| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0be6cec5607bb65c06dbadd33456aec1 9d13129e936eb5fc82e403931884cdc8c6e6ab92 cb028034340b709ece65e45e8fc1a26a64dd85926beaa542f308d3f1d5ee2c84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB028034340B709ECE65E45E8FC1A26A64DD85926BEAA542F308D3F1D5EE2C84"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5964
Expires: Tue, 24 Jan 2023 21:48:24 GMT
Date: Tue, 24 Jan 2023 20:09:00 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf5e46725831d8d722872bf68d752f4c5 cf37793a1b73e3f84fe6c37fb27382c83b49dbc0 0582b6180687dd95c7fd728f1b9db4495b807151e309b608ad203d69708f9da6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0582B6180687DD95C7FD728F1B9DB4495B807151E309B608AD203D69708F9DA6"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2373
Expires: Tue, 24 Jan 2023 20:48:33 GMT
Date: Tue, 24 Jan 2023 20:09:00 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 24 Jan 2023 19:42:45 GMT
content-type: application/json
age: 1576
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6cd4f1da1215c7473500807c185f2449 b14db0c67cf1f5faf85648ed8f94baf2dd03808b 9750518efd869da5ff74ba65a196445bd4340c909157cc1a420f62c1d07224a0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9750518EFD869DA5FF74BA65A196445BD4340C909157CC1A420F62C1D07224A0"
Last-Modified: Mon, 23 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5710
Expires: Tue, 24 Jan 2023 21:44:11 GMT
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 0mRGCXeXkzRbc0bS1M+Swnh3viIRnl/+2oXRNisIFReWeaDJi7UW8RQ51JbNg3WkxePxVAnpGlk=
x-amz-request-id: JHZ9FQ4Z3CJ1GNXS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 24 Jan 2023 19:19:23 GMT
age: 2978
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| signine-ea.com/login.php?ip=2a00:f41:907b:d778:25ae:46b9:850f:e230 |  92.222.139.190 | 200 OK | 19 kB |
URL HTTP/1.1signine-ea.com/login.php?ip=2a00:f41:907b:d778:25ae:46b9:850f:e230 IP92.222.139.190:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (808) Hash052a3771f78935a6f4efa7c995667c6d c8208132c013c8ee71ff1699b9ca4da85e800553 44e2f0fd1d4a1883d9e65793a853860c84e6ea1aafb29a8fc1344a848f4f307a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /login.php?ip=2a00:f41:907b:d778:25ae:46b9:850f:e230 HTTP/1.1
Host: signine-ea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Tue, 24 Jan 2023 20:09:01 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
server: Apache
x-powered-by: PHP/7.4
accept-ranges: none
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:181F_5CDE8BBE:0050_63D03ADC_5DA4:94FC
x-iplb-instance: 32677
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 24 Jan 2023 20:09:01 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| signine-ea.com/style/quantum.v_1659064772-min.css | 92.222.139.190 | 200 OK | 10 kB |
URL HTTP/1.1signine-ea.com/style/quantum.v_1659064772-min.css IP92.222.139.190:0
File typeASCII text, with very long lines (61615), with no line terminators Hasheb2207a99829321dabe409147cc5367c 88649b6a4cd9b9c10a105d1085c3155e1d3cd507 629122a2d638e79796fd88c0178d0d034cdcfaacab8f78e47f600ba08443e2b1
GET /style/quantum.v_1659064772-min.css HTTP/1.1
Host: signine-ea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signine-ea.com/login.php?ip=2a00:f41:907b:d778:25ae:46b9:850f:e230
HTTP/1.1 200 OK
date: Tue, 24 Jan 2023 20:09:01 GMT
content-type: text/css
content-length: 10351
server: Apache
last-modified: Tue, 24 Jan 2023 19:24:12 GMT
accept-ranges: none
cache-control: max-age=900
expires: Tue, 24 Jan 2023 20:24:01 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:4F58_5CDE8BBE:0050_63D03ADC_18898:27A39
x-iplb-instance: 32678
|
|
| client-api.arkoselabs.com/v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/api.js |  104.18.42.229 | 301 Moved Permanently | 0 B |
URL HTTP/1.1client-api.arkoselabs.com/v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/api.js IP104.18.42.229:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/api.js HTTP/1.1
Host: client-api.arkoselabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signine-ea.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 24 Jan 2023 20:09:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 24 Jan 2023 21:09:01 GMT
Location: https://client-api.arkoselabs.com/v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/api.js
Set-Cookie: __cf_bm=Y_8.9aM_ArNcvc2yz_hRxzu25pjvqHNvzMoPzV3hMe4-1674590941-0-ARttjj2mm188t1OqfZRqevNJrWpBwz/HeDdTu3uZhce2uQrJoaIgSw0fz2rRFlKAeaSGcnavWPOXqaKq95TWXzY=; path=/; expires=Tue, 24-Jan-23 20:39:01 GMT; domain=.arkoselabs.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: cloudflare
CF-RAY: 78eb67871a4eb503-OSL
alt-svc: h2=":443"; ma=60
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash831949834fce41f3fa8f544c99730c25 e98b70a86255cacf4cca405c7fd4bb05bf427bad 94cb9cfe8593a576362e5707670dfc3a46bda5cdc5d9b15d69b8b32b0c99cbe9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/ui/core/js/jquery-1.8.3.min.v_1647597522.js | 23.36.76.203 | 200 OK | 34 kB |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/ui/core/js/jquery-1.8.3.min.v_1647597522.js IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (65483) Hash0602d7452d578dd451366d8da927dbee 11bd23667efe969075595fcd5fc8f19712a8a07f 9b6af5e420fa08bb32afec97448f69491beb629eba561f13860852d9ed23691a
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/ui/core/js/jquery-1.8.3.min.v_1647597522.js HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:30:13 GMT
ETag: "16dc4-5e5c7637193eb"
Accept-Ranges: bytes
Content-Type: application/javascript
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33467
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/ui/core/js/jquery.origin-ux-elements-new.v_1647597522-min.js | 23.36.76.203 | 200 OK | 5.4 kB |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/ui/core/js/jquery.origin-ux-elements-new.v_1647597522-min.js IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (22714) Hash770288ec3b114811e99f22e5c1c6e1b3 38bfeba0ef16f1f62dc2bf427fa821e265496fa6 a23348d6edfaaf0a5b751f7cfb28150578629e15d83041508cd9446bd105b0e2
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/ui/core/js/jquery.origin-ux-elements-new.v_1647597522-min.js HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:30:13 GMT
ETag: "6159-5e5c763719bbb"
Accept-Ranges: bytes
Content-Type: application/javascript
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5365
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/js/jquery.juno-common.v_1656038460-min.js | 23.36.76.203 | 200 OK | 3.4 kB |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/js/jquery.juno-common.v_1656038460-min.js IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (9984), with no line terminators Hashc1b929d5fef342177cf73eff05d4c0fa 98ef0ba93f46d8c29077bc399fb9d6e3b99ac3d2 ee7d5b4e899d1e85440b142577498d066cd0eec13537c66fc357454cb38bceaa
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/js/jquery.juno-common.v_1656038460-min.js HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:25:10 GMT
ETag: "2700-5e5c7516dbacb"
Accept-Ranges: bytes
Content-Type: application/javascript
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3391
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/js/sha.v_1647597522-min.js | 23.36.76.203 | 200 OK | 4.4 kB |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/js/sha.v_1647597522-min.js IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (12739), with no line terminators Hashbebe2699278e23c57ec2135bc338b188 9c018f5da0ebcfe6256ddfc215db0023b5e0744c 291e900aa43e538106f712026dfaf5a57fd2f71f0b69ca64d1ed132483b9e78c
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/js/sha.v_1647597522-min.js HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:30:15 GMT
ETag: "31c3-5e5c76397446f"
Accept-Ranges: bytes
Content-Type: application/javascript
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4399
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/pin/js/jquery.pin.v_1647597522-min.js | 23.36.76.203 | 200 OK | 2.0 kB |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/pin/js/jquery.pin.v_1647597522-min.js IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (6551), with no line terminators Hashe47c07ea73d8443b8a479e27119b11e4 3588530a68579241d5d684f53bbbd990f882c90c 768c32f4966a06a32df5680866799c2472e7767ddabeffe1417d25e3a3d8e1a4
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/statics/pin/js/jquery.pin.v_1647597522-min.js HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:30:17 GMT
ETag: "1997-5e5c763acc462"
Accept-Ranges: bytes
Content-Type: application/javascript
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1963
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/otk.v_1647597522-min.css | 23.36.76.203 | 200 OK | 8.7 kB |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/otk.v_1647597522-min.css IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (53046) Hash9aa93fe6ca9879a05f056c97e651abf1 2a21721ff62c7c4290e646dc29e33e79b22d0e5b e075b12e020fea767e7514d6a8bdf2586a21a5644cf612852547c4f889bd2df0
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/otk.v_1647597522-min.css HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:30:15 GMT
ETag: "cfa9-5e5c76392914d"
Accept-Ranges: bytes
Content-Type: text/css
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8678
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/js/jquery.juno-login.v_1659064772-min.js | 23.36.76.203 | 200 OK | 7.5 kB |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/js/jquery.juno-login.v_1659064772-min.js IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (34366), with no line terminators Hash861b9791a589a4fc42f4c4f686cff28e 80727e01d7f46692ae61252c1f73fc16bd84ded5 53fbb0ec82d1a3cb5484d71222e1008ae314e9de2da5de71f84635aed061ae25
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/js/jquery.juno-login.v_1659064772-min.js HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Wed, 28 Sep 2022 06:53:57 GMT
ETag: "863e-5e9b739934739"
Accept-Ranges: bytes
Content-Type: application/javascript
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7497
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/ui/core/js/jquery.origin-layout.v_1647597522-min.js | 23.36.76.203 | 200 OK | 390 B |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/ui/core/js/jquery.origin-layout.v_1647597522-min.js IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (757), with no line terminators Hashc77b7954f6a9d4f56feb2571945848b7 185c819e4b026420e735e345a01e2f4d4daf3e8c 182e3d66cbb4fc9fbe349df40f1c827e3b56f5c739fee9f51afbe7f961ee9692
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/ui/core/js/jquery.origin-layout.v_1647597522-min.js HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:25:08 GMT
ETag: "2f5-5e5c7514850b3"
Accept-Ranges: bytes
Content-Type: application/javascript
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 390
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/juno-common.v_1648524208-min.css | 23.36.76.203 | 200 OK | 2.4 kB |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/juno-common.v_1648524208-min.css IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (8752), with no line terminators Hashe72c8d982a7f08d0fa833d1e00144414 56e7598c5c3e4e24be74590e4a95f29b65a3a7b5 656bb559608c28f54da64cd185c7b7bfa3542ed964c633c58e511751418e18dc
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/juno-common.v_1648524208-min.css HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:25:10 GMT
ETag: "2230-5e5c75166bdbc"
Accept-Ranges: bytes
Content-Type: text/css
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2375
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/juno-login.v_1659064772-min.css | 23.36.76.203 | 200 OK | 2.3 kB |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/juno-login.v_1659064772-min.css IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (8591), with no line terminators Hash041dab6c32a0e4b69961295761b293d8 feedaa583954349a856d0c26eafcb53537be2766 1738d5c8e69cdde9ed2d7b00f76b6ca47a74e7194204a4e4acbfaca08fddc8e3
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/juno-login.v_1659064772-min.css HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:30:15 GMT
ETag: "218f-5e5c76393dd55"
Accept-Ranges: bytes
Content-Type: text/css
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2258
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| translate.googleapis.com/translate_static/css/translateelement.css | 216.58.211.10 | 200 OK | 3.6 kB |
URL HTTP/2translate.googleapis.com/translate_static/css/translateelement.css IP216.58.211.10:0
File typeASCII text, with very long lines (22967) Hashf7bf2121608909b56672e6398ac2335c 864ef3bac46b08ab6609fad23f00d5f09815647d b9d3a8600d9b6edf9c71b793c42782282ecfb01e2026e0128608b949e91e152c
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3632
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 19:39:28 GMT
expires: Tue, 24 Jan 2023 20:39:28 GMT
cache-control: public, max-age=3600
age: 1773
last-modified: Mon, 09 Jan 2023 20:58:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/juno-login_fr.v_1647597522-min.css | 23.36.76.203 | 200 OK | 58 B |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/juno-login_fr.v_1647597522-min.css IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeASCII text, with no line terminators Hashc5156925756bbeaa979d1da7fee765b2 c3afeaf9b4b2cb885a7a976eff4798b7a39ab5b0 f7825abef5e8e238caf2450c51c518cf231c28aa15fc974fed305fb33e114a9b
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/css/juno-login_fr.v_1647597522-min.css HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Wed, 28 Sep 2022 06:53:57 GMT
ETag: "26-5e9b7398fe7f2"
Accept-Ranges: bytes
Content-Type: text/css
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 58
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/img/EALogo-New.svg | 23.36.76.203 | 200 OK | 359 B |
URL HTTP/1.1eaassets-a.akamaihd.net/resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/img/EALogo-New.svg IP23.36.76.203:0 ASN#20940 Akamai International B.V.
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (499) Hasha7c6a6b9c91ee0b371fa9222f97fa44b e548422ec7895d3ad334287af18f5f88d55b0703 4c5b2351cf8f0151725845447c42c86389bec86481d1e8435ce25147392dd2bc
GET /resource_signin_ea_com/551.0.220805.388.c847323/p/statics/juno/img/EALogo-New.svg HTTP/1.1
Host: eaassets-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Apache
Last-Modified: Tue, 09 Aug 2022 04:30:15 GMT
ETag: "25a-5e5c7639bb529"
Accept-Ranges: bytes
Content-Type: image/svg+xml
x-envoy-upstream-service-time: 0
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 359
Date: Tue, 24 Jan 2023 20:09:01 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://signin.ea.com
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash831949834fce41f3fa8f544c99730c25 e98b70a86255cacf4cca405c7fd4bb05bf427bad 94cb9cfe8593a576362e5707670dfc3a46bda5cdc5d9b15d69b8b32b0c99cbe9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| signine-ea.com/style/fonts/electronic-arts-text-bold.woff2 | 92.222.139.190 | 404 Not Found | 196 B |
URL HTTP/1.1signine-ea.com/style/fonts/electronic-arts-text-bold.woff2 IP92.222.139.190:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /style/fonts/electronic-arts-text-bold.woff2 HTTP/1.1
Host: signine-ea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://signine-ea.com/style/quantum.v_1659064772-min.css
HTTP/1.1 404 Not Found
date: Tue, 24 Jan 2023 20:09:01 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
server: Apache
x-iplb-request-id: 5B5A2A9A:181F_5CDE8BBE:0050_63D03ADD_5DBB:94FC
x-iplb-instance: 32677
|
|
| client-api.arkoselabs.com/v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/api.js | 104.18.42.229 | 200 OK | 44 kB |
URL HTTP/2client-api.arkoselabs.com/v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/api.js IP104.18.42.229:0
File typeUnicode text, UTF-8 text, with very long lines (34083), with NEL line terminators Hash4117c157520f6fc93127a31ffdff4954 a5b6026d6fa8a99f4bc4f28536e5837642be7596 818e0db127d403b1cde36230ec4966b26630f3cec7d45cebc0969c981c3d4fad
GET /v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/api.js HTTP/1.1
Host: client-api.arkoselabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://signine-ea.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 24 Jan 2023 20:09:01 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 78eb67883c42b517-OSL
access-control-allow-origin: *
age: 167085
cache-control: public, max-age=0, s-maxage=31536000
etag: W/"70ccb685a08db7942125a7699899fa99"
last-modified: Fri, 23 Sep 2022 20:59:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains
vary: Accept-Encoding
cf-cache-status: HIT
cache-tag: 0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D
capi-worker-type: dedicated
content-security-policy: default-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; connect-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; font-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; frame-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; img-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn data:; script-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; style-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn;
permissions-policy: accelerometer=*, autoplay=*, camera=*, display-capture=*, document-domain=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, midi=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=*
x-amz-id-2: 2pHlQJ2E7IJgRao86cDOClR4tuukQ7Jmp8vQtXl7kwO34mL8m4tbhNDDsprIj/Md0+8gUgRknF4=
x-amz-request-id: BFP0ANCGPBT1H0ST
x-amz-version-id: GdUSduQXbkULL6M.sAVogT_0bUzYir51
set-cookie: __cf_bm=qSXWNaXmDf5TsFAZ.z7NXnugjamuVnIPAHhq3noTGQc-1674590941-0-AdkJFBVqTVBa+X1X5KhUIYNRRshjFlE/vclSH81B3QVixIsr9KXeFEL2aAZEWW6VGRvZSzb+DEu+X4C0D9zbGpk=; path=/; expires=Tue, 24-Jan-23 20:39:01 GMT; domain=.arkoselabs.com; HttpOnly; Secure; SameSite=None
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|
| signine-ea.com/icone.png | 92.222.139.190 | 200 OK | 771 B |
IP92.222.139.190:0
File typePNG image data, 18 x 16, 8-bit/color RGBA, non-interlaced\012- data Hash48875f9910af837e64a210aa187c90c8 05378bb639a6b95c60bc50d00ab367329d9e9321 e11ba37069dce346dcbd05543c06d7696f15459fc537813cdd37d034cfb9b490
GET /icone.png HTTP/1.1
Host: signine-ea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://signine-ea.com/login.php?ip=2a00:f41:907b:d778:25ae:46b9:850f:e230
HTTP/1.1 200 OK
date: Tue, 24 Jan 2023 20:09:01 GMT
content-type: image/png
content-length: 771
server: Apache
last-modified: Tue, 24 Jan 2023 19:24:02 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Tue, 24 Jan 2023 20:24:01 GMT
x-iplb-request-id: 5B5A2A9A:4F58_5CDE8BBE:0050_63D03ADD_188ED:27A39
x-iplb-instance: 32678
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash3e7fdf1ab4be9ee80518d0400683f0d3 dd2ec6511ba05e7fb89d32a1ad407db5eaa1520b eb789178a0b528aad87a5bf0d05aecd45e7623ebaf198820f9310887757e1d5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash78ed7b7d814d987601b30851546309b5 12a653dabfd738fef99fad2295eec55e4651bc7c a55164c954f0255d6d360ac0fac8b4598f8e0e01ec646105eed2e9b0abf5e2bd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gstatic.com/images/branding/product/1x/translate_24dp.png | 142.250.74.3 | 200 OK | 846 B |
URL HTTP/2www.gstatic.com/images/branding/product/1x/translate_24dp.png IP142.250.74.3:0
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hashe9cd262114358f26b7608b56905185dc 6dbde0a96deaab2b529723ce26c62043cf9180ab 5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 12:53:47 GMT
expires: Tue, 23 Jan 2024 12:53:47 GMT
cache-control: public, max-age=31536000
age: 112514
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashdd676ffc078f2b075fdc6d7606dc55b3 f57644c4be9f9521b2c45df5ee6eee87489819e1 b0ecd59482b2bc369555e2b94287c0de6eb874c9f52c15d2ecda112b8f3d2dba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash78ed7b7d814d987601b30851546309b5 12a653dabfd738fef99fad2295eec55e4651bc7c a55164c954f0255d6d360ac0fac8b4598f8e0e01ec646105eed2e9b0abf5e2bd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/analytics.js | 142.250.74.110 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.110:0
File typeASCII text, with very long lines (1490) Hashca7fbbfd120e3e329633044190bbf134 d17f81e03dd827554ddd207ea081fb46b3415445 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 24 Jan 2023 19:41:08 GMT
expires: Tue, 24 Jan 2023 21:41:08 GMT
cache-control: public, max-age=7200
age: 1673
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 24 Jan 2023 19:48:59 GMT
age: 1202
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/images/branding/product/2x/translate_24dp.png | 142.250.74.3 | 200 OK | 1.8 kB |
URL HTTP/2www.gstatic.com/images/branding/product/2x/translate_24dp.png IP142.250.74.3:0
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data Hashc69c796362406f9e11c7f4bf5bb628da e489ce95ab56208090868882113d7416abf46775 4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82
GET /images/branding/product/2x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://translate.googleapis.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1842
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 16:07:41 GMT
expires: Tue, 23 Jan 2024 16:07:41 GMT
cache-control: public, max-age=31536000
age: 100880
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| signine-ea.com/style/fonts/electronic-arts-display-bold.woff2 | 92.222.139.190 | 404 Not Found | 196 B |
URL HTTP/1.1signine-ea.com/style/fonts/electronic-arts-display-bold.woff2 IP92.222.139.190:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /style/fonts/electronic-arts-display-bold.woff2 HTTP/1.1
Host: signine-ea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://signine-ea.com/style/quantum.v_1659064772-min.css
HTTP/1.1 404 Not Found
date: Tue, 24 Jan 2023 20:09:01 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
server: Apache
x-iplb-request-id: 5B5A2A9A:181F_5CDE8BBE:0050_63D03ADD_5DF4:94FC
x-iplb-instance: 32677
|
|
| signine-ea.com/style/fonts/electronic-arts-display-regular.woff2 | 92.222.139.190 | 404 Not Found | 196 B |
URL HTTP/1.1signine-ea.com/style/fonts/electronic-arts-display-regular.woff2 IP92.222.139.190:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash62962daa1b19bbcc2db10b7bfd531ea6 d64bae91091eda6a7532ebec06aa70893b79e1f8 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /style/fonts/electronic-arts-display-regular.woff2 HTTP/1.1
Host: signine-ea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://signine-ea.com/style/quantum.v_1659064772-min.css
HTTP/1.1 404 Not Found
date: Tue, 24 Jan 2023 20:09:01 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
server: Apache
x-iplb-request-id: 5B5A2A9A:4F58_5CDE8BBE:0050_63D03ADD_188F1:27A39
x-iplb-instance: 32678
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashdd676ffc078f2b075fdc6d7606dc55b3 f57644c4be9f9521b2c45df5ee6eee87489819e1 b0ecd59482b2bc369555e2b94287c0de6eb874c9f52c15d2ecda112b8f3d2dba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashf136e9bdce8b778967f31c138c730bf6 032c6b734540fe786b259ba0c700622b88d768a2 ec9e91a632a1ee89dfd038cbe9700ed8c01e146846433284e81fad0ff2a75192
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash058010ea5c9f4dcbe5f12d23a4556b2f dd6573339a1917ad2ade5c5d3d1271f2ead86910 0900ff2f8de2877d8c2d97e7167d33db588a240924680fdeb183729f6c56be99
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4886
Cache-Control: max-age=106976
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Etag: "63cf26a7-1d7"
Expires: Thu, 26 Jan 2023 01:51:57 GMT
Last-Modified: Tue, 24 Jan 2023 00:30:31 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hasha0016981f79a7a1df58a5c1fbefb7cd5 d3a37f6798941d94312f5d1eb0aa31fe55228cd3 209ecb3765937d0eee4bc85fd639e407f1e68772c9e5bb3dbbab65658d6ebb0c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3838
Cache-Control: max-age=136903
Content-Type: application/ocsp-response
Date: Tue, 24 Jan 2023 20:09:01 GMT
Etag: "63cf9fa6-1d7"
Expires: Thu, 26 Jan 2023 10:10:44 GMT
Last-Modified: Tue, 24 Jan 2023 09:06:46 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| pin-river.data.ea.com/pinEvents | 54.205.24.61 | 200 OK | 0 B |
URL HTTP/1.1pin-river.data.ea.com/pinEvents IP54.205.24.61:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /pinEvents HTTP/1.1
Host: pin-river.data.ea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-ea-env,x-ea-game-id,x-ea-game-id-type,x-ea-taxv
Referer: http://signine-ea.com/
Origin: http://signine-ea.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: origin, content-type, content-encoding, accept, authorization, x-requested-with, x-ea-app-type, x-ea-game-id, x-ea-game-id-type, application-id, x-ea-taxv, x-ea-uid, x-ea-env
Access-Control-Allow-Methods: GET,POST,HEAD,OPTIONS
Access-Control-Allow-Origin: http://signine-ea.com
Access-Control-Max-Age: 1800
Allow: GET, POST, HEAD, OPTIONS
Content-Length: 0
Connection: keep-alive
|
|
| pin-river.data.ea.com/pinEvents | 54.205.24.61 | 200 OK | 15 B |
URL HTTP/1.1pin-river.data.ea.com/pinEvents IP54.205.24.61:0
File typeJSON data\012- , ASCII text, with no line terminators Hash0f0479874bf6f4a7281099b15df27c27 55a490e280d48996e564d00492437eb17faadd28 a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST /pinEvents HTTP/1.1
Host: pin-river.data.ea.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
x-ea-game-id-type: client
x-ea-game-id: server_nucleus
x-ea-taxv: 2.0
x-ea-env: prod
Content-Length: 1096
Origin: http://signine-ea.com
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://signine-ea.com
Access-Control-Expose-Headers:
Content-Type: application/json
Content-Length: 15
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 50.112.247.170 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP50.112.247.170:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: m/1e105ntntdgwyZNP2wRQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: R34Sbn21tWXChALw2lRy4+9RVCI=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd5528af26e629a9bfbf0c421146b921f 1e4f99245d551384bedfe9b59b5f9905127d87bf 989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15202
Expires: Wed, 25 Jan 2023 00:22:25 GMT
Date: Tue, 24 Jan 2023 20:09:03 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd5528af26e629a9bfbf0c421146b921f 1e4f99245d551384bedfe9b59b5f9905127d87bf 989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15202
Expires: Wed, 25 Jan 2023 00:22:25 GMT
Date: Tue, 24 Jan 2023 20:09:03 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd5528af26e629a9bfbf0c421146b921f 1e4f99245d551384bedfe9b59b5f9905127d87bf 989830d93a90c30051b948a26ce403fb4370587ed3407d8d77ad0ad9cc28eb7a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "989830D93A90C30051B948A26CE403FB4370587ED3407D8D77AD0AD9CC28EB7A"
Last-Modified: Sun, 22 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15202
Expires: Wed, 25 Jan 2023 00:22:25 GMT
Date: Tue, 24 Jan 2023 20:09:03 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg | 34.120.237.76 | 200 OK | 3.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash805711aaab303931f8966bbf73aeda52 2bd02a45c8b407e36a41a482b121ea3e14f7c722 66268668c1a970268d75beb1b57f66a759bedac76958a3359cb23104de40fbeb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F602ef184-7161-4092-91b7-61e14eef28a5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3411
x-amzn-requestid: 62afd364-e94f-45ff-ba6c-9b589fc53e5f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e-EyCEzrIAMFb8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c8b4d9-203f51040f82f12d535446c4;Sampled=0
x-amzn-remapped-date: Thu, 19 Jan 2023 03:11:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3Ke5d5WguVrF_Phnhu9ojzN5Md0VkYnFfxKNoh5HHrmHwPI90IAIdA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 04:49:41 GMT
age: 55162
etag: "2bd02a45c8b407e36a41a482b121ea3e14f7c722"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67794d4b-c63e-47af-b530-92b195f8e718.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67794d4b-c63e-47af-b530-92b195f8e718.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash16d9c0855b43a6c2351cb450187948e2 7208e2e4beb739ae9aded4a207d48cb3572fad5f 92b0423b09aa653ec7326d0aa05dbe137ba452ef21f118c7eb6499a8ccecc8fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67794d4b-c63e-47af-b530-92b195f8e718.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12907
x-amzn-requestid: c9f9a619-f0e1-4bc4-af2a-796b16aa1250
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNzFqF-lIAMFXIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefef0-625e4bab03baa979605f13f8;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: riKsmnzvLP5xapNSozaa5W4P6--p4xU5bkS4Ir7jln-P_o_QhMBBxQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 22:04:30 GMT
age: 79473
etag: "7208e2e4beb739ae9aded4a207d48cb3572fad5f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ad2eb2b-9cfe-4f71-89ea-99ac9e3f783f.jpeg | 34.120.237.76 | 200 OK | 4.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ad2eb2b-9cfe-4f71-89ea-99ac9e3f783f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash462fc1946b8dbae49aa3cf22291fc707 400c6dc7973b36a5d3e43cc3b439da49ab6c76b5 88e13373963e8427baa4cdf19909eb297aafe035ec0376cbed6d4f4fa45dbd32
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ad2eb2b-9cfe-4f71-89ea-99ac9e3f783f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4381
x-amzn-requestid: 528fddee-8bac-466a-8f82-3d5bffab7ca4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNzFpFghoAMFSPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefef0-63f97c8409b808910ce8f50a;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0eb65TKWgBaHaPETcwgUpjEHT6yMMT4N0vcRh3C66WYct0PNL-AcpQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 21:56:47 GMT
etag: "400c6dc7973b36a5d3e43cc3b439da49ab6c76b5"
content-type: image/jpeg
age: 79936
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash91b2e12a39dc4f63b9d52e8800cce1f2 42d5b4b4a091778d98c351f0002d8656449d0243 d4dbc79e3383e83f861ccf8cde3e78ba427a66cd3fa99c17e23ec935867de4ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8308
x-amzn-requestid: 1988d3b3-5e1a-41fd-83f5-092eddb9185f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNys5GDKoAMFdbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe52-2349fde60b7db8a34c996717;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WZE7yDAT_YRseW7m410pGAwkWAwJ2HmuTlg2IbSvCbN20SJbmQ4Odg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 22:06:36 GMT
age: 79347
etag: "42d5b4b4a091778d98c351f0002d8656449d0243"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b12041d-fdaa-483d-b290-d584ffb6ea13.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b12041d-fdaa-483d-b290-d584ffb6ea13.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashdeb690b8f5503bf4bcf424e58ddb6b8c eb96120190e3a5c286ac5ec51ee8b163540377fd c762b17d3e43d773966490d1186ebc352a78d47781c77a4f048e32fee9732b7d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b12041d-fdaa-483d-b290-d584ffb6ea13.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7642
x-amzn-requestid: 3f4482cf-98a5-420e-abe7-17fd2d214da0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNyxIF3aIAMFWoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe6d-0c1838dc7b4ab4650d54ee56;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OD1DSocM7Q1FhRQ4oMhGjU8GN-sv978YqNpLMiKjeWupfFbK-WDXxQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 22:04:05 GMT
age: 79498
etag: "eb96120190e3a5c286ac5ec51ee8b163540377fd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febfe8cd9-8a38-4bff-80c1-8c58b3618c4d.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febfe8cd9-8a38-4bff-80c1-8c58b3618c4d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3172dcbfc344029f09fec71cfa869af7 1a45d9e39cb8a2fcf5cb06bbfcf0194f1eaff2ad e818325e9a7a516912bba892f0ff7377ee0a60d0a38afbbc7f41f8f5d7857a07
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febfe8cd9-8a38-4bff-80c1-8c58b3618c4d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10594
x-amzn-requestid: 25119c89-8b57-4f78-ba4d-6181a565fc55
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNyrOG_VIAMF15w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe47-5f7fde965860cba74a51ddbf;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZM3fGgrP1P7ju8-1AFIahWbbTgZaAu3mCZyN9m_g_rw6rWHeldJhmQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 23 Jan 2023 21:57:44 GMT
etag: "1a45d9e39cb8a2fcf5cb06bbfcf0194f1eaff2ad"
content-type: image/jpeg
age: 79879
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| client-api.arkoselabs.com/v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/settings.bundle.cee95b0d80c8c191fc88cfc178d718db.js | 104.18.42.229 | 200 OK | 0 B |
URL HTTP/2client-api.arkoselabs.com/v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/settings.bundle.cee95b0d80c8c191fc88cfc178d718db.js IP104.18.42.229:0
GET /v2/0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D/settings.bundle.cee95b0d80c8c191fc88cfc178d718db.js HTTP/1.1
Host: client-api.arkoselabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://signine-ea.com
Connection: keep-alive
Referer: http://signine-ea.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 24 Jan 2023 20:09:02 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 78eb6789b8810b3d-OSL
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"73812c2f2a7e5543588d901c47e2d3bc"
last-modified: Fri, 23 Sep 2022 20:59:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cf-cache-status: MISS
cache-tag: 0F5FE186-B3CA-4EDB-A39B-9B9A3397D01D
capi-worker-type: dedicated
content-security-policy: default-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; connect-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; font-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; frame-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; img-src 'self' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn data:; script-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn; style-src 'self' 'unsafe-inline' *.arkoselabs.com *.funcaptcha.com *.arkoselabs.cn *.arkose.com.cn;
permissions-policy: accelerometer=*, autoplay=*, camera=*, display-capture=*, document-domain=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, midi=*, payment=*, picture-in-picture=*, sync-xhr=*, usb=*
x-amz-id-2: D+HVNtNdbXwUmsFVKqPp0vG7G3/yCgtlBs+euI3txfvBNskOJ3XOwe3UObcFbcEfBOfLUJ231GeZ9q7jmvFgSQ==
x-amz-request-id: 65K9FCFFA103NCRZ
x-amz-version-id: PJ8mWVlPkVKUqY1fQPIqXhP7DoFafn4e
set-cookie: __cf_bm=zHTpD8ClDUQcnZa6lha5Zn1VoHcDUyhGe18R9Rn..VI-1674590942-0-AVjxItolBvSWLoZWSh9N9HlBRAVeMfSR99W5o5mg1HpMbs9sQmOsTuDU0wtJPULavWMQkMyyoQD8FbtKp3fJH7g=; path=/; expires=Tue, 24-Jan-23 20:39:02 GMT; domain=.arkoselabs.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
|
|