ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6049
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:47 GMT
Etag: "638c76f5-1d7"
Last-Modified: Sun, 04 Dec 2022 22:01:58 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4708
Expires: Mon, 05 Dec 2022 01:01:15 GMT
Date: Sun, 04 Dec 2022 23:42:47 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10994
Expires: Mon, 05 Dec 2022 02:46:01 GMT
Date: Sun, 04 Dec 2022 23:42:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 23:20:09 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1358
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7RK9ysymjdfqAFldracKzFUAsxJpbseboDMxLiSivY+TAE7Mj2u5Df6JBq9XVdonTllZTK8CkDA=
x-amz-request-id: SRMWSE9V021C5MQ5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 22:47:44 GMT
age: 3303
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 23:42:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 23:11:19 GMT
cache-control: public,max-age=3600
age: 1888
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js
104.17.24.14200 OK 27 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.1.1/jquery.min.js
IP 104.17.24.14:0
File type ASCII text, with very long lines (32030)
Hash 92a5ff32a622bce0ca55d5644bdd4076
ad3c2861d6216aaf07b6ba1a0eb3b1a4eaa1ae91
1811f05ec81d0f3d900617e8760efb623e1a0f5ca0e8e424124181581653dbf5
GET /ajax/libs/jquery/3.1.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 27192
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-152b5"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2787402
expires: Fri, 24 Nov 2023 23:42:47 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wof3G0IaCBhLv%2Bhu9HEDo%2Flvf8XLjh8HqVDrQMsR%2FBc4vG9KCsQBmK4dlHfCXKlkchP7%2F8dR3nOOLT46kKfJN0t637AjGOz4OtCbwtjJnDT3R1xBo77y1aVXHVWr6JcX1aWNWXlk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7748668d1a5bb4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6035
Cache-Control: max-age=126279
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:47 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 10:47:26 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e2f9edb5dbf0ea1c00f9d38cf959b3cc
5d81c306708529a16ffe5ceaa1eb8608cff7d093
8058c14bc23eabe1499585442fe0d30fa8bc6292456eb7fd3e1f968ed40bed7a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "8058C14BC23EABE1499585442FE0D30FA8BC6292456EB7FD3E1F968ED40BED7A"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19230
Expires: Mon, 05 Dec 2022 05:03:18 GMT
Date: Sun, 04 Dec 2022 23:42:48 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash bcc17526514fa37f57559fede8e7777c
7cd8ee245ca613fb211335c29ffc88484971caed
400837e1477c38d8168775f72fb53da9f909be020bacc61a1da902257dc94a74
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4812
Cache-Control: max-age=106348
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:48 GMT
Etag: "638c1a18-116"
Expires: Tue, 06 Dec 2022 05:15:16 GMT
Last-Modified: Sun, 04 Dec 2022 03:55:04 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 278
opensea.io.bonsavonsoaps.com/assets/style/style1.css
67.212.189.210200 OK 4.8 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/style1.css
IP 67.212.189.210:0
Hash 79e997742391161a5f3fc970bab53590
509e8907836ded522666144d673969326d94a782
662e15abb233cdf837d810b2ce036132a205095d488b89be1b2eb18b4871dc37
Analyzer Verdict Alert openphish Crypto/Wallet
GET /assets/style/style1.css HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:02:04 GMT
Accept-Ranges: bytes
Content-Length: 4751
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
opensea.io.bonsavonsoaps.com/assets/style/810eee84d49a36e81867.css
67.212.189.210200 OK 1.4 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/810eee84d49a36e81867.css
IP 67.212.189.210:0
File type ASCII text, with very long lines (1390)
Hash bf95663c4f0dc24b7f87178e7892eea5
871fdcb425ac0797acd6c408b4657a7ce5a375f2
5c797a3062f6d9493c51646668f98791be5ee5c0b9063ed658c918299d357106
Analyzer Verdict Alert openphish Crypto/Wallet
GET /assets/style/810eee84d49a36e81867.css HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:02:20 GMT
Accept-Ranges: bytes
Content-Length: 1442
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
push.services.mozilla.com/
44.238.3.246101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.238.3.246:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sPkxWjrfrZw0V7U5WVQW9Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZTDv5fcVVNA45Tv7lgPrU7undFA=
opensea.io.bonsavonsoaps.com/assets/style/style3.css
67.212.189.210200 OK 4.7 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/style3.css
IP 67.212.189.210:0
File type assembler source, ASCII text
Hash 3399c763e1b7df9265e634edfd346407
ea6b07b3df6e16de2786d6cbaf7bd05adb1657c4
5325d96f62216b6beabcbf77f2583cbb3c254056d1847668ac0778549be47d24
Analyzer Verdict Alert openphish Crypto/Wallet
GET /assets/style/style3.css HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:02:48 GMT
Accept-Ranges: bytes
Content-Length: 4673
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
opensea.io.bonsavonsoaps.com/
67.212.189.210206 Partial Content 371 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/
IP 67.212.189.210:0
File type ASCII text, with very long lines (1434), with CRLF line terminators
Size 371 kB (370593 bytes)
Hash 062d7ddd60e46b1d98fd3ae259ff5f01
5c74d59336a4ac52535933dffff08e56cd25ff91
7d370573ad88bee4da7ff89ee20663a6c8cd7740bed5aaa14f47197360da8bd8
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET / HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Range: bytes=7947-
If-Range: Tue, 30 Aug 2022 06:41:20 GMT
HTTP/1.1 206 Partial Content
Date: Sun, 04 Dec 2022 23:42:46 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 06:41:20 GMT
Accept-Ranges: bytes
Content-Length: 370593
Content-Range: bytes 7947-378539/378540
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
opensea.io.bonsavonsoaps.com/assets/style/style.css
67.212.189.210200 OK 30 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/style.css
IP 67.212.189.210:0
Hash 2db5c1ffddd6f9ae51c5327ae953ef17
32c3652f27e1e40ec0d00e9f199e847f42dfb247
ca1acfc2bfb09f48b6d7c33864fe1cc634cbb9eba5f61d996e5a57cdb3f459a1
Analyzer Verdict Alert openphish Crypto/Wallet
GET /assets/style/style.css HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:02:28 GMT
Accept-Ranges: bytes
Content-Length: 29666
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
opensea.io.bonsavonsoaps.com/assets/js/api.js
67.212.189.210200 OK 685 B URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/js/api.js
IP 67.212.189.210:0
File type ASCII text, with CRLF line terminators
Hash d7de54d7e67fa63944be1c3b419498db
b1290a41dd5c43791e358bf167a834b4e6b7d724
6b44dd35f690f971f356d4db71f78a2494f15ea0885787c35f881033d0c7c95a
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/js/api.js HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Mon, 29 Aug 2022 13:55:02 GMT
Accept-Ranges: bytes
Content-Length: 685
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
opensea.io.bonsavonsoaps.com/assets/js/abis.js
67.212.189.210200 OK 1.6 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/js/abis.js
IP 67.212.189.210:0
File type ASCII text, with CRLF line terminators
Hash c4eb6b73e540e2ad42de13fda4f656c0
136efe219a581086e2c683273df787520ff22e48
fc8b37bbd341f3bd246490c883573ac5166fbeda80b26456fffa681f3f68c258
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/js/abis.js HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sat, 27 Aug 2022 12:29:14 GMT
Accept-Ranges: bytes
Content-Length: 1641
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
opensea.io.bonsavonsoaps.com/assets/js/wallet.js
67.212.189.210200 OK 3.7 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/js/wallet.js
IP 67.212.189.210:0
File type ASCII text, with CRLF line terminators
Hash 025986f1e4f608f294b7016bfa1439e8
e629b00ac5798160b08903047e773f5bd8bd13b0
6a47cc0397fc3217d4d6e75c0cd876a92a48907f5205a9d1ecfdac51e30dc9fb
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/js/wallet.js HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 04:35:40 GMT
Accept-Ranges: bytes
Content-Length: 3662
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
opensea.io.bonsavonsoaps.com/assets/js/connect.js?v=1111322123
67.212.189.210200 OK 15 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/js/connect.js?v=1111322123
IP 67.212.189.210:0
File type ASCII text, with very long lines (14979), with no line terminators
Hash 2cb5a81ceb9331a56843c9b661c06cc9
d462488336189a20339dbe12e09ce99636085276
778ac9a735e57b54b3acb6da247cd8d3a99666b5e5a1c9be6181a6d154f87548
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/js/connect.js?v=1111322123 HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 06:41:46 GMT
Accept-Ranges: bytes
Content-Length: 14979
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 54143158d937130841861ceb280beec9
6ba2b504139e50770d6a7d6fba3471bcabb43a54
ca9ca1b918f317501d6911f30cb533fc044da20cc816199c3ef7be37559b678d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "CA9CA1B918F317501D6911F30CB533FC044DA20CC816199C3EF7BE37559B678D"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10975
Expires: Mon, 05 Dec 2022 02:45:43 GMT
Date: Sun, 04 Dec 2022 23:42:48 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 54143158d937130841861ceb280beec9
6ba2b504139e50770d6a7d6fba3471bcabb43a54
ca9ca1b918f317501d6911f30cb533fc044da20cc816199c3ef7be37559b678d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "CA9CA1B918F317501D6911F30CB533FC044DA20CC816199C3EF7BE37559B678D"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10975
Expires: Mon, 05 Dec 2022 02:45:43 GMT
Date: Sun, 04 Dec 2022 23:42:48 GMT
Connection: keep-alive
opensea.io.bonsavonsoaps.com/assets/style/main.css
67.212.189.210200 OK 57 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/main.css
IP 67.212.189.210:0
File type Unicode text, UTF-8 text, with very long lines (499)
Hash e26a79fba89150bface77d7453640d15
46cf296f5d56310ec8c06257b44ade0fff43dbc6
854ab1a7d2f21a4f94c051e3f26267e3e927ecc7f7a85b61413d69630b25d028
Analyzer Verdict Alert openphish Crypto/Wallet
GET /assets/style/main.css HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:02:32 GMT
Accept-Ranges: bytes
Content-Length: 56850
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 5d17643cb7d9da06ff2207534716c5fa
e5570b9aba70d191a4bc1fb5409a4343d76de066
2ebc061d9e88cb42e802089b8dde62b7d8f71c9ccb901e4b56df64fa04b68fc5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5522
Cache-Control: max-age=146659
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:48 GMT
Etag: "638cb4c9-116"
Expires: Tue, 06 Dec 2022 16:27:07 GMT
Last-Modified: Sun, 04 Dec 2022 14:55:05 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 278
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 54143158d937130841861ceb280beec9
6ba2b504139e50770d6a7d6fba3471bcabb43a54
ca9ca1b918f317501d6911f30cb533fc044da20cc816199c3ef7be37559b678d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "CA9CA1B918F317501D6911F30CB533FC044DA20CC816199C3EF7BE37559B678D"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10974
Expires: Mon, 05 Dec 2022 02:45:43 GMT
Date: Sun, 04 Dec 2022 23:42:49 GMT
Connection: keep-alive
code.jquery.com/jquery-3.6.0.min.js
69.16.175.10200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP 69.16.175.10:0
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://opensea.io.bonsavonsoaps.com
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:49 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670197369.dop229.sk1.t,1670197369.cds257.sk1.hn,1670197369.cds210.sk1.c
X-Firefox-Spdy: h2
opensea.io.bonsavonsoaps.com/assets/style/collection.svg
67.212.189.210200 OK 1.1 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/collection.svg
IP 67.212.189.210:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1090), with no line terminators
Hash 7bb57bdac85951065b5c528f747fc538
4f7ffba9056a1aeb138b10bb1df80d54b93fcf46
0304371ce0adc28148c52f73da46c6aa04a81a906a40ef51a8dc3824b4a27459
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/collection.svg HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:03:08 GMT
Accept-Ranges: bytes
Content-Length: 1090
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml
cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js
151.101.129.229200 OK 98 kB URL HTTP/2 cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js
IP 151.101.129.229:0
File type ASCII text, with very long lines (43040)
Hash bc7f9f4b180da64e75549763afd31827
e8ce0cc0620291281ac93fcb790efadb459ed58d
0d84d9bbaa6afffeec141eda5a989c4874342265c707e51074c2dc271acdc811
GET /gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"4edeb-1sQW5dFT9QD3rGbSWitz20WGetQ"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:42:49 GMT
age: 7958
x-served-by: cache-fra-eddf8230099-FRA, cache-bma1645-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 97784
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/ismobilejs@1.1.1/dist/isMobile.min.js
151.101.129.229200 OK 862 B URL HTTP/2 cdn.jsdelivr.net/npm/ismobilejs@1.1.1/dist/isMobile.min.js
IP 151.101.129.229:0
File type ASCII text, with very long lines (1882), with no line terminators
Hash 069d9bfcaee604f8f1d8b7c126a2cfe5
ce00de60bcf55e66702fb13768240e4db5e8b99e
78885d3b504939e50df1d231830a3fc683a01635d319fd6036da85216fdb40aa
GET /npm/ismobilejs@1.1.1/dist/isMobile.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.1.1
x-jsd-version-type: version
etag: W/"75a-FO4CH/twosD6GHbI49EEMaxGxg4"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:42:49 GMT
age: 5355410
x-served-by: cache-fra19180-FRA, cache-bma1645-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 862
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/@walletconnect/web3-provider@1.7.7/dist/umd/index.min.js
151.101.129.229200 OK 225 kB URL HTTP/2 cdn.jsdelivr.net/npm/@walletconnect/web3-provider@1.7.7/dist/umd/index.min.js
IP 151.101.129.229:0
File type ASCII text, with very long lines (50903)
Size 225 kB (224550 bytes)
Hash 5c6445d9345ccf8d200f724d148477cb
64d345ec247c0e7b73ccb56fb1f14d001c205853
0a6ec02559aef4f10b65fa68ebe3935d9b8a167cc0b1658d07dc6728ee6d02e0
GET /npm/@walletconnect/web3-provider@1.7.7/dist/umd/index.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.7.7
x-jsd-version-type: version
etag: W/"b660c-MTEbN9OFqURIn0SqyJJBl4qWSNk"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 04 Dec 2022 23:42:49 GMT
age: 3432324
x-served-by: cache-fra-eddf8230090-FRA, cache-bma1645-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 224550
X-Firefox-Spdy: h2
opensea.io.bonsavonsoaps.com/assets/js/web3/web3.min.js
67.212.189.210200 OK 1.3 MB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/js/web3/web3.min.js
IP 67.212.189.210:0
File type ASCII text, with very long lines (64135)
Size 1.3 MB (1292297 bytes)
Hash c59fd23e1662678b915668389f565f35
5f04ae7af69772f478f11598db2b0e4be28b3527
88f50abc79c7870087b6adcd4ad8384377f023f9359045383b21c842717fac90
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/js/web3/web3.min.js HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Tue, 19 Apr 2022 08:05:00 GMT
Accept-Ranges: bytes
Content-Length: 1292297
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
opensea.io.bonsavonsoaps.com/assets/style/opensea.svg
67.212.189.210200 OK 3.9 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/opensea.svg
IP 67.212.189.210:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3905), with no line terminators
Hash c7c3ed10e5c602fba31f6e93a6fbc957
3fa948ddaa2c1aa91fbb94527a7908f39896a887
8ae5fefbaeebd874dfebfc4b5ef2a251005ae26b0a7cb9bd531a1c131c44f6ad
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/opensea.svg HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:02:12 GMT
Accept-Ranges: bytes
Content-Length: 3905
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
opensea.io.bonsavonsoaps.com/assets/style/domain-names.webp
67.212.189.210200 OK 52 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/domain-names.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 13f3061ad278717cf185a4e3be105d35
037ecd16b1646de7690a1a2b8c15c4260a5b0f19
84092dbeee0c446ec5a3fb0aa65b244c1d92ced4d0ed39f4e4e65f548e8f0fca
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/domain-names.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:03:46 GMT
Accept-Ranges: bytes
Content-Length: 51922
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/webp
opensea.io.bonsavonsoaps.com/assets/style/img.jpeg
67.212.189.210200 OK 36 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/img.jpeg
IP 67.212.189.210:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 600x600, components 3\012- data
Hash cc0be347e76a88bae60f377b403aad73
28125cb2444b4d76f11c24cd8bdd2ab9d01d591d
310e5e38ecd829ab28a0236f20bae00f6eed96168fe98489357824f032ecb056
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/img.jpeg HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:02:54 GMT
Accept-Ranges: bytes
Content-Length: 35953
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
openseauserdata.com/static/promocards/sandbox-promocard.jpg
104.18.2.144200 OK 128 kB URL HTTP/2 openseauserdata.com/static/promocards/sandbox-promocard.jpg
IP 104.18.2.144:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1125x1740, components 3\012- data
Size 128 kB (127667 bytes)
Hash fba591f0f17f640919d1ea47d1afdae6
57c79f6ba254d668eb455e418a0e0dd611857c4e
0b32a829efd726cacc736971a310c2ab427591597bccbdce2da206cf06219566
GET /static/promocards/sandbox-promocard.jpg HTTP/1.1
Host: openseauserdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:49 GMT
content-type: image/jpeg
content-length: 127667
access-control-allow-origin: *
access-control-expose-headers: Content-Type
cache-control: public, max-age=14400
cf-bgj: h2pri
etag: "fba591f0f17f640919d1ea47d1afdae6"
expires: Mon, 05 Dec 2022 03:42:49 GMT
last-modified: Wed, 06 Apr 2022 16:48:32 GMT
x-guploader-uploadid: ADPycdtnXrAO2_IE3fnBeNahRma5h0FKtWT6hiXCe6neNFX0Gy78SBF-GNp0ZQqOy_z7Fa6inJceCqwaF3KeVX14yQ6w3qnG6EF6
x-goog-generation: 1649263711972899
x-goog-hash: crc32c=77Qc2Q==, md5=+6WR8PF/ZAkZ0epH0a/a5g==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 127667
cf-cache-status: HIT
age: 26
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77486695f98db51d-OSL
X-Firefox-Spdy: h2
static.opensea.io/solana/home-banner.png
104.18.17.184200 OK 100 kB URL HTTP/2 static.opensea.io/solana/home-banner.png
IP 104.18.17.184:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 100 kB (100274 bytes)
Hash 33f331b6507939aaf696e1a96d86f1ff
75e1ccac392d1f49acb433155ae2e9c07a8ee348
7e7e3ed14195df0f997098eecbc398379e6b49e347a40020007b4bbbde3358fb
GET /solana/home-banner.png HTTP/1.1
Host: static.opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:49 GMT
content-type: image/webp
content-length: 100274
access-control-allow-origin: *
cache-control: public,max-age=3600
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=133431
content-disposition: inline; filename="home-banner.webp"
etag: "e120318ca8f3642dac87a7c96e0cee86"
last-modified: Tue, 05 Apr 2022 16:01:13 GMT
vary: Accept
x-guploader-uploadid: ADPycdtcL75sgaMnGXeUc7RWZiv_XM6SjHz3srJsChPA-w5MzQGXt20Ep9Ce8D2W5eSp_mmAXA8vWfsAeZdWYCsTBz8xby_JJ0fg
x-goog-generation: 1649174473639146
x-goog-hash: crc32c=XR+cXg==, md5=4SAxjKjzZC2sh6fJbgzuhg==
x-goog-metageneration: 1
x-goog-storage-class: MULTI_REGIONAL
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 133431
cf-cache-status: HIT
age: 26
accept-ranges: bytes
set-cookie: __cf_bm=NdtOw1jxoh21h_t25gjeXheXLU.wy25hqJ4r4WODm9M-1670197369-0-AbkxMBsZG814xDU6Y6ZyVcurr6TKF9NL2L+jwSlEzF/e10D0ZNHdKiLnFb2fkq63+52WtKDeT2/op3TW0PWQ8Tc=; path=/; expires=Mon, 05-Dec-22 00:12:49 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77486695fdc2b4f9-OSL
X-Firefox-Spdy: h2
openseauserdata.com/static/promocards/stretchoftime-promocard.jpg
104.18.2.144200 OK 139 kB URL HTTP/2 openseauserdata.com/static/promocards/stretchoftime-promocard.jpg
IP 104.18.2.144:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1125x1740, components 3\012- data
Size 139 kB (139020 bytes)
Hash 908c76cdc513bad1a352191b4ef3152d
81e281cad758365c5327aaf9ffb8fe62a182f27e
6cefc398b0f8f4c2901f659ff7d6fc9a23ced2c6e7a7561272139ca33699bb63
GET /static/promocards/stretchoftime-promocard.jpg HTTP/1.1
Host: openseauserdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:49 GMT
content-type: image/jpeg
content-length: 139020
access-control-allow-origin: *
access-control-expose-headers: Content-Type
cache-control: public, max-age=14400
cf-bgj: h2pri
etag: "908c76cdc513bad1a352191b4ef3152d"
expires: Mon, 05 Dec 2022 03:42:49 GMT
last-modified: Fri, 08 Apr 2022 16:42:38 GMT
x-guploader-uploadid: ADPycdv6B7uaQ0yQ9D2bV2sRdDZI0UZeroVDH-akWJ9IBgHQhYZs5gPLG7TjwvqiKTLdrPj_sBqcg7XHNiYDJaOJJJztZR1TmLeM
x-goog-generation: 1649436158203430
x-goog-hash: crc32c=gUITFw==, md5=kIx2zcUTutGjUhkbTvMVLQ==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 139020
cf-cache-status: HIT
age: 26
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77486695f98eb51d-OSL
X-Firefox-Spdy: h2
openseauserdata.com/static/promocards/tales-promocard.jpg
104.18.2.144200 OK 200 kB URL HTTP/2 openseauserdata.com/static/promocards/tales-promocard.jpg
IP 104.18.2.144:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1125x1740, components 3\012- data
Size 200 kB (200055 bytes)
Hash f84fe59c1980b3e940d1e800e7b0e46d
1588c4c406ac37324f0ff63e28d4957b109f42dd
a306f54e4803b1138fe36f82079a4151dda215d21b05fb20389b8dfeebc6d901
GET /static/promocards/tales-promocard.jpg HTTP/1.1
Host: openseauserdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:49 GMT
content-type: image/jpeg
content-length: 200055
access-control-allow-origin: *
access-control-expose-headers: Content-Type
cache-control: public, max-age=14400
cf-bgj: h2pri
etag: "f84fe59c1980b3e940d1e800e7b0e46d"
expires: Mon, 05 Dec 2022 03:42:49 GMT
last-modified: Mon, 04 Apr 2022 15:13:50 GMT
x-guploader-uploadid: ADPycdt4db65tHhVJ2fKm4srSCNhhZVwmOc0IUx3aCnYEmu5eyHlasAalH9hjHbOv8D-KEif8Z528xFmu2TjBfHs7_iyZA
x-goog-generation: 1649085230932984
x-goog-hash: crc32c=KU1PFQ==, md5=+E/lnBmAs+lA0egA57DkbQ==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 200055
cf-cache-status: HIT
age: 26
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77486695f98fb51d-OSL
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.20.226:0
Hash 91bb39e5645ba036608e611547130a9e
5f86f5b96f81e44614118e41deab0bece8927185
87eea434adeb3ff9934a4f31041a847696740d4f2328d89ae848b3b1ce8fe704
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:49 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "93AED4033B6284A80A20169A0D04E8371B704872"
Expires: Mon, 05 Dec 2022 10:00:00 GMT
Last-Modified: Sun, 04 Dec 2022 22:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2782
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774866983e3afac8-OSL
opensea.io.bonsavonsoaps.com/assets/style/virtual-worlds.webp
67.212.189.210200 OK 97 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/virtual-worlds.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash bd88b2dc4a25e15e246d200396492836
fdf5d8ea368487a3554cf4caba2a17a82a28e8a7
3b337c5115eccc66bbfebd7fc08aab4f6200c4f4a3773b680d42804aae1f4351
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/virtual-worlds.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:04:30 GMT
Accept-Ranges: bytes
Content-Length: 97424
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/webp
opensea.io.bonsavonsoaps.com/assets/style/utility.webp
67.212.189.210200 OK 141 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/utility.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 141 kB (140854 bytes)
Hash 77290dadd246bda015753085a7c755fe
c04973aabbe7c8925766c84c0bf88c7a820f8949
46441628c5e6b667e374d0fd5b4688efb15be39524e608bb20765f2274e38526
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/utility.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:04:24 GMT
Accept-Ranges: bytes
Content-Length: 140854
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/webp
opensea.io.bonsavonsoaps.com/assets/style/wallet.svg
67.212.189.210200 OK 1.2 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/wallet.svg
IP 67.212.189.210:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1173), with no line terminators
Hash 8e6b9c9f0e09b53b9e75bd934cdce204
4f543d6415fb147b11280bbd295cda76e5f706de
d7c3db2bddf3110dcff83280a91ec357268a3e2adcf2cad7f5c2f1c59a4736c8
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/wallet.svg HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:03:02 GMT
Accept-Ranges: bytes
Content-Length: 1173
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/svg+xml
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
opensea.io.bonsavonsoaps.com/assets/style/nft.svg
67.212.189.210200 OK 966 B URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/nft.svg
IP 67.212.189.210:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (966), with no line terminators
Hash 2d0a07dc21e172de5e86a7528a57c697
49fc96114ee20c1dad2f496413a284cf3ccfae9b
70af639883560c3e224a542b07775556966feedc29ee188ba0e2e97574f5f075
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/nft.svg HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:03:22 GMT
Accept-Ranges: bytes
Content-Length: 966
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/svg+xml
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5250
Expires: Mon, 05 Dec 2022 01:10:19 GMT
Date: Sun, 04 Dec 2022 23:42:49 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
opensea.io.bonsavonsoaps.com/assets/style/sale.svg
67.212.189.210200 OK 1.1 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/sale.svg
IP 67.212.189.210:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1062), with no line terminators
Hash 0edec9905d8191838fa507442c7cd037
d9456d5baf1f2e2466d907ce0a93daf8283f190f
cd1e6c82fc02dfac88bede7cc326200f97213b362c6e5715d2b5d48f6cc9b2d7
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/sale.svg HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:03:26 GMT
Accept-Ranges: bytes
Content-Length: 1062
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5250
Expires: Mon, 05 Dec 2022 01:10:19 GMT
Date: Sun, 04 Dec 2022 23:42:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5250
Expires: Mon, 05 Dec 2022 01:10:19 GMT
Date: Sun, 04 Dec 2022 23:42:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d72fb8d20c29763234c2817b119d11b
d4924ec714f5157bcb2fddcb5f768188a3dd37dc
e9aa59142e0673ed3f58b36beaca48213c678dbe4655f9c4b64581cb0f6f22f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feff698a5-ffc4-43ea-b7a3-b681cafeb108.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12830
x-amzn-requestid: 66f5f2fa-8472-4484-bbea-20ece7e98b1f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcsxGDyIAMFX4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e51-146167697890d9312ce3dbac;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2jx-M9MgKrJXU4yYsJzWqNXwruIGhFNWkD7GcPdqddnEzcNgFw2luw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 03:27:17 GMT
age: 72932
etag: "d4924ec714f5157bcb2fddcb5f768188a3dd37dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/materialiconsoutlined/v101/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUcel5euIg.woff2
142.250.74.35200 OK 151 kB URL HTTP/2 fonts.gstatic.com/s/materialiconsoutlined/v101/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUcel5euIg.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), CFF, length 151244, version 1.0\012- data
Size 151 kB (151244 bytes)
Hash e1a7398bccc3cac6f91a6feafad048a5
0f1bb2cac93fae4fe053f3ec87a7a6eae2046577
09278f5e4175344bf9f92b8e2e7be3940da6ae4c067c21e66ea676fa8be58bee
GET /s/materialiconsoutlined/v101/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUcel5euIg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://opensea.io.bonsavonsoaps.com
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 151244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 18:48:40 GMT
expires: Wed, 29 Nov 2023 18:48:40 GMT
cache-control: public, max-age=31536000
age: 449649
last-modified: Wed, 09 Mar 2022 18:26:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba66ee21-e2f8-434c-a2b3-004950fdfd58.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba66ee21-e2f8-434c-a2b3-004950fdfd58.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 557fea28a0a540d2ffdadd828e03de0b
c314368e2e73dabf2c5d856e2c3e1fae610a3005
0fdd195911cdfff46a6dd8ba7b760953e5317fd7ee88abf1e19458518979fdee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba66ee21-e2f8-434c-a2b3-004950fdfd58.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11253
x-amzn-requestid: e0561a00-8657-4af0-b24c-08b328282f79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_wKE9coAMFjmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d1334-2844266d51d5c5672f34ff61;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iT3IPDIK-qKf-y1_x7hZNSW-4GqKLNuX6U__8bY8eZP178PPnD0IeA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:57:03 GMT
age: 6346
etag: "c314368e2e73dabf2c5d856e2c3e1fae610a3005"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/materialicons/v126/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2
142.250.74.35200 OK 124 kB URL HTTP/2 fonts.gstatic.com/s/materialicons/v126/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 124404, version 1.0\012- data
Size 124 kB (124404 bytes)
Hash 94cef4c50fdde3db87d08031a829d1a8
88f7b5ba379df8bac8ea74bdb62c374dce17e994
273150c47a3c72fac516c64dbc2609311a03456037a0ff70ee1f1c85307eaa1a
GET /s/materialicons/v126/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://opensea.io.bonsavonsoaps.com
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 124404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:07:37 GMT
expires: Thu, 30 Nov 2023 19:07:37 GMT
cache-control: public, max-age=31536000
age: 362112
last-modified: Wed, 09 Mar 2022 18:26:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5250
Expires: Mon, 05 Dec 2022 01:10:19 GMT
Date: Sun, 04 Dec 2022 23:42:49 GMT
Connection: keep-alive
opensea.io.bonsavonsoaps.com/assets/style/photography-category.webp
67.212.189.210200 OK 215 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/photography-category.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 215 kB (215364 bytes)
Hash 5b836f4bed45402184ccd898d52fa8bc
4e407d1900f8928da324c957cf43a99aab478ed0
bbf7fa21aa40409faa6416554f4bec4b482dc671c6338ca88050a61f2603a7fc
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/photography-category.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:04:04 GMT
Accept-Ranges: bytes
Content-Length: 215364
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/webp
opensea.io.bonsavonsoaps.com/assets/style/sports.webp
67.212.189.210200 OK 129 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/sports.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 129 kB (129352 bytes)
Hash 9a0077fded7f3fb9b2618594ebc859e4
d8149685f5d0c6fe66311dee6e606f2e2c13d8b9
ebac54aa2f93a252975e3ca96d62dec0caa9a01e1f33668620aac442a0036ce7
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/sports.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:04:12 GMT
Accept-Ranges: bytes
Content-Length: 129352
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/webp
opensea.io.bonsavonsoaps.com/assets/style/music.webp
67.212.189.210200 OK 131 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/music.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 131 kB (130734 bytes)
Hash b74b0a9e12d5194fabe6686e6cd36fbe
483164561faed595318dddbabf17678eeaa7a78a
a336a33e8d6a3b74fee191121a0c950229bc6097f9018983181b730b875c741d
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/music.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:03:52 GMT
Accept-Ranges: bytes
Content-Length: 130734
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/webp
opensea.io.bonsavonsoaps.com/assets/style/collectibles.webp
67.212.189.210200 OK 52 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/collectibles.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 476ce7100d248414d01ebe385b9a3699
036cc014ba812783bd079e04bbc828ecd1f1094d
ccf8d844fce53f496903e474f331d318e9498ea957126a2152afee889f4a60ea
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/collectibles.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:03:40 GMT
Accept-Ranges: bytes
Content-Length: 52248
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/webp
opensea.io.bonsavonsoaps.com/assets/style/art.webp
67.212.189.210200 OK 257 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/art.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 257 kB (257268 bytes)
Hash 5306867e611ccf4ae4870f2a397ac666
05ddd42571a601d60d4fdef8539bc6e827d4d724
9a1d2967a227349ee6e2a778ff87f336b77cd406bac35dea39a05345d9a2fa04
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/art.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:47 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:03:34 GMT
Accept-Ranges: bytes
Content-Length: 257268
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/webp
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50c0f516-113b-498b-a6f2-9f0a076ff423.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50c0f516-113b-498b-a6f2-9f0a076ff423.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dafdb4fe91795a9e16baebb085ccd818
f5ed5d03e6969f81349ad78fde0e71390a4ed391
f535ce45d68317bad15513d3cd3d21d2c0ef12e93d6ac19cc07b704ee1651f51
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50c0f516-113b-498b-a6f2-9f0a076ff423.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7853
x-amzn-requestid: fa079a7e-1e93-41d6-bb16-2703077a0cb8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGrKEGFoAMFnBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6388517a-076131847c129c197e84901b;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:02:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Cri6Vf6-INRisbFQ4ITZ7f8RIvomQXQ-TjkjWAOkkUhmI1yhHIbTYA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 02:03:49 GMT
age: 77940
etag: "f5ed5d03e6969f81349ad78fde0e71390a4ed391"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.youtube.com/s/player/dab28f34/www-player.css
142.250.74.142200 OK 50 kB URL HTTP/2 www.youtube.com/s/player/dab28f34/www-player.css
IP 142.250.74.142:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9abf9c15a58d40e7ecc2302b4bfb153e
5195babba42ed31eb39751e8c917277ace5e19a4
1eca62432d16bb94000cf099705eee38903254825032b27ddf3d5decbe3d3114
GET /s/player/dab28f34/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&autoplay=0&controls=1&loop=1&modestbranding=1&rel=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49849
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:01:14 GMT
expires: Fri, 01 Dec 2023 16:01:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 01:20:18 GMT
content-type: text/css
age: 286896
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d81855b-98f7-4c0c-bfb4-78957d8c433d.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d81855b-98f7-4c0c-bfb4-78957d8c433d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9b475d52dd164b9cc0efbecfd58282b6
973e77db7fb34c60e08719dc7196d865e8831cb2
3985e24217a2bd811a0ea9bf0223eb0cda31604986f3467fae028a086a8b827e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d81855b-98f7-4c0c-bfb4-78957d8c433d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7028
x-amzn-requestid: 4d20bc36-d129-468d-b30d-f6b571d528af
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjKz6G86oAMF9oA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638abe7f-5f9353c04487352b64ba3bf8;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 03:11:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pjwTv-Ry-1NHzZj6N-Mwul76sDeRSpLlVh7azqqqls44kH-mNhnggw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 04:59:53 GMT
age: 67376
etag: "973e77db7fb34c60e08719dc7196d865e8831cb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:48:03 GMT
expires: Fri, 01 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 266087
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad33fba3-ee62-4ef5-9330-0bd0a142dd92.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad33fba3-ee62-4ef5-9330-0bd0a142dd92.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9e228ec099cad3eea0fb1656da3536f
532cf52021a6cdb7b7963e9108b41590f58276fe
8e54f09dd66fdc35e5f54100cf6c56abf88cb7e724b08092e7ce82720d423135
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad33fba3-ee62-4ef5-9330-0bd0a142dd92.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6236
x-amzn-requestid: 0215aac5-7c44-43b0-b2e9-baddeed42fe0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjiXEEXiIAMFqIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ae42d-5961705726e81a4e3b6a91c9;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 05:52:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oJp2wIEPM-swJMvp-n40xEtH1a7V8gi1ixzsxmuXoBG_UFglSeS-1g==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 22:21:31 GMT
age: 4879
etag: "532cf52021a6cdb7b7963e9108b41590f58276fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.youtube.com/s/player/dab28f34/www-embed-player.vflset/www-embed-player.js
142.250.74.142200 OK 99 kB URL HTTP/2 www.youtube.com/s/player/dab28f34/www-embed-player.vflset/www-embed-player.js
IP 142.250.74.142:0
File type ASCII text, with very long lines (679)
Hash a9a95fc3a85fc2904a0cffd12ff9b01c
b3db5cd9996da5ffa51fe22a57898a79abfe32df
2ef638f9e81beb63874104df180f7d1de54c01d6e22857f39e16c1581a3f3f7e
GET /s/player/dab28f34/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&autoplay=0&controls=1&loop=1&modestbranding=1&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 99243
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:01:14 GMT
expires: Fri, 01 Dec 2023 16:01:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 01:20:18 GMT
content-type: text/javascript
age: 286896
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:40:43 GMT
expires: Fri, 01 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 284527
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea.io.bonsavonsoaps.com/assets/style/opensea-white.svg
67.212.189.210200 OK 2.9 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/opensea-white.svg
IP 67.212.189.210:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2931), with no line terminators
Hash 270535333a04e0f7c6c352a4f2eba9ca
cbc9913a2608de3e31025ed329d7e3be4987b977
d79ac289a5efb3158ff63a02ee4dbe102a69890f69302bce8ef05c989d4d4e76
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/opensea-white.svg HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:49 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:04:38 GMT
Accept-Ranges: bytes
Content-Length: 2931
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/svg+xml
www.youtube.com/s/player/dab28f34/fetch-polyfill.vflset/fetch-polyfill.js
142.250.74.142200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/dab28f34/fetch-polyfill.vflset/fetch-polyfill.js
IP 142.250.74.142:0
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/dab28f34/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&autoplay=0&controls=1&loop=1&modestbranding=1&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:01:14 GMT
expires: Fri, 01 Dec 2023 16:01:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 01:20:18 GMT
content-type: text/javascript
age: 286896
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2955536-4372-40c4-bbce-37f3da5c8a64.jpeg
34.120.237.76200 OK 472 B URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2955536-4372-40c4-bbce-37f3da5c8a64.jpeg
IP 34.120.237.76:0
Hash 79c225db327a78b782f5a9512b07eaf0
398a1be3a70264d959146d6670d2ca54cdf4e91a
8539ea44d81775448ae8c6179d54d8a397c559b112291fa78abcf6ac6c480815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2955536-4372-40c4-bbce-37f3da5c8a64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10031
x-amzn-requestid: ca6c11c5-8842-4ffb-bb9e-5351c4e60c5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjY0CGUVIAMFxog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ad4e6-4282be9f505aa5764e9b1fa2;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 04:47:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8QEt6AHIT6gkW2X3RUuu1-K3lPlgjio-cckhiwppWK7vujPlBHrG7Q==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 18:59:33 GMT
age: 16997
etag: "cd754bb6094d2e456b95dce8daace45a0de8a121"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
opensea.io.bonsavonsoaps.com/assets/style/180x180.webp
67.212.189.210200 OK 1.8 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/180x180.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 504a6cface1532e9d9d02b3f484b590b
61f4c7b992c8af388efa731d50442515c2b9749e
0938a2f31549bc9225534b09e85b66a749d3e922c1ce139267ac30bbfb0a3e9b
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/180x180.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:49 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:09:42 GMT
Accept-Ranges: bytes
Content-Length: 1782
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/webp
opensea.io.bonsavonsoaps.com/assets/style/16x16.webp
67.212.189.210200 OK 254 B URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/16x16.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash def398722dced71ba0d2bae2e7d52939
65e7949cb82c5777ea3c45d8c19a3dfc6233546a
5d486d1b18cd39803401e57d3a6b0293756035320e531456278c6173319f87c3
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/16x16.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:49 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:05:34 GMT
Accept-Ranges: bytes
Content-Length: 254
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/webp
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 67e4709c84acec8eddbeb11d56e7d0fd
32a14eeba023499cda0d49fd785ac7626f4a5582
8953090ad9df36f81c3393cc6c67c87b6ad521b8806c7ea004e0b4354b9e1c92
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 64eb3a8f7cc11324c6f4c77e1c11f7ee
8ad889db020018b726362929a9477872a6808f0a
481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 64eb3a8f7cc11324c6f4c77e1c11f7ee
8ad889db020018b726362929a9477872a6808f0a
481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/XN0XuD8Uh3jyRWNtPTFeXJg_ht8m5ofDx6aHklOiy4amhFuWUa0JaR6It49AH8tlnYS386Q0TW_-Lmedn0UET_ko1a3CbJGeu5iHMg=s100
216.58.207.225200 OK 3.7 kB URL HTTP/2 lh3.googleusercontent.com/XN0XuD8Uh3jyRWNtPTFeXJg_ht8m5ofDx6aHklOiy4amhFuWUa0JaR6It49AH8tlnYS386Q0TW_-Lmedn0UET_ko1a3CbJGeu5iHMg=s100
IP 216.58.207.225:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 1209d911b32dc2147b94d606b63cd4f0
c04dac737ecc115472f8825baacc9dcced062a7a
dd96bc841f3ea99e844d79b4af86eabf5626eae058c784a6237aa1136655a814
GET /XN0XuD8Uh3jyRWNtPTFeXJg_ht8m5ofDx6aHklOiy4amhFuWUa0JaR6It49AH8tlnYS386Q0TW_-Lmedn0UET_ko1a3CbJGeu5iHMg=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3716
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Thu, 17 Nov 2022 03:02:28 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/7B0qai02OdHA8P_EOVK672qUliyjQdQDGNrACxs7WnTgZAkJa_wWURnIFKeOh5VTf8cfTqW3wQpozGedaC9mteKphEOtztls02RlWQ=s100
216.58.207.225200 OK 5.0 kB URL HTTP/2 lh3.googleusercontent.com/7B0qai02OdHA8P_EOVK672qUliyjQdQDGNrACxs7WnTgZAkJa_wWURnIFKeOh5VTf8cfTqW3wQpozGedaC9mteKphEOtztls02RlWQ=s100
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 9fede95006b696d4cb4ce6eb808ef8cb
e3778157a13851fc087eb893266bc39fef18b0aa
190c5b2c6b34a26461c43c8d0b30b5132b2e928b09702b81d5b546117a304adb
GET /7B0qai02OdHA8P_EOVK672qUliyjQdQDGNrACxs7WnTgZAkJa_wWURnIFKeOh5VTf8cfTqW3wQpozGedaC9mteKphEOtztls02RlWQ=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 5020
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Tue, 22 Nov 2022 04:38:04 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/Gn0XI0Bu3n0xBe1IKqr0AbnKP0eY_NwVAhjDr-ZSb9yHQNLMxvlVG8d8FElkoRs99yKg13a3VB6DeHbOAUCiqHI1nRwoWuwVNSv_fQ=s100
216.58.207.225200 OK 1.7 kB URL HTTP/2 lh3.googleusercontent.com/Gn0XI0Bu3n0xBe1IKqr0AbnKP0eY_NwVAhjDr-ZSb9yHQNLMxvlVG8d8FElkoRs99yKg13a3VB6DeHbOAUCiqHI1nRwoWuwVNSv_fQ=s100
IP 216.58.207.225:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 2ffb2726cdf60e01c5af6d05405e1245
1c2f75812adf533916fec9306bf71367894b8b2c
870adc5a61f98a6e547ef83daa2d2af3e03cef57adf8748583691132af8b428c
GET /Gn0XI0Bu3n0xBe1IKqr0AbnKP0eY_NwVAhjDr-ZSb9yHQNLMxvlVG8d8FElkoRs99yKg13a3VB6DeHbOAUCiqHI1nRwoWuwVNSv_fQ=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1739
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Wed, 23 Nov 2022 11:40:09 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/Qd1IEPYz_0YlMaclPwb6_9PyP7afZIzH15IdIU2X6t1Wvg81DwpAaWOY0cNmxy173C4yMA7sM3xF9-HJsCSKJdx6KvDR3old3IKuTIc=s100
216.58.207.225200 OK 12 kB URL HTTP/2 lh3.googleusercontent.com/Qd1IEPYz_0YlMaclPwb6_9PyP7afZIzH15IdIU2X6t1Wvg81DwpAaWOY0cNmxy173C4yMA7sM3xF9-HJsCSKJdx6KvDR3old3IKuTIc=s100
IP 216.58.207.225:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 32aa5a489ec84f784c225e5bd300e4a9
d25bf2f8f79ca4359f8956d621c7832780ad8b76
b840f2b1b9bc787049914f23eaa8ed38a5da6fad01fbeee2e5ce07405f7cc9c3
GET /Qd1IEPYz_0YlMaclPwb6_9PyP7afZIzH15IdIU2X6t1Wvg81DwpAaWOY0cNmxy173C4yMA7sM3xF9-HJsCSKJdx6KvDR3old3IKuTIc=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 12539
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/crR2qxl8Gnpg8TUKP45sxdR0NOlDXQrQH0L5n6LEcB2OSMwVKveVkwZFkvB8qytmy51D59TeMZbqhn6mgffRbKBgsshdCryGtJ8PsAU=s100
216.58.207.225200 OK 2.6 kB URL HTTP/2 lh3.googleusercontent.com/crR2qxl8Gnpg8TUKP45sxdR0NOlDXQrQH0L5n6LEcB2OSMwVKveVkwZFkvB8qytmy51D59TeMZbqhn6mgffRbKBgsshdCryGtJ8PsAU=s100
IP 216.58.207.225:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 23e39358a91b393f36572ab5fc8c60bb
c9c4019ae53d41c5df5ab842c29c297bd8be749e
edd154645045100e47b57d6c4f6446eb845624262d230e28ddaf54a1261d0c61
GET /crR2qxl8Gnpg8TUKP45sxdR0NOlDXQrQH0L5n6LEcB2OSMwVKveVkwZFkvB8qytmy51D59TeMZbqhn6mgffRbKBgsshdCryGtJ8PsAU=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2573
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Wed, 23 Nov 2022 11:40:09 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/Pu2TAnykhmrL5jtD48VcYgFb8lTMZeUDabfcUZMQgseS0KJ6CB1hlgIulwdzeVLPnD4yAVXsF9o-3rT9xnuAkbuAcSFH9Wnh0MGP=s100
216.58.207.225200 OK 6.2 kB URL HTTP/2 lh3.googleusercontent.com/Pu2TAnykhmrL5jtD48VcYgFb8lTMZeUDabfcUZMQgseS0KJ6CB1hlgIulwdzeVLPnD4yAVXsF9o-3rT9xnuAkbuAcSFH9Wnh0MGP=s100
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 9006b884702a87b501c3438eca82406f
2d4916f6da48db5fbce785011e05237965d88d83
41bee5803a8843b02ac1d2f5870331377f6229dcc83094ba4eb1f8d4faa4bcb8
GET /Pu2TAnykhmrL5jtD48VcYgFb8lTMZeUDabfcUZMQgseS0KJ6CB1hlgIulwdzeVLPnD4yAVXsF9o-3rT9xnuAkbuAcSFH9Wnh0MGP=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 6229
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/BdxvLseXcfl57BiuQcQYdJ64v-aI8din7WPk0Pgo3qQFhAUH-B6i-dCqqc_mCkRIzULmwzwecnohLhrcH8A9mpWIZqA7ygc52Sr81hE=s100
216.58.207.225200 OK 2.6 kB URL HTTP/2 lh3.googleusercontent.com/BdxvLseXcfl57BiuQcQYdJ64v-aI8din7WPk0Pgo3qQFhAUH-B6i-dCqqc_mCkRIzULmwzwecnohLhrcH8A9mpWIZqA7ygc52Sr81hE=s100
IP 216.58.207.225:0
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 096ff4156dffe840fa815d6caf9ff5e7
8871d70770ce4e1677b01160d1c00182328896f4
3aa8c59639a748328ada5ef2189b4a565cd0e3571c8fb38cd19c8de6a3304dc2
GET /BdxvLseXcfl57BiuQcQYdJ64v-aI8din7WPk0Pgo3qQFhAUH-B6i-dCqqc_mCkRIzULmwzwecnohLhrcH8A9mpWIZqA7ygc52Sr81hE=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2612
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:16:09 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 1601
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/MACJRvA4MOLHonq73rxU8TaHPrbYuGbJ5_rqV7pw9ZGd97h5mo5NyU6PpQNOvZzdoVu2KRVs3jP-oMK3FF1XQtNSxN6xf1ZVd9is=s100
216.58.207.225200 OK 6.6 kB URL HTTP/2 lh3.googleusercontent.com/MACJRvA4MOLHonq73rxU8TaHPrbYuGbJ5_rqV7pw9ZGd97h5mo5NyU6PpQNOvZzdoVu2KRVs3jP-oMK3FF1XQtNSxN6xf1ZVd9is=s100
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash d097c7b5795a85cedea670d904683c9d
bf7f0e946853ad2932c3b3fd9867ca9abdee9c8a
82d085d61dc48bd471cef04224bbfc552360e403007d9828c818246eb3c4ceb0
GET /MACJRvA4MOLHonq73rxU8TaHPrbYuGbJ5_rqV7pw9ZGd97h5mo5NyU6PpQNOvZzdoVu2KRVs3jP-oMK3FF1XQtNSxN6xf1ZVd9is=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 6648
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/uheZXqcvxP_8TK7FzP7skUSNh3njmVStcqyLYkCnYPjb5c3enWOS88IAOTf8vdF5y4-vE7f0BQPHnEsVqjq0pD2QKLFugGZOdXUI=s100
216.58.207.225200 OK 3.8 kB URL HTTP/2 lh3.googleusercontent.com/uheZXqcvxP_8TK7FzP7skUSNh3njmVStcqyLYkCnYPjb5c3enWOS88IAOTf8vdF5y4-vE7f0BQPHnEsVqjq0pD2QKLFugGZOdXUI=s100
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash adc28f8c004cda50159eb2e29c58bdeb
615c85b42c8b0d6dd675cd8876dad1914a498055
0ee336cb24501b896b266be1ac7b0e5f3774556e07a6407a04e118055b0570fd
GET /uheZXqcvxP_8TK7FzP7skUSNh3njmVStcqyLYkCnYPjb5c3enWOS88IAOTf8vdF5y4-vE7f0BQPHnEsVqjq0pD2QKLFugGZOdXUI=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3818
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/iXfotGwS3X568ae6VbytHkVKlx3pqIq2ahBUGaI8E5nYa6hU-UG68Wu3grkTnOzn9KjGwqf9Rry7kKDVTRaBXSyIOk2pqc_KFJ6g6Ro=s100
216.58.207.225200 OK 6.5 kB URL HTTP/2 lh3.googleusercontent.com/iXfotGwS3X568ae6VbytHkVKlx3pqIq2ahBUGaI8E5nYa6hU-UG68Wu3grkTnOzn9KjGwqf9Rry7kKDVTRaBXSyIOk2pqc_KFJ6g6Ro=s100
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 2c37b0f458002ef317edd9ef910f86ab
a364c18d736ca28df46850889967421345c16cd4
624733c671daac9f7e4fcabecf516bdd1d7bd8c3ce51e03fd78cf21680ba7f02
GET /iXfotGwS3X568ae6VbytHkVKlx3pqIq2ahBUGaI8E5nYa6hU-UG68Wu3grkTnOzn9KjGwqf9Rry7kKDVTRaBXSyIOk2pqc_KFJ6g6Ro=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 6453
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 64eb3a8f7cc11324c6f4c77e1c11f7ee
8ad889db020018b726362929a9477872a6808f0a
481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
opensea.io/blog/wp-content/uploads/2022/02/76edde93ea6402d5818fbc03767aeda0.jpg
104.18.17.184404 Not Found 13 kB URL HTTP/2 opensea.io/blog/wp-content/uploads/2022/02/76edde93ea6402d5818fbc03767aeda0.jpg
IP 104.18.17.184:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5879)
Hash 38b33a2661cdb70b4cbddc5e751778e3
e92e3c16b04cdd323317d7fe6336797e7010919c
05017299731a460708663eab96f10ec74377e1212a54ef8f17dcf22494847440
GET /blog/wp-content/uploads/2022/02/76edde93ea6402d5818fbc03767aeda0.jpg HTTP/1.1
Host: opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 04 Dec 2022 23:42:49 GMT
content-type: text/html
cf-ray: 77486694dcf7b4f9-OSL
cache-control: private, max-age=0, must-revalidate, s-maxage=300
last-modified: Thu, 01 Dec 2022 05:15:17 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept-Encoding,x-wf-forwarded-proto
cf-cache-status: MISS
content-security-policy: frame-ancestors 'self'
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-cluster-name: eu-west-1-prod-edge-blue
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-served-by: cache-iad-kiad7000025-IAD, cache-dub4348-DUB
x-timer: S1670197369.442069,VS0,VE152
set-cookie: __cf_bm=7K6SULxnwz0i4tgsH06if7GS1RMaN7y3xVYyq4pKjHg-1670197369-0-AeMONg+84gWzz2KKxfg0HgjC0fXjhRderfFU+BWg9fTiy7EjGlfzauxcCjR1Ks+TQL2kSnQepXYxI+zrHS1pisc=; path=/; expires=Mon, 05-Dec-22 00:12:49 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 64eb3a8f7cc11324c6f4c77e1c11f7ee
8ad889db020018b726362929a9477872a6808f0a
481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/_RwmSVUbb4HJKyBLQovi09Vy0GrJKtvUQI6rt6O0SaB4iYlMNYqFl-phcvsex-tk0SJhEsdnA1G_gibLhkkkb95tt2dShQQfiG-mHA=h200
216.58.207.225200 OK 17 kB URL HTTP/2 lh3.googleusercontent.com/_RwmSVUbb4HJKyBLQovi09Vy0GrJKtvUQI6rt6O0SaB4iYlMNYqFl-phcvsex-tk0SJhEsdnA1G_gibLhkkkb95tt2dShQQfiG-mHA=h200
IP 216.58.207.225:0
File type PNG image data, 284 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 4d179f9e491fab161cc8e1d6a736a9f8
9aff966244af251034503f0299a3c71b5821df0e
e6045fd192389c8e9ca3df393ffb1119aac3c7b05150dec3299a75166aa7791a
GET /_RwmSVUbb4HJKyBLQovi09Vy0GrJKtvUQI6rt6O0SaB4iYlMNYqFl-phcvsex-tk0SJhEsdnA1G_gibLhkkkb95tt2dShQQfiG-mHA=h200 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 17119
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/i1Wpn82qP81zDBPoVwq0vvUB6g4RLed9Ad4rir5M7feTq_t6uYV41dqQXYqQlYt90BhLu-U6vXedFXuORvQUv5bqXEBuPZy_Yd-b0Q=s100
216.58.207.225200 OK 11 kB URL HTTP/2 lh3.googleusercontent.com/i1Wpn82qP81zDBPoVwq0vvUB6g4RLed9Ad4rir5M7feTq_t6uYV41dqQXYqQlYt90BhLu-U6vXedFXuORvQUv5bqXEBuPZy_Yd-b0Q=s100
IP 216.58.207.225:0
File type GIF image data, version 89a, 100 x 100\012- data
Hash a668f94dc091a5ecdf3e7ccc3ac89fcd
42e4b302280b5c166a752669d83fa30136181b53
55a9decc5441777f9fdb6dbdd4d66bdcd2c1ace5a4696c2cf179e0f686a88a9e
GET /i1Wpn82qP81zDBPoVwq0vvUB6g4RLed9Ad4rir5M7feTq_t6uYV41dqQXYqQlYt90BhLu-U6vXedFXuORvQUv5bqXEBuPZy_Yd-b0Q=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10907
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Wed, 23 Nov 2022 11:40:09 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/j4LYd1ZJNy8_0Aje_7HiG5wr_CDCU3ediJcVwPPfcQblH_cqC-sD4aBU3oNm386CSkZhYLMLF4SqmARb66S7nt5782SiPRrluW3F7Q=s100
216.58.207.225200 OK 1.6 kB URL HTTP/2 lh3.googleusercontent.com/j4LYd1ZJNy8_0Aje_7HiG5wr_CDCU3ediJcVwPPfcQblH_cqC-sD4aBU3oNm386CSkZhYLMLF4SqmARb66S7nt5782SiPRrluW3F7Q=s100
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 643b35c1dbc665fcfc3445b9532c48ac
62eb51b9f5b7da21508f6fc41238144f6e9ecf08
d7931db0322d823f23bf6e1fb03cfd293c493f1134f1f31294f5e11594cd27f8
GET /j4LYd1ZJNy8_0Aje_7HiG5wr_CDCU3ediJcVwPPfcQblH_cqC-sD4aBU3oNm386CSkZhYLMLF4SqmARb66S7nt5782SiPRrluW3F7Q=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1612
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/j4LYd1ZJNy8_0Aje_7HiG5wr_CDCU3ediJcVwPPfcQblH_cqC-sD4aBU3oNm386CSkZhYLMLF4SqmARb66S7nt5782SiPRrluW3F7Q=h200
216.58.207.225200 OK 6.2 kB URL HTTP/2 lh3.googleusercontent.com/j4LYd1ZJNy8_0Aje_7HiG5wr_CDCU3ediJcVwPPfcQblH_cqC-sD4aBU3oNm386CSkZhYLMLF4SqmARb66S7nt5782SiPRrluW3F7Q=h200
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash b28ab430435756b661ecc62bc09ed705
746b1e37934c0aec41a436053fe4182ef44a45e1
a1126cc1899d77e609207f57ee9739c18ceed611603f99b541524b7d94302472
GET /j4LYd1ZJNy8_0Aje_7HiG5wr_CDCU3ediJcVwPPfcQblH_cqC-sD4aBU3oNm386CSkZhYLMLF4SqmARb66S7nt5782SiPRrluW3F7Q=h200 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 6171
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/CypyKknm6gD9Wcz3y9KaxwpEvEWXEC-tHnPbFO0n-obVc12mVOItr6upZAoYi5HkRugrHU7xTeiHVw0d2HuaYDQDZ4bqrV9JXEVdXg=h200
216.58.207.225200 OK 40 kB URL HTTP/2 lh3.googleusercontent.com/CypyKknm6gD9Wcz3y9KaxwpEvEWXEC-tHnPbFO0n-obVc12mVOItr6upZAoYi5HkRugrHU7xTeiHVw0d2HuaYDQDZ4bqrV9JXEVdXg=h200
IP 216.58.207.225:0
File type PNG image data, 300 x 200, 8-bit/color RGB, non-interlaced\012- data
Hash 87a854d863a4937e19f590460177179c
50388c1f38dc25ba1f09637c2a09c545139560d0
e549bf5558cac6622f0cb5aa5176ed86961762d3b07780ae5a0f808dea1253dd
GET /CypyKknm6gD9Wcz3y9KaxwpEvEWXEC-tHnPbFO0n-obVc12mVOItr6upZAoYi5HkRugrHU7xTeiHVw0d2HuaYDQDZ4bqrV9JXEVdXg=h200 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 39934
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/uMYGSBdEi-kLG7_z2dfOoGQYRFdU9_Dw0LSwzsG94MCGnuQawRw9rG-mMpBHY65we-ugoiD80NCiDzK8DI7TjfOWcHKJRqUrhbIQnxk=s250
216.58.207.225200 OK 120 kB URL HTTP/2 lh3.googleusercontent.com/uMYGSBdEi-kLG7_z2dfOoGQYRFdU9_Dw0LSwzsG94MCGnuQawRw9rG-mMpBHY65we-ugoiD80NCiDzK8DI7TjfOWcHKJRqUrhbIQnxk=s250
IP 216.58.207.225:0
File type PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced\012- data
Size 120 kB (119666 bytes)
Hash 2afa09a5c02bd2694a7f8f6b3754e9ce
58084063ee98910c2cac273322b06168fafca4a6
7d1d56c1f5fb5b8f5904bb7a6878bb14027956a5abed29b2d8425363874b083a
GET /uMYGSBdEi-kLG7_z2dfOoGQYRFdU9_Dw0LSwzsG94MCGnuQawRw9rG-mMpBHY65we-ugoiD80NCiDzK8DI7TjfOWcHKJRqUrhbIQnxk=s250 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 119666
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Wed, 23 Nov 2022 11:40:07 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/xla27hWmOcgl7USvsJMfOU9MPzJz3ltIJc1SKQAubteF_NTIKDaVJoGnYVrI6b6OADrl_esygWKIumCqYzEItR01lZ0CL1RJZhRMhig=s100
216.58.207.225200 OK 2.4 kB URL HTTP/2 lh3.googleusercontent.com/xla27hWmOcgl7USvsJMfOU9MPzJz3ltIJc1SKQAubteF_NTIKDaVJoGnYVrI6b6OADrl_esygWKIumCqYzEItR01lZ0CL1RJZhRMhig=s100
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 949082247fc8e74d1bf82465c96d3994
2ccdf9065c6b2172772e5ebc58770d08d846b9ea
6859a9717441e1122df3e1b79d56b16bf9b38c01caad5d8c0d39c8dd141de813
GET /xla27hWmOcgl7USvsJMfOU9MPzJz3ltIJc1SKQAubteF_NTIKDaVJoGnYVrI6b6OADrl_esygWKIumCqYzEItR01lZ0CL1RJZhRMhig=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2373
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/lHexKRMpw-aoSyB1WdFBff5yfANLReFxHzt1DOj_sg7mS14yARpuvYcUtsyyx-Nkpk6WTcUPFoG53VnLJezYi8hAs0OxNZwlw6Y-dmI=s100
216.58.207.225200 OK 4.1 kB URL HTTP/2 lh3.googleusercontent.com/lHexKRMpw-aoSyB1WdFBff5yfANLReFxHzt1DOj_sg7mS14yARpuvYcUtsyyx-Nkpk6WTcUPFoG53VnLJezYi8hAs0OxNZwlw6Y-dmI=s100
IP 216.58.207.225:0
File type PNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 98a561436ae37cf62368739c2b2d0ab3
cb633d6ef0c36f4963df9c34725174ffaf1b7f65
51f8e39428b85eb68838441f98ae3dc70a5afb7d07a9efa3518e5cfca40d5ad2
GET /lHexKRMpw-aoSyB1WdFBff5yfANLReFxHzt1DOj_sg7mS14yARpuvYcUtsyyx-Nkpk6WTcUPFoG53VnLJezYi8hAs0OxNZwlw6Y-dmI=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4130
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:16:09 GMT
expires: Tue, 22 Nov 2022 04:38:04 GMT
cache-control: public, max-age=86400, no-transform
age: 1601
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/YNAlfkgf4GU_RKNCwOH_nS0Y20pNzVVyI_w_Q2GyL8pNH0yU5_K3Fo9n1v4IfSyM4TbmEg3ALJ2CnxSnNWDeYMJ0DppvhRKlTiW2AiE=s100
216.58.207.225200 OK 3.6 kB URL HTTP/2 lh3.googleusercontent.com/YNAlfkgf4GU_RKNCwOH_nS0Y20pNzVVyI_w_Q2GyL8pNH0yU5_K3Fo9n1v4IfSyM4TbmEg3ALJ2CnxSnNWDeYMJ0DppvhRKlTiW2AiE=s100
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 2ea7fb6016d77311b4c46c6da13af7ed
86f4da864b1a18c251334b14981e2ae06bbbc93c
054ff14da4cd5fd19c4eb13b99a6b6666c4fd900388841fd135fd44379d7789c
GET /YNAlfkgf4GU_RKNCwOH_nS0Y20pNzVVyI_w_Q2GyL8pNH0yU5_K3Fo9n1v4IfSyM4TbmEg3ALJ2CnxSnNWDeYMJ0DppvhRKlTiW2AiE=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3649
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Wed, 23 Nov 2022 11:40:07 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/H8jOCJuQokNqGBpkBN5wk1oZwO7LM8bNnrHCaekV2nKjnCqw6UB5oaH8XyNeBDj6bA_n1mjejzhFQUP3O1NfjFLHr3FOaeHcTOOT=s100
216.58.207.225200 OK 2.6 kB URL HTTP/2 lh3.googleusercontent.com/H8jOCJuQokNqGBpkBN5wk1oZwO7LM8bNnrHCaekV2nKjnCqw6UB5oaH8XyNeBDj6bA_n1mjejzhFQUP3O1NfjFLHr3FOaeHcTOOT=s100
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 9ccecdf82adeeca9cd27ef63b01bf332
5672a46ec284d44fee9735c5f10a27b53cd8e2db
685a9f2b48196b57e007319518fda88d8daf0ef5bfd885f30c92f02e3fff7c18
GET /H8jOCJuQokNqGBpkBN5wk1oZwO7LM8bNnrHCaekV2nKjnCqw6UB5oaH8XyNeBDj6bA_n1mjejzhFQUP3O1NfjFLHr3FOaeHcTOOT=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2642
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:42:25 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 25
etag: "v1"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/Ju9CkWtV-1Okvf45wo8UctR-M9He2PjILP0oOvxE89AyiPPGtrR3gysu1Zgy0hjd2xKIgjJJtWIc0ybj4Vd7wv8t3pxDGHoJBzDB=s100
216.58.207.225200 OK 4.1 kB URL HTTP/2 lh3.googleusercontent.com/Ju9CkWtV-1Okvf45wo8UctR-M9He2PjILP0oOvxE89AyiPPGtrR3gysu1Zgy0hjd2xKIgjJJtWIc0ybj4Vd7wv8t3pxDGHoJBzDB=s100
IP 216.58.207.225:0
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e1a49a417f8b9d62a662f9114f85aa10
6743f2cbfcc78f6f4d5850054d131daa874e5854
896d3d489f353b7b4f3995e0ec155ac30e0a76f5d02e2a2d4cfdc728d2db982f
GET /Ju9CkWtV-1Okvf45wo8UctR-M9He2PjILP0oOvxE89AyiPPGtrR3gysu1Zgy0hjd2xKIgjJJtWIc0ybj4Vd7wv8t3pxDGHoJBzDB=s100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4149
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:16:09 GMT
expires: Fri, 02 Dec 2022 03:03:31 GMT
cache-control: public, max-age=86400, no-transform
age: 1601
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 64eb3a8f7cc11324c6f4c77e1c11f7ee
8ad889db020018b726362929a9477872a6808f0a
481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
opensea.io.bonsavonsoaps.com/assets/style/trading-cards.webp
67.212.189.210200 OK 180 kB URL HTTP/1.1 opensea.io.bonsavonsoaps.com/assets/style/trading-cards.webp
IP 67.212.189.210:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 180 kB (179596 bytes)
Hash a995601de89992960cb18f1ba89479d2
110346a4d12b8e47c3ad44385f85a916d15ee206
ecf70633eab5862ce8d0097d47f1c075be220c716a2a2e44930d2acca6c19811
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET /assets/style/trading-cards.webp HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:48 GMT
Server: Apache
Last-Modified: Sun, 17 Apr 2022 10:04:18 GMT
Accept-Ranges: bytes
Content-Length: 179596
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/webp
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
216.58.211.10200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 216.58.211.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sun, 04 Dec 2022 23:42:51 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 68570b7de13c7dfdf686da25ce10d668
61c1304152f11e6a83c383fff8d5e498c4385e6f
537302c07522f4bf1e766fbb1a8da346f59526715a5fcecd3f6aa4817b6b32ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 7c9e0bb25e8c28e8b10038806b0a7190
9fa6097aeb8eacde8ba7c9ab80a7a7d2405ae2bc
f4864000960be2f888ed7d2467f74130231fed6f56ad48ff15861f5769e95a58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 35c66ab0dafc0ed05c3f2e1b8829e3b7
e8fac7e103462c9cb3fab7ed1c1cfa07813ccd74
09270f5899964b5438d18e198fb9f50ed079fb0ee1c54a9cd668b96abdb8c228
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 23:42:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
216.58.211.10200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 216.58.211.10:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 77a520e84d409c6530a4d63c1497b0af
dedf0af0ff6b1c0a85fe3a3b9f64c4df7bb66af7
3779dc02f93be8159700403b5160c55a1e121d7e38b7ebc43f0103879d1ce7ac
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sun, 04 Dec 2022 23:42:51 GMT
server: ESF
cache-control: private
content-length: 30959
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.doubleclick.net/instream/ad_status.js
142.250.74.134200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP 142.250.74.134:0
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Dec 2022 23:36:04 GMT
expires: Sun, 04 Dec 2022 23:51:04 GMT
cache-control: public, max-age=900
age: 408
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/js/th/G-wi0KRrIjmTWIDOn44AFVMvZ_aKLO1c96DfwAE3d4M.js
216.58.207.228200 OK 14 kB URL HTTP/2 www.google.com/js/th/G-wi0KRrIjmTWIDOn44AFVMvZ_aKLO1c96DfwAE3d4M.js
IP 216.58.207.228:0
File type ASCII text, with very long lines (36143)
Hash a08dfd96c563f96f7d11b4858aecfa13
d9abee2c38b89d3dea85e76bb741bb8f4f993d49
fedde263fa3b4116029d93d0250f5eab845964d5fcf24e40ffbcd9bf292a0db4
GET /js/th/G-wi0KRrIjmTWIDOn44AFVMvZ_aKLO1c96DfwAE3d4M.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14211
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Dec 2022 19:18:12 GMT
expires: Sun, 03 Dec 2023 19:18:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
age: 102280
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/gfGuPd1CELo/maxresdefault.webp
216.58.207.214200 OK 24 kB URL HTTP/2 i.ytimg.com/vi_webp/gfGuPd1CELo/maxresdefault.webp
IP 216.58.207.214:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 94d015ce62cec9dc2c61420a977da42b
c657a723c06ab007f5dd99b12bcbc500f534bded
cc374be9c2cde17b898c0a88a66162c972adf073e335828e60555b699c76b58e
GET /vi_webp/gfGuPd1CELo/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 24130
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Dec 2022 22:21:50 GMT
expires: Mon, 05 Dec 2022 00:21:50 GMT
cache-control: public, max-age=7200
age: 4862
etag: "1633564202"
content-type: image/webp
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
216.58.211.2302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 216.58.211.2:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sun, 04 Dec 2022 23:42:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
openseauserdata.com/files/6f8e2979d428180222796ff4a33ab929.svg
104.18.2.144200 OK 0 B URL HTTP/2 openseauserdata.com/files/6f8e2979d428180222796ff4a33ab929.svg
IP 104.18.2.144:0
GET /files/6f8e2979d428180222796ff4a33ab929.svg HTTP/1.1
Host: openseauserdata.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:48 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdvfSAWPppDl1jrbYZvv_JuhcERKUYdEkg7-0Yr-yc3mfeTklho8_Bvc2r3LVK8WaUTaYCYmFA7yE9MZKL3aKy0BEKk3EGg0
cache-control: public, max-age=31536000
expires: Mon, 04 Dec 2023 23:42:48 GMT
last-modified: Fri, 21 May 2021 02:51:27 GMT
etag: W/"6f8e2979d428180222796ff4a33ab929"
x-goog-generation: 1621565487252748
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 684
x-goog-hash: crc32c=VbTFmw==, md5=b44pedQoGAIieW/0ozq5KQ==
x-goog-storage-class: STANDARD
access-control-allow-origin: *
access-control-expose-headers: Content-Type
cf-cache-status: HIT
age: 2010970
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7748668ebc53b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.opensea.io/gas-free/video-background.svg
104.18.17.184200 OK 0 B URL HTTP/2 static.opensea.io/gas-free/video-background.svg
IP 104.18.17.184:0
GET /gas-free/video-background.svg HTTP/1.1
Host: static.opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:49 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdsv4zeXqUuap7ZHtxBQ21htxixgBfJlRFfz6TZdvVkxamQCb5XxIxGi0GI401w11xqjWWSS-ncaCkPSUhPaR3Qg
x-goog-generation: 1630524348914119
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 20064
x-goog-hash: crc32c=8vorDw==, md5=9AtoCsBIAExuRya7g4YFUA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
last-modified: Wed, 01 Sep 2021 19:25:48 GMT
etag: W/"f40b680ac048004c6e4726bb83860550"
cache-control: public,max-age=3600
cf-cache-status: HIT
age: 26
set-cookie: __cf_bm=BXTRwjQKQ.bloInc20f6GqKngkNR8BOXfnl1aFtXEXk-1670197369-0-AcUy9ha4f1vNESOK5XgtHxM7zcDv5pLmc8TpTYrb7xZn6NFBE/2j8ylJvclkn/LFcy5xm/7xonjQdu0FKMoCfeE=; path=/; expires=Mon, 05-Dec-22 00:12:49 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77486695fdc3b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
opensea.io/blog/wp-content/uploads/2022/01/image-10.png
104.18.17.184404 Not Found 0 B URL HTTP/2 opensea.io/blog/wp-content/uploads/2022/01/image-10.png
IP 104.18.17.184:0
GET /blog/wp-content/uploads/2022/01/image-10.png HTTP/1.1
Host: opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 04 Dec 2022 23:42:49 GMT
content-type: text/html
cf-ray: 77486694dcf8b4f9-OSL
cache-control: private, max-age=0, must-revalidate, s-maxage=300
last-modified: Thu, 01 Dec 2022 05:15:17 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept-Encoding,x-wf-forwarded-proto
cf-cache-status: MISS
content-security-policy: frame-ancestors 'self'
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-cluster-name: eu-west-1-prod-edge-blue
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-served-by: cache-iad-kjyo7100108-IAD, cache-dub4329-DUB
x-timer: S1670197369.440918,VS0,VE150
set-cookie: __cf_bm=AJdG8RK.yKlKFSXEObnzlJrl762vkak1t4uAX.EZWEk-1670197369-0-AWF29k8Oai/gbixmEYkBhZTHjcKf492cKL4/4GKhYG4N0WywgR7PoglyS1/+aqI4vc0O/mCkyjgs9lZrnmKlkXo=; path=/; expires=Mon, 05-Dec-22 00:12:49 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&autoplay=0&controls=1&loop=1&modestbranding=1&rel=0
142.250.74.142200 OK 0 B URL HTTP/2 www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&autoplay=0&controls=1&loop=1&modestbranding=1&rel=0
IP 142.250.74.142:0
GET /embed/gfGuPd1CELo?playlist=gfGuPd1CELo&autoplay=0&controls=1&loop=1&modestbranding=1&rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 04 Dec 2022 23:42:49 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=FcssMW65BOA; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=1JfDujeganM; Domain=.youtube.com; Expires=Fri, 02-Jun-2023 23:42:49 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+266; expires=Tue, 03-Dec-2024 23:42:49 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
opensea.io.bonsavonsoaps.com/
67.212.189.210200 OK 0 B URL HTTP/1.1 opensea.io.bonsavonsoaps.com/
IP 67.212.189.210:0
Analyzer Verdict Alert openphish Crypto/Wallet
fortinet Phishing
GET / HTTP/1.1
Host: opensea.io.bonsavonsoaps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 23:42:46 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 06:41:20 GMT
Accept-Ranges: bytes
Content-Length: 378540
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
fonts.googleapis.com/css?family=Material+Icons|Material+Icons+Outlined|Material+Icons+Two+Tone|Material+Icons+Round|Material+Icons+Sharp&display=block
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Material+Icons|Material+Icons+Outlined|Material+Icons+Two+Tone|Material+Icons+Round|Material+Icons+Sharp&display=block
IP 142.250.74.74:0
GET /css?family=Material+Icons|Material+Icons+Outlined|Material+Icons+Two+Tone|Material+Icons+Round|Material+Icons+Sharp&display=block HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 23:42:47 GMT
date: Sun, 04 Dec 2022 23:42:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.discordapp.com/attachments/1049106705604157500/1049106873976107088/Tweaks.rar
162.159.134.233200 OK 0 B URL HTTP/2 cdn.discordapp.com/attachments/1049106705604157500/1049106873976107088/Tweaks.rar
IP 162.159.134.233:0
GET /attachments/1049106705604157500/1049106873976107088/Tweaks.rar HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __cf_bm=DUarEppg8ehpPLdOZZcAvQxa74DDNAczv7O7uIAZv_Q-1670197280-0-AWjWs41POab8Xb2sKShyQLhi4IWtT6AInFR3T90ANvdvi4xctjDJExn81UgR0v6ag8Aa25uTA66h9IBhLTga8C8=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:48 GMT
content-type: application/rar
content-length: 91895311
cf-ray: 7748668eddd8b51e-OSL
accept-ranges: bytes
age: 111
cache-control: public, max-age=31536000
content-disposition: attachment;%20filename="Tweaks.rar"
etag: "35dad5521a0f148e31e6f47c1a5319f1"
expires: Mon, 04 Dec 2023 23:42:48 GMT
last-modified: Sun, 04 Dec 2022 23:36:10 GMT
vary: Accept-Encoding
cf-cache-status: HIT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1670196970286127
x-goog-hash: crc32c=9zR5kw==, md5=NdrVUhoPFI4x5vR8GlMZ8Q==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 91895311
x-guploader-uploadid: ADPycduMM0xU4vjkhX7hGLcdwLhMdGWPppoK3GMVwLqrYRlo3Ge6oJ-m66BWUpSwb0SeSNrIg46Z12xdqBXnMnzjHyNU7Q
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BDTl7dd3%2BskeppevIbZWhlGKtzTa6dRz21D3un7%2F7d1vkVw%2BCEuR7VPXn8OK9vpFD55MJ%2FchvwHamg%2FI6ymUEysZAn6NzeQS3QG8cz2beegg%2Bz4b7ShIfgTLZnYoIdrT4qStPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
unpkg.com/evm-chains@0.2.0/dist/umd/index.min.js
104.16.123.175200 OK 0 B URL HTTP/2 unpkg.com/evm-chains@0.2.0/dist/umd/index.min.js
IP 104.16.123.175:0
GET /evm-chains@0.2.0/dist/umd/index.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 23:42:49 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Mon, 02 Nov 2020 20:31:28 GMT
etag: W/"5881-yk4n8EqlvpHDLglCWD85vKUneh8"
via: 1.1 fly.io
fly-request-id: 01G3YDPBXRA18B04P0CD7HWFWJ-fra
cf-cache-status: HIT
age: 16687769
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 774866950fe3b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
opensea.io/blog/wp-content/uploads/2022/02/image-13.png
104.18.17.184404 Not Found 0 B URL HTTP/2 opensea.io/blog/wp-content/uploads/2022/02/image-13.png
IP 104.18.17.184:0
GET /blog/wp-content/uploads/2022/02/image-13.png HTTP/1.1
Host: opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Sun, 04 Dec 2022 23:42:49 GMT
content-type: text/html
cf-ray: 77486694dcf4b4f9-OSL
cache-control: private, max-age=0, must-revalidate, s-maxage=300
last-modified: Thu, 01 Dec 2022 05:15:17 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept-Encoding,x-wf-forwarded-proto
cf-cache-status: MISS
content-security-policy: frame-ancestors 'self'
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-cluster-name: eu-west-1-prod-edge-blue
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-served-by: cache-iad-kiad7000150-IAD, cache-dub4351-DUB
x-timer: S1670197369.457077,VS0,VE137
set-cookie: __cf_bm=bRAiQakBkez89_BxfzFHWOa6s7uEhb6GVDRwexR0BYQ-1670197369-0-AfqEDKA1bet3kWQqRZVyUeIXh4xM5okN0g7NK1cnr0OtH76BEUQLCQjnleEeOLlDhl+7DOFTA5/YHPDxFftkDdQ=; path=/; expires=Mon, 05-Dec-22 00:12:49 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
142.250.74.74200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP 142.250.74.74:0
GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://opensea.io.bonsavonsoaps.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 23:42:47 GMT
date: Sun, 04 Dec 2022 23:42:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/dab28f34/player_ias.vflset/en_US/base.js
142.250.74.142200 OK 0 B URL HTTP/2 www.youtube.com/s/player/dab28f34/player_ias.vflset/en_US/base.js
IP 142.250.74.142:0
GET /s/player/dab28f34/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&autoplay=0&controls=1&loop=1&modestbranding=1&rel=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 593839
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:09:00 GMT
expires: Fri, 01 Dec 2023 16:09:00 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Dec 2022 01:20:18 GMT
content-type: text/javascript
age: 286430
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2