r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c19f4a1def760c07cbc4aec1d0d6c050
6ad911a7c02f5e5fdd82fa86cae0453528d53a6d
750bba81910a4bbd78ab484ba03781a36459a0aec147d7c47424e9a9bf152b40
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "750BBA81910A4BBD78AB484BA03781A36459A0AEC147D7C47424E9A9BF152B40"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5063
Expires: Mon, 24 Oct 2022 02:04:40 GMT
Date: Mon, 24 Oct 2022 00:40:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash c9df6b36bf16969ac566c1b798362e4a
e56eff34815153ae019a4bf63eb9746dd9ae2e5b
33c1175144ab2be42c9de383f7893a6e60cd1f21f282eacb413d546331db3fa0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Alert, Content-Type, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 23 Oct 2022 23:52:54 GMT
Expires: Mon, 24 Oct 2022 00:34:01 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: W1XdR9Euof3R0NwLJgKq8y6WFdt6biDtqgvDYzWPVFMYKPR0TGAo_w==
Age: 2843
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ae56efd62a0d9249d98573172eb8b28b
5ff4e9959be677ad76c26ca73f9ef4feb9fa2f28
82d9ee4948fce839f7edb1f8490c4213cded3912464a4169b0bf6a61278694bd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "82D9EE4948FCE839F7EDB1F8490C4213CDED3912464A4169B0BF6A61278694BD"
Last-Modified: Sat, 22 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3911
Expires: Mon, 24 Oct 2022 01:45:28 GMT
Date: Mon, 24 Oct 2022 00:40:17 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nylN36xlD4w3+ky8QwixhCj/U/ye59Tb2LzvmlBgYrcrlYZ6e+AywHoQn823ov5L3LWwq+tc9Cc=
x-amz-request-id: HRRREVZ68V37W0PB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 24 Oct 2022 00:08:17 GMT
age: 1920
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 24 Oct 2022 00:40:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 23 Oct 2022 23:43:40 GMT
Cache-Control: max-age=3600
Expires: Sun, 23 Oct 2022 23:49:46 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pGxp4-ZIlJjCUb0YXR7KKZ_Gyofy4wVBqUQtw6lkxRgRK6K0pDbOhg==
Age: 3397
ocsp.sectigo.com/
200 OK 471 B IP
Hash 079cd18da8a3208de6de3d32aeb40fd1
9557eeaabe4857efbe9a4066c436f3243f852b07
25b198244a5a66bf1a6c17f9bddf3ac44c819457b089104fb6277535eef5d57d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Oct 2022 00:40:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 22 Oct 2022 22:30:14 GMT
Expires: Sat, 29 Oct 2022 22:30:13 GMT
Etag: "9557eeaabe4857efbe9a4066c436f3243f852b07"
Cache-Control: max-age=509995,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75eea9056e7cb4e8-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash 60d5d7cce6c32a6bdaf0d4c92ec93a1a
cd29edee660366b41749cfd206bdc08fb421449c
fb90c4cc44b32e4ca4a7d1533bbf4a2fd5c482dda5d232f1be2334f3cefbbb0e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6294
Cache-Control: max-age=119479
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:18 GMT
Etag: "6354f613-1d7"
Expires: Tue, 25 Oct 2022 09:51:37 GMT
Last-Modified: Sun, 23 Oct 2022 08:06:43 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
200 OK 3.1 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 8063a9172207befade0a8bd806999a24
1ee7c55790b65ac7049adc64c4b99f0feca576ad
aedb564cc24b38d51e82212918ed154a95b16108dda9e2480dd751fbfbe71dc8
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /wp-content/ass/En/ HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:20:07 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cacheable: YES
age: 12010
x-cache: HIT
accept-ranges: bytes
content-length: 3069
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ASGlAt0CPHkNw9A88fH1Eg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GnviRikBcziXEBxw82lxBjX1BFQ=
status.geotrust.com/
200 OK 471 B IP
Hash 60092dfd94e97be383377ec220861004
54bcdc14b293f5a4aaf9479a937de78e1be6b10c
7af16277a67be8505b2e8cc6cc1e197bf93a177e3798d24324abb8500a613837
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2030
Cache-Control: max-age=138605
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:19 GMT
Etag: "63555172-1d7"
Expires: Tue, 25 Oct 2022 15:10:24 GMT
Last-Modified: Sun, 23 Oct 2022 14:36:34 GMT
Server: ECS (amb/6BAC)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 60092dfd94e97be383377ec220861004
54bcdc14b293f5a4aaf9479a937de78e1be6b10c
7af16277a67be8505b2e8cc6cc1e197bf93a177e3798d24324abb8500a613837
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2030
Cache-Control: max-age=138605
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:19 GMT
Etag: "63555172-1d7"
Expires: Tue, 25 Oct 2022 15:10:24 GMT
Last-Modified: Sun, 23 Oct 2022 14:36:34 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 60092dfd94e97be383377ec220861004
54bcdc14b293f5a4aaf9479a937de78e1be6b10c
7af16277a67be8505b2e8cc6cc1e197bf93a177e3798d24324abb8500a613837
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2030
Cache-Control: max-age=138605
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:19 GMT
Etag: "63555172-1d7"
Expires: Tue, 25 Oct 2022 15:10:24 GMT
Last-Modified: Sun, 23 Oct 2022 14:36:34 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 60092dfd94e97be383377ec220861004
54bcdc14b293f5a4aaf9479a937de78e1be6b10c
7af16277a67be8505b2e8cc6cc1e197bf93a177e3798d24324abb8500a613837
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2030
Cache-Control: max-age=138605
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:19 GMT
Etag: "63555172-1d7"
Expires: Tue, 25 Oct 2022 15:10:24 GMT
Last-Modified: Sun, 23 Oct 2022 14:36:34 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 60092dfd94e97be383377ec220861004
54bcdc14b293f5a4aaf9479a937de78e1be6b10c
7af16277a67be8505b2e8cc6cc1e197bf93a177e3798d24324abb8500a613837
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 773
Cache-Control: max-age=137348
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:19 GMT
Etag: "63555172-1d7"
Expires: Tue, 25 Oct 2022 14:49:27 GMT
Last-Modified: Sun, 23 Oct 2022 14:36:34 GMT
Server: ECS (amb/6BAB)
X-Cache: HIT
Content-Length: 471
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/patternfly.css
200 OK 34 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/patternfly.css
IP
File type ASCII text, with very long lines (551)
Hash 6a4683a9ebeeb0bc563777922571adef
cdde97c1450c0d91b426117fbfa7ef50bbaa6a6f
a65eaa721be94d2efe9e3aad523beedc5a1a32dabdedc6a34f32cbe9164848b9
GET /wp-content/ass/En/filess/patternfly.css HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:17:23 GMT
last-modified: Sun, 04 Sep 2022 19:04:20 GMT
etag: "6314f6b4-364b5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 12175
x-cache: HIT
accept-ranges: bytes
content-length: 34430
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/styles.css
200 OK 4.5 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/styles.css
IP
Hash ac85105a3dda6c9624131c015ab07ee2
6b3e1a4638f5ac39d030bd3119eafc4fe79964e3
be7b688dcf0b94f6a86611d9b70f7c763e212577d0d683c3678222b490df168a
GET /wp-content/ass/En/filess/styles.css HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:17:24 GMT
last-modified: Sun, 04 Sep 2022 19:04:20 GMT
etag: "6314f6b4-4b2a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 12173
x-cache: HIT
accept-ranges: bytes
content-length: 4547
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/zocial.css
200 OK 23 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/zocial.css
IP
File type ASCII text, with very long lines (23706)
Hash ffd5f7d22ee395a24c7a92c0261c4f2e
411514986f9938693bf571b53213db03eca58849
da9c4ca34a43eb71cea4937b6fcc23ef8cd241eed422c40d14d2f09485848af5
GET /wp-content/ass/En/filess/zocial.css HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:17:24 GMT
last-modified: Sun, 04 Sep 2022 19:04:20 GMT
etag: "6314f6b4-aba9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 12173
x-cache: HIT
accept-ranges: bytes
content-length: 22562
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/patternfly-additions.css
200 OK 34 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/patternfly-additions.css
IP
File type assembler source, Unicode text, UTF-8 text
Hash e9aef5a9ee8ae002407558c82c9ce93f
6547df090599d049ade2f5ab279d904f4e652833
23c8fa6dd2a6bbdba5b4872cbe597c1bb7483945841cb7be96a4e994ffb35e5d
GET /wp-content/ass/En/filess/patternfly-additions.css HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:17:23 GMT
last-modified: Sun, 04 Sep 2022 19:04:20 GMT
etag: "6314f6b4-40270"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 12174
x-cache: HIT
accept-ranges: bytes
content-length: 34218
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/form.js.download
200 OK 8.2 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/form.js.download
IP
Hash 7e0a24e7e5823f8cd1cef0b4f3a65b17
191e08da8d85eb41a14d72cb742aa910c7b074c5
29c53456705cbf1b52b290088c5e76edb1cc4a8c37db3a554a2c956bb11986df
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/filess/form.js.download HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:17:25 GMT
last-modified: Sun, 04 Sep 2022 19:04:20 GMT
etag: "6314f6b4-2007"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
content-type: application/octet-stream
content-length: 8199
x-cacheable: YES
age: 12173
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/tc.js.download
200 OK 967 B URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/tc.js.download
IP
Hash 6f939ebaf543e9c5d19583b204a12f9d
4605cdfdfcd143e84e872c8188be0a042d1078ab
903b9bd64fb98f2a6f348e1a88ad3e9369bd48bcb3544d4026a1d54db88d49e7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/filess/tc.js.download HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:17:25 GMT
last-modified: Sun, 04 Sep 2022 19:04:22 GMT
etag: "6314f6b6-3c7"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
content-type: application/octet-stream
content-length: 967
x-cacheable: YES
age: 12172
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/me.png
200 OK 3.9 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/me.png
IP
File type PNG image data, 201 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 4b4a3c3c4a9f3d52d819ab29503b4b75
bb5de975e580cbe8ef29af40f8620e83a95208be
cbeb166afbf26b9a5fee0e6784a17c52227a67dcabf89489927a68392c061136
GET /wp-content/ass/En/files/me.png HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:26:08 GMT
last-modified: Sun, 04 Sep 2022 13:25:20 GMT
etag: "6314a740-f10"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: image/png
content-length: 3856
x-cacheable: YES
age: 11649
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/js/main.js
200 OK 3.6 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/js/main.js
IP
File type ASCII text, with very long lines (448), with CRLF line terminators
Hash 6422806282f6f15fb97d09116165c823
102fdd744c7027db8697383ef3bc216b2692c800
3144872be0fc6680393a6a028767c54f7e4dfc024d2123fc45490aca8b478d5c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/js/main.js HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:17:28 GMT
last-modified: Fri, 29 Apr 2022 07:49:28 GMT
etag: "626b9888-4a96"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 12169
x-cache: HIT
accept-ranges: bytes
content-length: 3633
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/js/validate.js
200 OK 1.3 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/js/validate.js
IP
File type ASCII text, with CRLF line terminators
Hash 624a15a3f4a7b887bb405f71d655209c
f4d35b321542634c222086a299165dec1da0a348
5d4ada32f54a5b7894fc27735a1243841530ba9aa395d330130c38387bb3715e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/js/validate.js HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:17:29 GMT
last-modified: Tue, 14 Jun 2022 19:46:22 GMT
etag: "62a8e58e-125b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 12169
x-cache: HIT
accept-ranges: bytes
content-length: 1271
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bed68ee568e74be152402c71cbf26510
38092ae53739e8ee13362c84df108bad734c4b64
26cd9ff2fb48cc7fb7c83cc325f4cb4713fc442cc4842baa728c570081be0445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2992
Expires: Mon, 24 Oct 2022 01:30:11 GMT
Date: Mon, 24 Oct 2022 00:40:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bed68ee568e74be152402c71cbf26510
38092ae53739e8ee13362c84df108bad734c4b64
26cd9ff2fb48cc7fb7c83cc325f4cb4713fc442cc4842baa728c570081be0445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2992
Expires: Mon, 24 Oct 2022 01:30:11 GMT
Date: Mon, 24 Oct 2022 00:40:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bed68ee568e74be152402c71cbf26510
38092ae53739e8ee13362c84df108bad734c4b64
26cd9ff2fb48cc7fb7c83cc325f4cb4713fc442cc4842baa728c570081be0445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2992
Expires: Mon, 24 Oct 2022 01:30:11 GMT
Date: Mon, 24 Oct 2022 00:40:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bed68ee568e74be152402c71cbf26510
38092ae53739e8ee13362c84df108bad734c4b64
26cd9ff2fb48cc7fb7c83cc325f4cb4713fc442cc4842baa728c570081be0445
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26CD9FF2FB48CC7FB7C83CC325F4CB4713FC442CC4842BAA728C570081BE0445"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2992
Expires: Mon, 24 Oct 2022 01:30:11 GMT
Date: Mon, 24 Oct 2022 00:40:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13985f97-93f1-44be-8be0-92fb128d3c51.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13985f97-93f1-44be-8be0-92fb128d3c51.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5516af00c2c5dcb5a8c873b6f61ea0df
088236fab64197c530ba85242bf798f13669179e
c7a99982b8af0e2b28bab9cf5b24fc75b50ae172d5c529efec9161c7d436ff90
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13985f97-93f1-44be-8be0-92fb128d3c51.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11927
x-amzn-requestid: 78067be5-c9cf-4ee0-a5b0-86fd32baca38
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelCxGiFIAMFWHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b544-5df3064a5b15f2ee370e4016;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tzYdJmmDsOLwZBBJ2z_RXL17am3WgRC372zZQ3Va8hBlsEC5bLvjdw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:46:36 GMT
age: 10423
etag: "088236fab64197c530ba85242bf798f13669179e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F869ea046-6a24-4b66-a52f-bc9a678d7ebb.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F869ea046-6a24-4b66-a52f-bc9a678d7ebb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f174281da48e4a62aab93bcdc57d14a
8ee29d073b84530a30bb370838598115f1a65da8
0096edb7703f0bcea7e5c0d5b529482eceea9123f5f3b278f3f9012f87875f1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F869ea046-6a24-4b66-a52f-bc9a678d7ebb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8400
x-amzn-requestid: b1436934-5b97-4aa8-937a-78bce0b9181c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelN4GACoAMFYmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b58b-29da495d75578b3c20eb37ba;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:39 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: EmusO-_70hMOdHGlmVAeiZI8nFPDJuJEsxtzTB4-j_8NDsIqwPVk_Q==
via: 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:54:06 GMT
age: 9973
etag: "8ee29d073b84530a30bb370838598115f1a65da8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9983bdfe8dbe8386970aae586bb57575
4c5ff521fec700a1cda73325eebbeb88f97baa39
775d510a8d82ed993085e3d828c33b75eee99db2911b90d6151faf5c2e25b5d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee5168c9-3f97-43d9-a9b4-3b0f415b3bc0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9894
x-amzn-requestid: 8d639b03-49d2-411b-b0ca-39c5dafe21f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelOtF6YIAMF-4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b591-230070a06848d4d90ea4f6ef;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:43:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mYzFAcyUErnaOlGBX0ygFYZ4608EanLq5V4xzX7qCHQRGzkKwwWvHw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 22:14:18 GMT
age: 8761
etag: "4c5ff521fec700a1cda73325eebbeb88f97baa39"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c8789d-73b5-42b5-8b99-9a20d2d75944.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c8789d-73b5-42b5-8b99-9a20d2d75944.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1bb8b1b400a1ae9d33c235e6a338c4b
834ac948f07711ed1dfe30ed365ab6c68967d932
1ef29fa4db7b8a00df3a0df1494aa41f8737664828695a4294e3ec8c9e5711e4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c8789d-73b5-42b5-8b99-9a20d2d75944.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7889
x-amzn-requestid: 797475c0-3dc0-4b1c-a087-593801512ba4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aV_zrF9EIAMFjDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6352467d-0aa8bdd5443af5395f5b2792;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 07:13:01 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: wID60l-5Ds1B1umHL6gNvcI96S5NZf_siEYhtJpwUhS7GBr2igX2zA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 08:27:23 GMT
age: 58376
etag: "834ac948f07711ed1dfe30ed365ab6c68967d932"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3257320-582a-498d-9e0c-531ea65fbbe0.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3257320-582a-498d-9e0c-531ea65fbbe0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 772-513, spot sensor temperature 0.000000, unit celsius, color scheme 1, calibration: offset 0.000000, slope 241254190455726276608.000000\012- data
Hash 88436497b6fe5e22155afc45e9e8fe3e
5004575548d76d878a7f27bb3fc4a9a10e8f6909
304c2388dd96c82582d490cd473174b11eac53bf408a29ed78e23d77139ef243
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3257320-582a-498d-9e0c-531ea65fbbe0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13962
x-amzn-requestid: 84f8b505-da9d-421c-b00a-3d6407aac332
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelDQETqoAMFwxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b547-566c7abb12b09a565be85833;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:42:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: N-R8_VOQSIhikiT-qqPi0ABMoZnr234hdcdinyzBath9A8M6aUZ37A==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:54:05 GMT
age: 9974
etag: "5004575548d76d878a7f27bb3fc4a9a10e8f6909"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6b24b0e9eeeecd44eafc5957dc5450db
e071eb9837a242f41035da077dc6c9b0178d8f9f
33e9c9c03180d2855606be0605c894180d81e151e2f4b4b2bacf5325c11152d4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b4612fa-9557-465f-8ec2-dc7a447daaac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9495
x-amzn-requestid: f9246128-d6a3-49e0-982d-9f75d110aa2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aelztGlqoAMFs8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6355b67d-7f04a07955c3c9a8644475a0;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 21:47:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FDwmWmTCnCZt2aCUx9Tb3r4RJ4co-0A1dAbABurYrJNcyGa6ZMmONw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 21:56:13 GMT
age: 9846
etag: "e071eb9837a242f41035da077dc6c9b0178d8f9f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.correoargentino.com.ar/MiCorreo/public/css/bootstrap337/js/bootstrap.min.js
200 OK 37 kB URL HTTP/1.1 www.correoargentino.com.ar/MiCorreo/public/css/bootstrap337/js/bootstrap.min.js
IP
ASN #10834 Telefonica de Argentina
File type ASCII text, with very long lines (32033)
Hash 5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
GET /MiCorreo/public/css/bootstrap337/js/bootstrap.min.js HTTP/1.1
Host: www.correoargentino.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 24 Oct 2022 00:40:13 GMT
Content-Type: application/javascript
Last-Modified: Tue, 10 Apr 2018 13:18:57 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
Accept-Ranges: bytes
Set-Cookie: Path=/; HttpOnly; Secure
BIGipServerPL_PROD_MiCorreo=3691774218.47873.0000; path=/; Httponly; Secure
Transfer-Encoding: chunked
www.correoargentino.com.ar/MiCorreo/public/js/jquery.mask.js
200 OK 23 kB URL HTTP/1.1 www.correoargentino.com.ar/MiCorreo/public/js/jquery.mask.js
IP
ASN #10834 Telefonica de Argentina
Hash be100aa966c72b3522697ba438f62011
93e9df2942121c3be2d0d41e45e61e69e8fbe786
e40e952fffd779db9077b2fa0928a825dbf8c95c00581159555b4b510ca5236e
GET /MiCorreo/public/js/jquery.mask.js HTTP/1.1
Host: www.correoargentino.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 24 Oct 2022 00:40:13 GMT
Content-Type: application/javascript
Last-Modified: Tue, 10 Apr 2018 13:18:20 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
Accept-Ranges: bytes
Set-Cookie: Path=/; HttpOnly; Secure
BIGipServerPL_PROD_MiCorreo=3691774218.47873.0000; path=/; Httponly; Secure
Transfer-Encoding: chunked
www.correoargentino.com.ar/MiCorreo/public/js/bootstrap-datepicker.min.js
200 OK 27 kB URL HTTP/1.1 www.correoargentino.com.ar/MiCorreo/public/js/bootstrap-datepicker.min.js
IP
ASN #10834 Telefonica de Argentina
File type ASCII text, with very long lines (26799), with no line terminators
Hash d7694dff0a49e477adc302d6bf64bf82
230c563bce1266516fa365132c45682798f8cc67
f27665c2262330b053834de014a9a1c58974195cae53210b00f190262583d234
GET /MiCorreo/public/js/bootstrap-datepicker.min.js HTTP/1.1
Host: www.correoargentino.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 24 Oct 2022 00:40:13 GMT
Content-Type: application/javascript
Last-Modified: Tue, 10 Apr 2018 13:18:20 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
Accept-Ranges: bytes
Set-Cookie: Path=/; HttpOnly; Secure
BIGipServerPL_PROD_MiCorreo=3691774218.47873.0000; path=/; Httponly; Secure
Transfer-Encoding: chunked
www.correoargentino.com.ar/MiCorreo/public/css/extras.css
200 OK 41 kB URL HTTP/1.1 www.correoargentino.com.ar/MiCorreo/public/css/extras.css
IP
ASN #10834 Telefonica de Argentina
Hash fb64287ed1c4c2e999c52d0f4277c182
28821f302b441d5d81e3ff83436bde42b0cb7805
693711b23d6dd246ec7eaa135a3250437fe0681f4e66c7f5c92d6ae096fa19bc
GET /MiCorreo/public/css/extras.css HTTP/1.1
Host: www.correoargentino.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 24 Oct 2022 00:40:13 GMT
Content-Type: text/css
Last-Modified: Thu, 16 Jul 2020 10:39:22 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
Accept-Ranges: bytes
Set-Cookie: Path=/; HttpOnly; Secure
BIGipServerPL_PROD_MiCorreo=3691774218.47873.0000; path=/; Httponly; Secure
Transfer-Encoding: chunked
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4c236f4ca13cd8fafc580bceb0995642
b6a7de7a8d994ed2cfb5ac74b6d7703de515ecdb
671228953eba5b2678df03acebb493e411752c6f5f72ff7f1e485032241d4aeb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4c236f4ca13cd8fafc580bceb0995642
b6a7de7a8d994ed2cfb5ac74b6d7703de515ecdb
671228953eba5b2678df03acebb493e411752c6f5f72ff7f1e485032241d4aeb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Cabin
200 OK 899 B URL HTTP/2 fonts.googleapis.com/css?family=Cabin
IP
Hash 4e679923ac823f08c1620a7a83d4714e
372463567e679b5011f1af0d0d4c86ceade06126
25f9ce01f967497d21bc9044771e6516561da765c9636eb096e3e32bee073f83
GET /css?family=Cabin HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.correoargentino.com.ar/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 24 Oct 2022 00:40:20 GMT
date: Mon, 24 Oct 2022 00:40:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.correoargentino.com.ar/MiCorreo/public/css/styles.css
200 OK 189 kB URL HTTP/1.1 www.correoargentino.com.ar/MiCorreo/public/css/styles.css
IP
ASN #10834 Telefonica de Argentina
File type ASCII text, with very long lines (540), with CRLF line terminators
Size 189 kB (188951 bytes)
Hash 62e92ac931d49a8ecfb047ac3078c974
0cc027d6ac10a2b63a22a79f9c9569fcaecb701c
223a0eb8aba9e50fff40b715f278d1c63c0b76a5119fdaf9d3cee225dc3ca9c7
GET /MiCorreo/public/css/styles.css HTTP/1.1
Host: www.correoargentino.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 24 Oct 2022 00:40:13 GMT
Content-Type: text/css
Last-Modified: Mon, 11 Jan 2021 16:40:39 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
Accept-Ranges: bytes
Set-Cookie: Path=/; HttpOnly; Secure
BIGipServerPL_PROD_MiCorreo=3691774218.47873.0000; path=/; Httponly; Secure
Transfer-Encoding: chunked
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
200 OK 3.4 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (313)
Hash a1911c91520c8de1fba7bbbf61cf6493
47cb36fa9f80746db4a71142e68b761cb5544b81
9b13070334e9b34ab93482a8f0e774218b923d7569e8d104f9179d071ee206e8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/info.html HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:16 GMT
last-modified: Sun, 04 Sep 2022 17:55:28 GMT
etag: "6314e690-28be"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 11824
x-cache: HIT
accept-ranges: bytes
content-length: 3374
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/fonts/Delivery_W_Rg.woff
404 Not Found 146 B URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/fonts/Delivery_W_Rg.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/fonts/Delivery_W_Rg.woff HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/styles.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 24 Oct 2022 00:40:20 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/fonts/Delivery_W_Bd.woff
404 Not Found 146 B URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/fonts/Delivery_W_Bd.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/fonts/Delivery_W_Bd.woff HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/styles.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 24 Oct 2022 00:40:20 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.4.1.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.4.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 9abb42735168ac9e960b770179b642aa
11475bf8c7244af7a820108b7762e7a3f95aa52c
df53c09a6546b3d23dc0b2d0d92c39808c5663a75f4bf1f8d035fd11b7c81243
GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Oct 2022 00:40:20 GMT
content-encoding: gzip
content-length: 30638
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15851"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1666572020.dop002.sk1.t,1666572020.cds245.sk1.hn,1666572020.cds201.sk1.c
X-Firefox-Spdy: h2
www.correoargentino.com.ar/MiCorreo/public/js/app.js
200 OK 291 kB URL HTTP/1.1 www.correoargentino.com.ar/MiCorreo/public/js/app.js
IP
ASN #10834 Telefonica de Argentina
File type ASCII text, with very long lines (36909)
Size 291 kB (290862 bytes)
Hash 20eb22d13b4f96dd7836c10645cd1ec5
056971e0733a777090f81bb9190ab2eb189fc8f2
fa57aabd28ed4c3f66eaa5dd3c8c2a7f05f02f7d0f55df078a0b3d47351807d4
GET /MiCorreo/public/js/app.js HTTP/1.1
Host: www.correoargentino.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 24 Oct 2022 00:40:13 GMT
Content-Type: application/javascript
Last-Modified: Tue, 10 Apr 2018 13:18:20 GMT
Connection: keep-alive
Strict-Transport-Security: max-age=31536000;includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
Accept-Ranges: bytes
Set-Cookie: Path=/; HttpOnly; Secure
BIGipServerPL_PROD_MiCorreo=3691774218.47873.0000; path=/; Httponly; Secure
Transfer-Encoding: chunked
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/none.css
200 OK 18 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/none.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c5b2663f94fe051868ebcb5c5dabc91f
bfeac944c483d2667cc646b840a3e48c589adfce
f059b40789b72a53bbcd74c880305bf87dae234bd6033220ae215084d8480256
GET /wp-content/ass/En/files/none.css HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:17 GMT
last-modified: Mon, 03 Jul 2017 02:59:46 GMT
etag: "5959b322-1a8d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 11823
x-cache: HIT
accept-ranges: bytes
content-length: 17870
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/ccli-app.css
200 OK 13 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/ccli-app.css
IP
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 5706e668950d8659a1d4684b8430f626
33fb14acf6f9877ee1f9a9eede321d60dd3756a6
9b92b0e5b3db15597ef90f1f3d7fc2b6a13a4f579c69efc16c7822c426ce22f7
GET /wp-content/ass/En/files/ccli-app.css HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:18 GMT
last-modified: Fri, 20 Nov 2020 19:27:46 GMT
etag: "5fb818b2-184cb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 11822
x-cache: HIT
accept-ranges: bytes
content-length: 12663
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/styles.css
200 OK 1.4 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/styles.css
IP
Hash 27a297dd90d7654ccb08a312bbc3d746
3241218d1b35fbeff05e608e37ec98e451a4e2a6
6c595847427248bf1734b6b28bb165c0b8f75580747262654af583c5b5adb59e
GET /wp-content/ass/En/files/styles.css HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:19 GMT
last-modified: Fri, 13 Nov 2020 21:44:36 GMT
etag: "5faefe44-1093"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 11821
x-cache: HIT
accept-ranges: bytes
content-length: 1396
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/pygment_trac.css
200 OK 873 B URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/pygment_trac.css
IP
File type assembler source, ASCII text
Hash 8275db9714d2d32698082248a99e64a4
7ec45d45424b26be9dc5dbc4e9cfdebb1f965575
a9be03db51e0924005f250907e86af5532a1598dbcf451d2d093a731d3ed49a6
GET /wp-content/ass/En/files/pygment_trac.css HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:19 GMT
last-modified: Fri, 13 Nov 2020 02:11:38 GMT
etag: "5fadeb5a-1048"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 11821
x-cache: HIT
accept-ranges: bytes
content-length: 873
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/ico/null.png
200 OK 2.5 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/ico/null.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5edeb54f6d96c503c8137273994f5697
2853f0d8707eb61004942b204779417cf71dd85b
b13b83b70039114ae4c7b5669b5915415ad033f03302149c494c970d81fef94e
GET /wp-content/ass/En/files/ico/null.png HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:26:08 GMT
last-modified: Fri, 13 Nov 2020 02:11:38 GMT
etag: "5fadeb5a-9ac"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: image/png
content-length: 2476
x-cacheable: YES
age: 11651
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/payform.min.js
200 OK 3.2 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/payform.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (12007), with no line terminators
Hash c8280ed293452e72a5c0e2c8ac8aa7f1
babaa13492f283aebd92faf5e689eb8e55c391dc
454832433c64e9e930f4e5b3b7328114400ed3ffea936523455e477f458cf020
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/files/payform.min.js HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:21 GMT
last-modified: Fri, 13 Nov 2020 02:11:38 GMT
etag: "5fadeb5a-2efb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 11819
x-cache: HIT
accept-ranges: bytes
content-length: 3223
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/cform.js
200 OK 599 B URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/cform.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text
Hash 0d283bc2b4f8b061450987ea90cd58c1
55bdcf006e4610ead17b23e784f49d38d5340258
d3ed8110228e568c5b55704107bcde9c4c31598268c4ae3d698a2c188d0efb4f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/files/cform.js HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:22 GMT
last-modified: Fri, 20 Nov 2020 19:45:58 GMT
etag: "5fb81cf6-63e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 11818
x-cache: HIT
accept-ranges: bytes
content-length: 599
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/floating-label.js
200 OK 1.0 kB URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/floating-label.js
IP
Hash dac0d28743f7db7c94974cc0ac7e4274
786c3731693981c6cb70fc5af09bdffed3985055
66b853c8fd82d5e18af27e9240b1136acf4492de0570160bd5a7bfccadbbe4d4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/files/floating-label.js HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:22 GMT
last-modified: Sun, 15 Nov 2020 05:09:04 GMT
etag: "5fb0b7f0-d21"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 11818
x-cache: HIT
accept-ranges: bytes
content-length: 1017
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ffbfbd6d5d1e91af3c02313339eed0d0
df6457b655ac278fe32f3015bba4cff22dae5b2d
1991ca3e854e53f89b92ce93e01e6094f815b1d2c7c31e664481760211ac200a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2
IP
File type gzip compressed data, max compression\012- data
Hash 37985bd8c4e1c4da8819641ece0fe7d1
41ceba86562b0a9f7ce53834c996081562855f22
88a2ce3338337580a963bb45ee01fb21c1cf146eddb5687063d789c96e14af47
GET /s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://netoflix-bc7fae.ingress-baronn.ewp.live
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 18 Oct 2022 17:17:26 GMT
expires: Wed, 18 Oct 2023 17:17:26 GMT
cache-control: public, max-age=31536000
age: 458575
last-modified: Tue, 26 Apr 2022 16:04:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ffbfbd6d5d1e91af3c02313339eed0d0
df6457b655ac278fe32f3015bba4cff22dae5b2d
1991ca3e854e53f89b92ce93e01e6094f815b1d2c7c31e664481760211ac200a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Oct 2022 00:40:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/TelefonicaWeb-Regular.woff
404 Not Found 146 B URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/TelefonicaWeb-Regular.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/files/TelefonicaWeb-Regular.woff HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/ccli-app.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 24 Oct 2022 00:40:21 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/favicon.ico
200 OK 325 B URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash f63e141923d43d11aab30a4030edafe7
cdfb041e7965052d227fe433ef58df954a4bc861
3ef098bcfadd875ac72907c1bba9c780f5e2e49ece436b94883525055aa32023
Analyzer Verdict Alert urlquery Phishing - DHL
GET /wp-content/ass/En/files/favicon.ico HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:03 GMT
last-modified: Sun, 04 Sep 2022 12:32:56 GMT
etag: "63149af8-47e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT
access-control-allow-credentials: true
access-control-allow-headers: User-Agent,Keep-Alive,Content-Type
content-type: image/x-icon
vary: Accept-Encoding
content-encoding: gzip
x-cacheable: YES
age: 11837
x-cache: HIT
accept-ranges: bytes
content-length: 325
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/TelefonicaWeb-Regular.ttf
404 Not Found 146 B URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/TelefonicaWeb-Regular.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/files/TelefonicaWeb-Regular.ttf HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/ccli-app.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 24 Oct 2022 00:40:21 GMT
content-type: text/html
content-length: 146
age: 0
x-cache: MISS
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/ruxitagentjs_ICA27Vfjqrux_10247220811100421.js.download
200 OK 0 B URL HTTP/2 netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/filess/ruxitagentjs_ICA27Vfjqrux_10247220811100421.js.download
IP
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/ass/En/filess/ruxitagentjs_ICA27Vfjqrux_10247220811100421.js.download HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 23 Oct 2022 21:23:05 GMT
last-modified: Sun, 04 Sep 2022 19:04:20 GMT
etag: "6314f6b4-366b8"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public
referrer-policy: strict-origin-when-cross-origin
content-type: application/octet-stream
content-length: 222904
x-cacheable: YES
age: 11833
x-cache: HIT
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/ico/cvc.png
0 B URL netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/files/ico/cvc.png
IP
GET /wp-content/ass/En/files/ico/cvc.png HTTP/1.1
Host: netoflix-bc7fae.ingress-baronn.ewp.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netoflix-bc7fae.ingress-baronn.ewp.live/wp-content/ass/En/info.html
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
fonts.googleapis.com/css?family=Cabin+Condensed
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Cabin+Condensed
IP
GET /css?family=Cabin+Condensed HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.correoargentino.com.ar/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 24 Oct 2022 00:40:20 GMT
date: Mon, 24 Oct 2022 00:40:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
63.250.43.9
23.36.77.32
93.184.220.29
104.18.32.68
200.5.115.233