala-editor/2.8.5/css/froala_style.min.css HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:43 GMT
ETag: "1c28-5f183ee3fbb30-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1645
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/sd54er75fge8r5.us.js
200 OK 157 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/sd54er75fge8r5.us.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with CRLF line terminators
Hash 779a2131ae70af8531c81e03cc7cf254
efaebac82c3a02672072745b5924939669b74fbe
661b56b7b9faf475f4a110cb242cf49cc294f6cf46a1e7b16baf6806da494b84
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/sd54er75fge8r5.us.js HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:41 GMT
ETag: "f5-5f183ee231ae6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 157
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/3kf38tnbxa2568thb.us.js
200 OK 30 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/3kf38tnbxa2568thb.us.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (32180)
Hash 19bb042b362be9d52a6a4afc1c79f0e1
2c27f676226825381f7a830e65b4d17c02c0c949
bca4f1d8bfca3a6b297d78b33fa24bf8fe780e8aa6ecaff9d116c3f6abeb2ed8
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/3kf38tnbxa2568thb.us.js HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:36 GMT
ETag: "14983-5f183edd1608c-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 29547
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/df5ret4gfh8gf15t4ret.us.js
200 OK 218 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/df5ret4gfh8gf15t4ret.us.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with CRLF line terminators
Hash 54d8f5c9c3561450c0069e73e9827bea
691bfeba5625d45b20046525108cbb77024e8cee
1fb72d2e756121119360fee096951bd269496b2dde615604dade39010a9b562b
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/df5ret4gfh8gf15t4ret.us.js HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:38 GMT
ETag: "16e-5f183ededf137-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 218
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/fsd5ewr4dfg5r.us.js
200 OK 426 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/fsd5ewr4dfg5r.us.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with CRLF line terminators
Hash 9c7420f7ff6a8ddf30feee704cc63242
3a1a94210252b39dee495f403300b1cea8bceb42
ba1600a75ff246841e42ca6240ecbdec9edaada515958812383124ac10b80bdf
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/fsd5ewr4dfg5r.us.js HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:39 GMT
ETag: "55e-5f183edf822a6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 426
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/43er453e3443e5tty.us.js
200 OK 248 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/43er453e3443e5tty.us.js
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with CRLF line terminators
Hash ab5616b234fd9225c1437ddf8e50cfc7
8ca041d927e6de218fc4bea84785841b0ad6620c
037b4e9b6531e6d7c02bbd36ab1a93cc3f84362f19b0225b5524ce9dcea5f962
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/43er453e3443e5tty.us.js HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:35 GMT
ETag: "1f7-5f183edc9ee41-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 248
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.googletagmanager.com/gtag/js?id=UA-72791200-1
200 OK 45 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-72791200-1
IP
File type ASCII text, with very long lines (1921)
Hash d73569b5c3e89776c1354ee58a96113f
c458df20064d1152bf1696b1fd5919363df58e66
2af57c0f4208a7d16b8357623b9ba6ce7f4764b97ebb30f6c4f4b75d8af329b0
GET /gtag/js?id=UA-72791200-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 05 Jan 2023 14:24:15 GMT
expires: Thu, 05 Jan 2023 14:24:15 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44710
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/ddfsd34yh543wg68k67.us.png
200 OK 349 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/ddfsd34yh543wg68k67.us.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data
Hash 7454c652e0733d92de6c920c2d646ae0
34a5bd8c7401f95e346895b0e5ccffbf0e9ad638
44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/ddfsd34yh543wg68k67.us.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:38 GMT
ETag: "15d-5f183edee7dd8"
Accept-Ranges: bytes
Content-Length: 349
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/c70944522155d3f4511c67a004d3d7bd.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/c70944522155d3f4511c67a004d3d7bd.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/c70944522155d3f4511c67a004d3d7bd.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/9f7fc6e2b93a5d8847dfc29ce50c16ba.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/9f7fc6e2b93a5d8847dfc29ce50c16ba.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/9f7fc6e2b93a5d8847dfc29ce50c16ba.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/a5ef5882bf9aa2d842b415ad49125195.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/a5ef5882bf9aa2d842b415ad49125195.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/a5ef5882bf9aa2d842b415ad49125195.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/e34f0938394b8b80440f51e73a675ba6.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/e34f0938394b8b80440f51e73a675ba6.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/e34f0938394b8b80440f51e73a675ba6.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/090be3314833838464fe5a8557f6abec.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/090be3314833838464fe5a8557f6abec.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/090be3314833838464fe5a8557f6abec.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 05 Jan 2023 13:33:38 GMT
age: 3037
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/j093jdgh38rhdgf2w85.us.png
200 OK 1.1 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/j093jdgh38rhdgf2w85.us.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash a3555871399f1f67bfacaf437974b03a
b6337de87cd7a75a73cd804774651d14c83fe76a
2e48fef820929c21295e13444901f60e3aed61ba6f8c773ff1466e6843e76b49
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/j093jdgh38rhdgf2w85.us.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:40 GMT
ETag: "454-5f183ee0a4361"
Accept-Ranges: bytes
Content-Length: 1108
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/dsf23134tr4566h.us.png
200 OK 364 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/dsf23134tr4566h.us.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/dsf23134tr4566h.us.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:38 GMT
ETag: "16c-5f183edf728a4"
Accept-Ranges: bytes
Content-Length: 364
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/l93jdfvhbw3745hd512huje4ef.us.jpg
200 OK 2.2 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/l93jdfvhbw3745hd512huje4ef.us.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x39, components 3\012- data
Hash 1ba392dce74f8987dca48bf65d817c8f
db0b8444c46125105b52f272bd422a7f52da1f72
a05245b6f7fd752af4a7b0131bbdfdf3eaee6c5a25a81cb498e0f0759189473c
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/l93jdfvhbw3745hd512huje4ef.us.jpg HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:40 GMT
ETag: "8c7-5f183ee11f42c"
Accept-Ranges: bytes
Content-Length: 2247
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/r3uyfn48rhjfgh2394fd.us.png
200 OK 4.9 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/r3uyfn48rhjfgh2394fd.us.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 166 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash cc5132b56ba46b03dd998aa1fe220106
403e007a0b17d76a9945fa5ec46a9d01733b3040
598699133be5eef63e3b9b5540609ec0dc91d7af9c7f70a3b890e57491a70ae0
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/r3uyfn48rhjfgh2394fd.us.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:41 GMT
ETag: "1355-5f183ee1c44dc"
Accept-Ranges: bytes
Content-Length: 4949
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/0werihfu3h48ehfu34.us.jpg
200 OK 8.2 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/0werihfu3h48ehfu34.us.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 254x71, components 3\012- data
Hash 5fc559a242f0ea0a023f10830887d2af
9d744c2f3a6bf5b715496350c8de7124cdd7ddc8
3b531d403dc8ce7cbb0efb1a0c307cfb2bbaaf21feaff9f3546f13bebda71887
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/0werihfu3h48ehfu34.us.jpg HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:35 GMT
ETag: "2004-5f183edc0b6d3"
Accept-Ranges: bytes
Content-Length: 8196
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/d9f600fb777b0180c97c9da73d30df95.static.jpg
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/d9f600fb777b0180c97c9da73d30df95.static.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/d9f600fb777b0180c97c9da73d30df95.static.jpg HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/06tutffdcv35hjy5534f3457.us.png
200 OK 3.8 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/06tutffdcv35hjy5534f3457.us.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 77a2ffc5545f87551d74781201de9b3b
c9c3798afd2ae95aa3bba3c428335d49c8255b06
316e6a6737bd296ab30aca2ef7fa36f119d15786a2432d01e31fdc130272f15c
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/06tutffdcv35hjy5534f3457.us.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:34 GMT
ETag: "efa-5f183edb7fc66"
Accept-Ranges: bytes
Content-Length: 3834
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a430d46fb27196c8b03f382c1bafbb23
0b31940d1067eb87c24c6d356689d7f9f90231a6
3e9cd331b1c2c1eca94ff12ec1b685e1c1c1909e30e8b3cf4493dc6eac786df8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:24:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/h9jet523jhd9023hfr56d.us.png
200 OK 26 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/h9jet523jhd9023hfr56d.us.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 2c497dfff84bd8c5af9254c9d6278ce1
667e72e7ba6f00a54629e28133317022d4b59af6
b2dc4153ee7019c70a1095d5d1304d540e3bba045d99e141f63e5b13362e5a4e
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/h9jet523jhd9023hfr56d.us.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:39 GMT
ETag: "650f-5f183ee014a73"
Accept-Ranges: bytes
Content-Length: 25871
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/6hjduier734hfi745rf.mo.png
200 OK 44 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/6hjduier734hfi745rf.mo.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced\012- data
Hash 4487a588bf2a07e3d1936d705c5ceefd
db193b3e2ab9fbee6eae99ced2366b1ef5f16971
3821ef20f5904fdb993e34d87ff8fb9c5786a382efb0eeee8b4f00c91428b701
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/6hjduier734hfi745rf.mo.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:37 GMT
ETag: "ac42-5f183eddb249b"
Accept-Ranges: bytes
Content-Length: 44098
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/cffg3yh443289tghkrfs2w36ty.us.png
200 OK 606 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/cffg3yh443289tghkrfs2w36ty.us.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced\012- data
Size 606 kB (605621 bytes)
Hash b5e4f6810697e4324b909bc88945473f
78388667f9b3b7a50bbdc4d07c5ab06c22b53c29
1b3c01ab939e1b2429802fdd7350780229c73c72d57a2846e6b00afdc1108d7b
Analyzer Verdict Alert urlquery fraud Fraud - Fake AntiVirus / Security software
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/cffg3yh443289tghkrfs2w36ty.us.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:37 GMT
ETag: "93db5-5f183ede507e9"
Accept-Ranges: bytes
Content-Length: 605621
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/9f7fc6e2b93a5d8847dfc29ce50c16ba.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/9f7fc6e2b93a5d8847dfc29ce50c16ba.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/9f7fc6e2b93a5d8847dfc29ce50c16ba.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/090be3314833838464fe5a8557f6abec.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/090be3314833838464fe5a8557f6abec.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/090be3314833838464fe5a8557f6abec.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/c70944522155d3f4511c67a004d3d7bd.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/c70944522155d3f4511c67a004d3d7bd.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/c70944522155d3f4511c67a004d3d7bd.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/e34f0938394b8b80440f51e73a675ba6.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/e34f0938394b8b80440f51e73a675ba6.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/e34f0938394b8b80440f51e73a675ba6.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/a5ef5882bf9aa2d842b415ad49125195.static.png
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/a5ef5882bf9aa2d842b415ad49125195.static.png
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/a5ef5882bf9aa2d842b415ad49125195.static.png HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:15 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/wa0lDErtm0s.mp3
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/wa0lDErtm0s.mp3
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/wa0lDErtm0s.mp3 HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:16 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.digicert.com/
200 OK 471 B IP
Hash 73a99621729e1bc9e236a1085b98a0cf
5e1f71493085f6be7788f59987c1f0850b77d4d7
219d1a8d7d1a027553f72c8c024488863d8996457b31c78014002f81174f3ad1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4822
Cache-Control: max-age=158575
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 14:24:16 GMT
Etag: "63b69329-1d7"
Expires: Sat, 07 Jan 2023 10:27:11 GMT
Last-Modified: Thu, 05 Jan 2023 09:06:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/Gelingenr.mp3
206 Partial Content 231 kB URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/Gelingenr.mp3
IP
ASN #14061 DIGITALOCEAN-ASN
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 40 kbps, 24 kHz, JntStereo\012- data
Size 231 kB (231335 bytes)
Hash a75af39b36071125e114b53e1f142788
eda54d4cb3fdc40f72968103c70210e4b4c4a2e2
b3e941e51dbb8cca389909ba8be9b28614f6430a091959b8a51aa37b176f0a4b
GET /Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/Gelingenr.mp3 HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 206 Partial Content
Date: Thu, 05 Jan 2023 14:24:16 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 05 Jan 2023 13:03:39 GMT
ETag: "387a7-5f183ee006fb2"
Accept-Ranges: bytes
Content-Length: 231335
Content-Range: bytes 0-231334/231335
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: audio/mpeg
dssdkjoieurnsdjfhewfgj45.cf/favicon.ico
404 Not Found 290 B URL HTTP/1.1 dssdkjoieurnsdjfhewfgj45.cf/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 381d0d6c32c5ec1b250a9646b3a33db3
477cf73d0af7badfe3d6f1e94be2c0f2070fcad1
ffd54bbdeac7d72d6afa8d852298f93d290961a3f7dfc803c9d84f16f6fb948e
GET /favicon.ico HTTP/1.1
Host: dssdkjoieurnsdjfhewfgj45.cf
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/Testoe-eod/roofo-oft-moer-783/monitroer-of-statier/indexlsmr324.html
Cookie: _ga_VQPRN2PLLM=GS1.1.1672928646.1.0.1672928646.0.0.0; _ga=GA1.1.673527322.1672928646
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Thu, 05 Jan 2023 14:24:16 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 290
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 31o0alTHcynKDNg3SF6Bwg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8IvIQuKjX3L72M99IN55QcfE45g=
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 05 Jan 2023 12:41:10 GMT
expires: Thu, 05 Jan 2023 14:41:10 GMT
cache-control: public, max-age=7200
age: 6186
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
luckybucky.blob.core.windows.net/fonts/fontawesome-webfont.woff2?v=4.5.0
404 The specified resource does not exist. 223 B URL HTTP/1.1 luckybucky.blob.core.windows.net/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Hash 517c29b0d91f9cfb8c49be7f6f3d8ac8
2ba1acc41c96289268c18606bcfd2ce6cab273c8
056aaf6ed99d8d1c03c96d3609cf675fdfbe7a6ff9314eca79f72459d43eb9ef
GET /fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: luckybucky.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dssdkjoieurnsdjfhewfgj45.cf
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 The specified resource does not exist.
Content-Length: 223
Content-Type: application/xml
Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 1936fe96-901e-0027-6c11-21e742000000
Date: Thu, 05 Jan 2023 14:24:15 GMT
luckybucky.blob.core.windows.net/fonts/fontawesome-webfont.woff?v=4.5.0
404 The specified resource does not exist. 223 B URL HTTP/1.1 luckybucky.blob.core.windows.net/fonts/fontawesome-webfont.woff?v=4.5.0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Hash 272185254611add33f3b58ce7121fc34
eee0709e7afd67f457e161276c2e4d23bc71239b
aa49d8cfc65c425afa274f36e40aad59f3c37b7899b23e7c46768b55f57cb244
GET /fonts/fontawesome-webfont.woff?v=4.5.0 HTTP/1.1
Host: luckybucky.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dssdkjoieurnsdjfhewfgj45.cf
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 The specified resource does not exist.
Content-Length: 223
Content-Type: application/xml
Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 1936ff1a-901e-0027-5211-21e742000000
Date: Thu, 05 Jan 2023 14:24:16 GMT
luckybucky.blob.core.windows.net/fonts/fontawesome-webfont.ttf?v=4.5.0
404 The specified resource does not exist. 223 B URL HTTP/1.1 luckybucky.blob.core.windows.net/fonts/fontawesome-webfont.ttf?v=4.5.0
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Hash 2d5c4c6ee350e7ce82b6ccefca2b0659
ca262d918f31114a442d752985c7329c3f2331e6
635e14fa8c3234559bef72c3c004ede78ad20d6ad25398a94e623623393a88a3
GET /fonts/fontawesome-webfont.ttf?v=4.5.0 HTTP/1.1
Host: luckybucky.blob.core.windows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dssdkjoieurnsdjfhewfgj45.cf
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 The specified resource does not exist.
Content-Length: 223
Content-Type: application/xml
Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 1936ff7d-901e-0027-2011-21e742000000
Date: Thu, 05 Jan 2023 14:24:16 GMT
region1.google-analytics.com/g/collect?v=2&tid=G-VQPRN2PLLM>m=2oebu0&_p=1666787558&cid=673527322.1672928646&ul=en-us&sr=1280x1024&_s=1&sid=1672928646&sct=1&seg=0&dl=https%3A%2F%2Fdssdkjoieurnsdjfhewfgj45.cf%2FTestoe-eod%2Froofo-oft-moer-783%2Fmonitroer-of-statier%2Findexlsmr324.html&dt=Security%20Center%20Code0x268d3%20Services&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-VQPRN2PLLM>m=2oebu0&_p=1666787558&cid=673527322.1672928646&ul=en-us&sr=1280x1024&_s=1&sid=1672928646&sct=1&seg=0&dl=https%3A%2F%2Fdssdkjoieurnsdjfhewfgj45.cf%2FTestoe-eod%2Froofo-oft-moer-783%2Fmonitroer-of-statier%2Findexlsmr324.html&dt=Security%20Center%20Code0x268d3%20Services&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VQPRN2PLLM>m=2oebu0&_p=1666787558&cid=673527322.1672928646&ul=en-us&sr=1280x1024&_s=1&sid=1672928646&sct=1&seg=0&dl=https%3A%2F%2Fdssdkjoieurnsdjfhewfgj45.cf%2FTestoe-eod%2Froofo-oft-moer-783%2Fmonitroer-of-statier%2Findexlsmr324.html&dt=Security%20Center%20Code0x268d3%20Services&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dssdkjoieurnsdjfhewfgj45.cf
Connection: keep-alive
Referer: https://dssdkjoieurnsdjfhewfgj45.cf/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://dssdkjoieurnsdjfhewfgj45.cf
date: Thu, 05 Jan 2023 14:24:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11441
Expires: Thu, 05 Jan 2023 17:34:58 GMT
Date: Thu, 05 Jan 2023 14:24:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11441
Expires: Thu, 05 Jan 2023 17:34:58 GMT
Date: Thu, 05 Jan 2023 14:24:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11441
Expires: Thu, 05 Jan 2023 17:34:58 GMT
Date: Thu, 05 Jan 2023 14:24:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11441
Expires: Thu, 05 Jan 2023 17:34:58 GMT
Date: Thu, 05 Jan 2023 14:24:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vIFVXgt2RmoplkAVOtUrOkXj3LmhRw-XEPe7fugZ2-mv_iDY07XzUg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 23:39:12 GMT
age: 53105
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7711a1490729319952a150b84e91a5d6
11fda31d48a4df3fd6346d92f45a680f500bff64
e9663e981c6716c243b58ac99549dfbe6dd8371c42d50add46457b5911f63529
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11381
x-amzn-requestid: f30a66f8-72cb-44a6-b87d-55d501050dcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePKzmH6soAMFZOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f1b0-6fc1643036a4012935a38bb3;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:37:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iJNA1pytmUSUBG4YeU7rcEKCs04k9rPEuQ6o6FP5bWaQ25M7yGrySA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 21:49:59 GMT
age: 59658
etag: "11fda31d48a4df3fd6346d92f45a680f500bff64"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ce88a04d7f32ce0497bd84db44da8d4
761049019c342553004815ea394dcf282f2cc613
038aa4e5da1428524de833071814998d6c1d8b8b60d4e9c10e60d8a75f7b88fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5601
x-amzn-requestid: 54813ea9-9435-4355-910b-5b4d1eadf2ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGlhgHU1oAMFTYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b282d6-17e772ae5b70371367792063;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 07:08:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pigrktUzOcu_-Z-HnUPOnmF7yhHIdOv9bB9x7VVONHr7YZXwZAEvZA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:44:19 GMT
age: 27598
etag: "761049019c342553004815ea394dcf282f2cc613"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 008614d302ad57bc6502ad5e07652378
968bc262d2939ec6f0dce9d852682c0aaf86d3d7
5eab9a2591f0f9761ba3b90a5a191b79b6326cccb1ee6b586b00dfc1517c8db6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4248
x-amzn-requestid: 41ee9ad4-ddfd-42a5-b66c-167c4bda9153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eCvUGHnlIAMFw8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b0f8e6-4ac2abc739dc4ff640301707;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 03:07:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QVwr9xaKtzkI-Lnp683K6kKaWfnnmPs0o6HG7PBuAc9QbcMqczguNw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:16:00 GMT
age: 29297
etag: "968bc262d2939ec6f0dce9d852682c0aaf86d3d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F12026c2a-182d-4cc4-a25b-3f81d4766848.jpeg
200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F12026c2a-182d-4cc4-a25b-3f81d4766848.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11522b23bc183a217c401e2739557371
54105770699b70d0e8c5120eefb739d0487f45cb
21d1d101e309bb0d43ce0af2d11d210f608e516f426e1264ccddf7481d037df6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F12026c2a-182d-4cc4-a25b-3f81d4766848.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3824
x-amzn-requestid: c62682f7-3e29-42a7-9ebc-babe5649b60d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePCUPHO4IAMF61g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5e41a-6ef97afc3e6e89bf1374cb68;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 20:39:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UW_2oKoCabkZ_Oaqr-_-93HVD_xDTDhAaPpAUiZJgm_mIRYkVGZXeA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 22:40:54 GMT
age: 56603
etag: "54105770699b70d0e8c5120eefb739d0487f45cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4cecd6a1a228ac55f193a180229d3a33
9e5fd5a101828d5491305deb539dc5836c5b3065
7bbd9e261625c2d2a700a817c2f10b779c8463baacda02f9f34161c08487ca31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8721
x-amzn-requestid: 1c24289e-6169-4088-a2b8-311e3640e4bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eAA7IGTdIAMFzCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afe1e0-561d5981260c41511219c673;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 07:16:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: qoxCvnR2nVjlCdQJ6Wyq_Ot0p1SVdhl71LEKAm0-tkPMxWHGdIl42w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 07:31:55 GMT
age: 24742
etag: "9e5fd5a101828d5491305deb539dc5836c5b3065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
64.227.75.199
34.117.237.239
93.184.220.29
23.36.77.32
0.0.0.0