| holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806 |  107.22.193.119 | 302 Moved Temporarily | 138 B |
URL HTTP/1.1holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806 IP107.22.193.119:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806 HTTP/1.1
Host: holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 09 Dec 2022 03:02:54 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: https://holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806
|
|
| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashf2acd891dc6eb1f09f57a2b086791781 1e2088306501a61edcca1ade62c4d54f23b3b083 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10760
Expires: Fri, 09 Dec 2022 06:02:14 GMT
Date: Fri, 09 Dec 2022 03:02:54 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashaea93551fa9deb76ae49a3b4019d64fe e3b8862057ebe839959228e42246d7b1807fc90c 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9031
Expires: Fri, 09 Dec 2022 05:33:25 GMT
Date: Fri, 09 Dec 2022 03:02:54 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 02:08:16 GMT
content-type: application/json
age: 3278
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash4ee537977be9c03702f8ffe0025bf1fe 21637881c4aa34c4add703f8bff4eff573159f45 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8114
Expires: Fri, 09 Dec 2022 05:18:08 GMT
Date: Fri, 09 Dec 2022 03:02:54 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: eH/y6VommAtFe9HyRbXSspcjx8xNE3+XQVbhGSJDXimvgnW2RoMm5VneukyI1VTHOEtFkVa4cmHLpRmR29Joyg==
x-amz-request-id: 9RVQKBYZ2TCP512B
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 02:48:09 GMT
age: 885
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:54 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 02:07:59 GMT
age: 3296
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfd55f4aaaab6ec40bc7dc10252cd819a a72523f60be265a391fa9edc43e0a93418ad1fd0 bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 631
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:55 GMT
Last-Modified: Fri, 09 Dec 2022 02:52:24 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 472 B |
IP172.64.155.188:0
Hash2aab26d4b076103ed7da4d8cd45625fb 3e12562f5f10d2230eba881287385f03632497de c46ae6b60ad9c9a44798c15b57559c854ce1b7f3ce093d497dd1998017598c6f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:02:55 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 01:03:10 GMT
Expires: Fri, 16 Dec 2022 01:03:09 GMT
Etag: "3e12562f5f10d2230eba881287385f03632497de"
Cache-Control: max-age=597013,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776a812ff8930b51-OSL
|
|
| push.services.mozilla.com/ | 35.82.48.240 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.82.48.240:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: u77+PiL1i6urxGxfKGkBww==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vzhlSdoEl230xA2epY87kYwZNaA=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6ec5f6261a8262e9f94b29627f54cefe 7ac766cf2ac8c2d960ec033388a767ff8a7d45e2 5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6ec5f6261a8262e9f94b29627f54cefe 7ac766cf2ac8c2d960ec033388a767ff8a7d45e2 5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6ec5f6261a8262e9f94b29627f54cefe 7ac766cf2ac8c2d960ec033388a767ff8a7d45e2 5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn4.holavpninstaller.com/www/hola/pub/25bfec887650dd6b4bed5edbcc2f5cca.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 2.1 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/25bfec887650dd6b4bed5edbcc2f5cca.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (8994) Hashdc2c88e8e74271323878a0845fbcd5bc 7de5d70d3ee40555147cf8e7e5549ba5594835c9 ee658f49bdaef09ccbe5e57598d4bb6530fc73bf3f23291b06b148d489df8a99
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/25bfec887650dd6b4bed5edbcc2f5cca.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 2081
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-9121-00835f04"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds255.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/734434d65dddb594a883f7996d05ea3a.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 21 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/734434d65dddb594a883f7996d05ea3a.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (65516) Hash7ca2c62cfba7b5b16a998d9dd4681667 1265cf0ae558aa36c0acff84c9cd42d6b211a249 75f5353304d15937482e4a75cc711da1744fcbfee4f5509564a83f1dc06727a3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/734434d65dddb594a883f7996d05ea3a.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 21402
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-100716-02172b5f"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds212.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/d70ae7b16a386a69116b097e282af76b.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 8.7 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/d70ae7b16a386a69116b097e282af76b.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (31278) Hash827284c97b698f35212b56520f175163 b205ea5894405d67d37ebd48db5e33bcb53531be 5e48c6f4f892bf98da3df06ca54c66835b60c729786e20ab4b3a063e76eed72e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/d70ae7b16a386a69116b097e282af76b.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 8685
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-31405-e164f166"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds244.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/c30e5c65b41144da40aa47a577443572.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 21 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/c30e5c65b41144da40aa47a577443572.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (9627) Hash4455e41febd039b264b1434489c41677 9c0751fcb5aaa7a9a6a598cdbaaab7bfc48f16bf 46a074892c79368457f7fe8f5a041c3969c96722fd54c5dc4d76b4a55ac2070f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/c30e5c65b41144da40aa47a577443572.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 20745
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-134833-e52a295b"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds253.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/266a1f7c2e2345169d3bc448da45eae6.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 63 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/266a1f7c2e2345169d3bc448da45eae6.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (58151) Hash7137a8a840b17ae397b15804c5588e16 1cdb823c86bf488772ec1c7a433c177c13af0fb1 cf5a17d525464088ba39e8d34973693e038183103e25ef2f44cf76bc38171353
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/266a1f7c2e2345169d3bc448da45eae6.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 63026
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-242501-a91a785f"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds230.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/less_core.bundle.css?ver=1.204.953 | 205.185.216.42 | 200 OK | 29 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/less_core.bundle.css?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (65536), with no line terminators Hash3e04a877544437b222797045dec3a505 a14fe637ed9e5d1820df676f244033f736379cc5 160671317271ed1ab54554f2f164c026274cc36fb274022a8ce09e9025faa1df
GET /www/hola/pub/less_core.bundle.css?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 29326
content-type: text/css; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-190573-bc470027"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds014.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/19a4afa49f373d2e49ab46f6e9d68bf8.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 8.2 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/19a4afa49f373d2e49ab46f6e9d68bf8.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (35626) Hash600afa5155a2d001c20cac5eee204a5a 3d2c17c8cd4c7380941353283de517b75ab5f1fe 5fa37b977423f5f13d3ff34064b07623db2b9fbd0045ce515c5f7f399d4dbdbf
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/19a4afa49f373d2e49ab46f6e9d68bf8.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 8245
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-35753-9d967551"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds226.sk1.c
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6ec5f6261a8262e9f94b29627f54cefe 7ac766cf2ac8c2d960ec033388a767ff8a7d45e2 5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn4.holavpninstaller.com/www/hola/pub/152d8e7d87ade3faca24aa26e5e6ebbd.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 10 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/152d8e7d87ade3faca24aa26e5e6ebbd.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeC source, ASCII text, with very long lines (18849) Hash5121525c62342be9f3081c6cc70b26e3 f9dd4f6b4ac06a30dbb1c4b959d0dfe7916725bb c8524f69702bf5495efda44cc074713bb51d00c06518f004853c68ccb968387f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/152d8e7d87ade3faca24aa26e5e6ebbd.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 10350
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-36287-3dcfc103"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds261.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/21a02866b0a62d557df02e108c006b06.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 8.2 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/21a02866b0a62d557df02e108c006b06.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (20341) Hash00ba44823eab16335e2e50dbf3fef1db a05855bf63da1143bcadf297ed5b8ccea13de5f6 803b7006cf4d080eb9bae434d3d584357d69d747e62292b4f9a7173cb7c79707
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/21a02866b0a62d557df02e108c006b06.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 8205
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-28759-92c09988"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds213.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/9ab748fa4c41f259209d932a5b96d800.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 3.1 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/9ab748fa4c41f259209d932a5b96d800.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (6926) Hashc81cf063eb617b1d897596b2f7a1ff48 0c87dc1621d0cdc226cfb80d4dd79179c4347dc1 77ce6b373f6b46d7f84aa99f10e9f4d16cbb44645d0fca74f2f01a26883c2c7a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/9ab748fa4c41f259209d932a5b96d800.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 3142
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-14359-6f60a13b"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds233.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/7f98e08e19e3e3b48e9c1288cf4864a9.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 5.1 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/7f98e08e19e3e3b48e9c1288cf4864a9.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeUnicode text, UTF-8 text, with very long lines (6970) Hashd4d8d75d78395fcc31e2294919e515b9 0c8bbfc991c386a2a03e0fd252792a08a567078b c0c76ee646da1c4b62e257d4174016962f21c43716f0562ccdb6b4e1e42e4e62
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/7f98e08e19e3e3b48e9c1288cf4864a9.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 5090
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-15536-172a469f"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds235.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/cc8ef754a84359dea0ca284ea6ab3fce.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 17 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/cc8ef754a84359dea0ca284ea6ab3fce.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeUnicode text, UTF-8 text, with very long lines (51707) Hashf28fa0a00d03ed329c27360d62b51974 efe16bd108decd67e6216a25b6ad608722d2ec53 f766ebdb874636a67900d86a4995010835b6e1cbaa9dafbaa5bfa7c2e2588ab7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/cc8ef754a84359dea0ca284ea6ab3fce.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 17091
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-68733-da5d80c9"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds204.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/1910608c9f8f5f0d84ee05770267b653.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 4.1 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/1910608c9f8f5f0d84ee05770267b653.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (6881) Hash59a9a1d7e3f7f9ae5edf2cced1abac51 1b4f0145b178d0e48684d31c7e237ece966aadb8 60cfaea683d746ab418df2688f43bc5419574a45cd87803aa6939d502220ca62
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/1910608c9f8f5f0d84ee05770267b653.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 4104
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-13423-a2d06b7e"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds257.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/55334be073081c2821d7a7ff45f614cf.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 29 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/55334be073081c2821d7a7ff45f614cf.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeUnicode text, UTF-8 text, with very long lines (45731) Hash16bf78ddbb5c67cd656446572a0f3653 036f202ef00898e96c1b8e375f9d8d383dc77750 6446e5c65eba3a51a8b1cde813fe97546c90e71a7843fc7bb94bf9c061f658b1
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/55334be073081c2821d7a7ff45f614cf.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 28868
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-118439-2a3a56b1"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds255.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/57cfb250e03d892e8c72a2703362f19a.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 5.8 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/57cfb250e03d892e8c72a2703362f19a.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (6585) Hash9020a11d130323cc641c86164cd37bf0 c51be0a5db6b95f32701c6528904bc371ca08cc8 08ed0adec5e6544b35d3c35ab6cf1faab9688df356efd9c5ff238d413c6466a9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/57cfb250e03d892e8c72a2703362f19a.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 5825
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-18921-a05efb9b"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds252.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/1396c90de55ccb2a71049f43e7e2e572.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 23 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/1396c90de55ccb2a71049f43e7e2e572.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (65516) Hash89b115604009d4ee194e4d8f16109040 0b32b756f2c177d71a78e5393136a402b70e61c6 7ee8fceccc27c4b22625e51daac1d1865c740ca916f1861658328fc812605b9e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/1396c90de55ccb2a71049f43e7e2e572.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 22582
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-105950-770999e4"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds022.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/36c4dbd501f103f9ac4ce06d18d7e9c8.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 5.1 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/36c4dbd501f103f9ac4ce06d18d7e9c8.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (9393) Hashfa27254146201a5438aab605154e8ee0 24df6b510539b343fb0d74e1831fd18d28f3aec9 3efb8e2aefc6d3ca6b6ed0ec14d23be0fb393960656552fb821c7d45a0ca5d81
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/36c4dbd501f103f9ac4ce06d18d7e9c8.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 5116
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-27577-bb8748fa"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds249.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/52a152e08e3241910a50a30f3ca9d026.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 20 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/52a152e08e3241910a50a30f3ca9d026.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeUnicode text, UTF-8 text, with very long lines (18037) Hash20472b893682e0d37ffcb2971bc4ce0e 2eb4714cfc02c6ecc70b4dd2a6f21e6fb93cc497 df2f3c9b2ddf37dd8a67d2ccec7f3f55dc1eb84bd971171aec5e1d879180c766
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/52a152e08e3241910a50a30f3ca9d026.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 19549
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-144494-d6d28a39"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds228.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/a7409c67ca70ca062651ccf070645032.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 4.3 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/a7409c67ca70ca062651ccf070645032.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (14572) Hashd470e47db0220830372ca6555a2507f7 7e719d88564f85f0799ac59026a7f9c394d2b8eb 7104cb20eb975a49b1150a66a4687b3d6d6ef4d62bca9d6290e1e0c48f3e3bab
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/a7409c67ca70ca062651ccf070645032.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 4330
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-26316-df0139ff"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds261.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/e12ef715a82532642d13116ed632bc95.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 11 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/e12ef715a82532642d13116ed632bc95.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (30661) Hash0fd03eb2ae4141fbdbc62eafde7256e2 c53b2a299c21b21e0054a48c78c072c3abe02b58 dfbac15151e4804d182289b2e89a11a6793b0e538c6010fcbb223c3609f738b0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/e12ef715a82532642d13116ed632bc95.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 11401
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-40736-7787f6d4"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds227.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/cc3218cf880389fd0b229ece017b687c.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 5.2 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/cc3218cf880389fd0b229ece017b687c.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (9423) Hashe834ffff468b4564ced0eb3c00f76a6e 00fc35d51d29c18161d1628fc0bf110346fc46cb cf7406b840f58c1d6ad4c19220e21e537295f8a2ee5fb63059f5cd49adc218bf
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/cc3218cf880389fd0b229ece017b687c.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 5212
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-27420-35a52982"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds264.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/a7485c4961c521c4d9bedbb1358d04c8.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 3.9 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/a7485c4961c521c4d9bedbb1358d04c8.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (7288) Hash47f4196a6a0bb41dc29d28874fa2f759 986816cf745d0ef03730ae30c6c79b3663d6313b 30043b8be0338d92b186396f59400728cc5f30af37fa70940867e7abf0f9a79f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/a7485c4961c521c4d9bedbb1358d04c8.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 3866
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-16535-b0ecaeb7"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds215.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/7f77dcafb11b556cb2a95dffd96edb15.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 5.2 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/7f77dcafb11b556cb2a95dffd96edb15.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeUnicode text, UTF-8 text, with very long lines (16047) Hashae22fba0be6358d070659934dd92762d 71198635e316840fee80a60885aa50fd1d495a59 99a81eadacff106ab8b4463dbbb783e19665047f6a1cd573461f52a1177366e7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/7f77dcafb11b556cb2a95dffd96edb15.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 5218
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-26514-c594d342"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds222.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/63a9f0ea7bb98050796b649e85481845.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 15 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/63a9f0ea7bb98050796b649e85481845.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (52431) Hash15df809fedef078719946dbfdf0a6dbf 789aea0d8ae28bedcfdafa0f13417a8f7533c141 cfc63a2950b4b82f41e418f6fa6b40c4114c0522cd07dda1bdfd6a2902550d2a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/63a9f0ea7bb98050796b649e85481845.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 14779
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-52558-ef973a91"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds015.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/css/core/font_switzer.css?ver=1.204.953 | 205.185.216.42 | 200 OK | 722 B |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/css/core/font_switzer.css?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (9082), with no line terminators Hash758548f1f58b82e3f99433a0ad781bb6 3a1a47b5a99f7b713f91e56325c2b0ea4dcf0da9 1e9d25d32daad9bd33e4f82d7ccc94111947d57ef64cd791415a349c14884e3c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/css/core/font_switzer.css?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 722
content-type: text/css; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-9082-79b4cbde"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds222.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/index.1.204.953.bundle.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 16 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/index.1.204.953.bundle.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (53355) Hash8ce37d7709e4e127d64af0cea468066f fec353983c7fb369e4d5927e132120af00fa7831 5df5d236d86c512081d95a2831332be84d3ddb2a39a148051684b8f041950ab8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/index.1.204.953.bundle.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 15503
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-55425-6bf380c1"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds206.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/locale/pub/languages_ext.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 1.9 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/locale/pub/languages_ext.js?ver=1.204.953 IP205.185.216.42:0
Hashf604324531a2a059fe67f74ddc9fb350 84f1396163e5758e788b7530e78da88306dafc3b 216451444f7767b7dcf66c298b5570e12bb1baf5c3c269585670be2af4dab837
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/locale/pub/languages_ext.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 1862
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-5472-31657e74"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds232.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/react.bundle.css?ver=1.204.953 | 205.185.216.42 | 200 OK | 1.4 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/react.bundle.css?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (5823) Hash940bafff048cbea3fbbffb051598f9f2 f7794daf48f9f38a341a0e79c0f86cb6e74539e5 a12db13df9559e982e60e72658df19f5fb3ea6080e82c9d29d03ba5d44f8882e
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/react.bundle.css?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 1448
content-type: text/css; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-5897-0ea137c8"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds068.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/config.1.204.953.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 4.1 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/config.1.204.953.js?ver=1.204.953 IP205.185.216.42:0
Hash906dbfedb7d525e8600afc697f58ffb3 6952573d933a4e01f0965a326a1843c373efd52b d68704e84b386730b31b136d43a2e5c24fd2aff07fb045070fcb890aba79343b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/config.1.204.953.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 4070
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-12660-a3193ad5"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds020.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/b2911c84de0b50d7af73dfafb28ed94a.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 2.4 kB |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/b2911c84de0b50d7af73dfafb28ed94a.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
File typeUnicode text, UTF-8 text, with very long lines (6291) Hash252910c97c82f282fa45472e328db4df 05814c6070c2590142e07901e69039fd87a7112c c5086dacaaec1501430860952af2ee1a491245deebfa09b7e4b0dab57b5ca67a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/b2911c84de0b50d7af73dfafb28ed94a.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 36963
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-148487-5f693c11"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds254.sk1.c
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash0e9eef4ed41ef94e9ea175ad243e294e b6f83e508270413dabe55e2884b5409ca7978e24 0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash8f6ab0debac98d11413e20fa98ba8286 e63543ba0f3a685edf4d8fee3f587efd5417015f fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash8f6ab0debac98d11413e20fa98ba8286 e63543ba0f3a685edf4d8fee3f587efd5417015f fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash8f6ab0debac98d11413e20fa98ba8286 e63543ba0f3a685edf4d8fee3f587efd5417015f fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashbf8858fa52de668b0013cf9ce66d290c 9c319173ee6a48c6e717e9e8764008564aabe7ba 93df528ead5887cbbcf51f83c9e6ffa451861ae3145296ab3dfc269067080933
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 31 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data Hashac0d2859ea5f8fd6bcb3c305c08ec184 7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7 ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://holavpninstaller.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Dec 2022 06:30:11 GMT
expires: Sat, 02 Dec 2023 06:30:11 GMT
cache-control: public, max-age=31536000
age: 592365
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash0e9eef4ed41ef94e9ea175ad243e294e b6f83e508270413dabe55e2884b5409ca7978e24 0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtm.js?id=GTM-NH398RP | 142.250.74.40 | 200 OK | 68 kB |
URL HTTP/2www.googletagmanager.com/gtm.js?id=GTM-NH398RP IP142.250.74.40:0
File typeASCII text, with very long lines (55896) Hashb2bed0a4d037740b8d4d263f55fa63c6 68034e13bbbea2c7e2b09d49c2e6aa49dc0eed0e febfe4a840d0e3ec9496c797f38168a0674aaa9d48b5b5f75567b8b1149e7b16
GET /gtm.js?id=GTM-NH398RP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 09 Dec 2022 03:02:56 GMT
expires: Fri, 09 Dec 2022 03:02:56 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 67875
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash0c89743226644fddacbe5d50c110b950 b343ae9eb9047cf764b518083d612ffd3652b209 1bf675bb6e12e913a98cd8849c1af9a0c50b0bb8bfa670c86419b41782e06e47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| holavpninstaller.com/www/hola/pub/img/icons.svg?ver=1.204.953 | 54.225.121.9 | 200 OK | 35 kB |
URL HTTP/2holavpninstaller.com/www/hola/pub/img/icons.svg?ver=1.204.953 IP54.225.121.9:0
File typeSVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (7983) Hashd83fe535829f8bcd69c3888fa678c14f f61ba4a1d04a05765782a9712b061aff3c08dc1b f7518e4e844653a5cfdb6bb08efaca4448d399ddeb734056e9452c28bdc6d4a2
GET /www/hola/pub/img/icons.svg?ver=1.204.953 HTTP/1.1
Host: holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806
Cookie: XSRF-TOKEN=9228cf1c63a24e3783861d98a36eaee416e878cabdce879b; i18next=en; h_visitor_id=www-a332052e-fd68-4135-9fd9-fe220bf5abbd; ui_testing={%22test_installer_version_conf%22:{%22name%22:%22test_installer_version%22%2C%22on%22:0.1%2C%22ssr%22:1}%2C%22test_installer_version%22:false}; c_browser=Amb3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:56 GMT
content-type: image/svg+xml
content-length: 34967
strict-transport-security: max-age=63072000
vary: Origin, Accept-Encoding
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-104521-cd539d27"
content-encoding: gzip
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11883
Expires: Fri, 09 Dec 2022 06:20:59 GMT
Date: Fri, 09 Dec 2022 03:02:56 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11883
Expires: Fri, 09 Dec 2022 06:20:59 GMT
Date: Fri, 09 Dec 2022 03:02:56 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg | 34.120.237.76 | 200 OK | 8.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasheb00a2a503a690cee3e4dd729b5bc9bd cfb1e5bcab2148a777889680e6e36b9d7e8917ec 7e4583ae78ab597639f53669ac2d67d1ebd26be3278c2fc3fc95af934178c116
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f25ad59-b8ed-49ea-9611-21f63c20c8fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7960
x-amzn-requestid: beadd240-39d0-407d-a890-6a095657cac3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEd8HC0oAMFUag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb459-44d4f63c62f58684782ef14a;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yL-FrFYh-3PuCZCpCHYg--ebTS7wMmMQ7IE2mgimDVsKWFEtKC2gVQ==
via: 1.1 74aa91fe819001bcedd882694f52b436.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 05:44:09 GMT
age: 76727
etag: "cfb1e5bcab2148a777889680e6e36b9d7e8917ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9cb76c68a8cd472600106cc118067868 6cee6b1828c709f68b995197ca943a5c393f86fb 009d9ba19043b03b5aceeb80b69bf249f19a0a225bdbfef7ab8691669cb64130
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F884d1162-4377-487f-a056-b21117ef5001.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8204
x-amzn-requestid: cf54b5f8-ede8-49d5-aa56-5d9de98e3ab8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjtKfEiToAMFSXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af576-6ddfe35c0b31074d6a07076f;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:06:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UfqFAlLedF6ZkfbGXhyYDcvu0porNJb6LPaeQ8p4dqWqsFD6iRgWLw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 15:50:07 GMT
age: 40369
etag: "6cee6b1828c709f68b995197ca943a5c393f86fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash730ba1a8edb79ba6f83b46d1ba5aed7b 55a236fedf6f5f7ca2bb88ae13e20846a50fd36d f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12748
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjuciEptIAMFj9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 18:34:32 GMT
age: 30504
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash45e0c1638ad919bde19731f7987ab064 1e492807c665e6e6b24ec6ce19035fdfc6f23b92 f0d3738ec8406958470c8fd152a02a123d7654c30f974c1df5c4977a380c2d62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10205
x-amzn-requestid: c5704c7a-60c4-402b-8018-5885a8dae971
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F9BIAMF3ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-3e9573d900714e3250f43e17;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mLTL7L808-OguYGrl3FUvwmFmPQjBPRj7PVfgEheFHWg4g4skoBvOg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 18:05:28 GMT
age: 32248
etag: "1e492807c665e6e6b24ec6ce19035fdfc6f23b92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg | 34.120.237.76 | 200 OK | 7.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash955c6ac69b89f6cbd497df53fcb2ae1b 2506152cdd1056533116feb9350124356e570e54 fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7217
x-amzn-requestid: be9196fc-3d43-49db-8522-8781cbf5a247
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUEDEWpIAMFqUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e66e6-04b24220213872ba378d3538;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4QlJZW4ZiPNVhOJbcRldanR8veym3l0sIBGa1Ym-4FOTT_utMQeZQg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 10:15:09 GMT
age: 60467
etag: "2506152cdd1056533116feb9350124356e570e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg | 34.120.237.76 | 200 OK | 7.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8c3214044657f3b876d1f1848bca5684 7558222788f06623ddae6e883413e38e1146281e e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oV7bB5Tek01MFi9x2tr_Wix13-UGlQPIt042XM0ALNUvVFYnu5DRcg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 03:38:24 GMT
age: 84272
etag: "7558222788f06623ddae6e883413e38e1146281e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash768622b8dfeaff5c23bdb3d943737218 5c01af4c0ac1813cbf1223ff974bc6f8fe6d796c 8938d9b4439103950b8de27095e9984649d010249ccb459a0a3712061ab7297f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8938D9B4439103950B8DE27095E9984649D010249CCB459A0A3712061AB7297F"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8113
Expires: Fri, 09 Dec 2022 05:18:09 GMT
Date: Fri, 09 Dec 2022 03:02:56 GMT
Connection: keep-alive
|
|
| holavpn.postaffiliatepro.com/scripts/hwk0hjlkh |  91.201.28.211 | 200 OK | 6.0 kB |
URL HTTP/2holavpn.postaffiliatepro.com/scripts/hwk0hjlkh IP91.201.28.211:0 ASN#203480 Quality Unit, s.r.o.
File typeASCII text, with very long lines (1107) Hashe4bd19c3a3a3c2bcbc7f95bd18fe73eb f22b9c87960b76dd52f944ac39fea96be231837f 14cfb9ea09b3a1ee6fdedcb41d42fcded017b51cd63d0f7658bd3e18e249a917
GET /scripts/hwk0hjlkh HTTP/1.1
Host: holavpn.postaffiliatepro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:56 GMT
content-type: application/javascript
content-length: 6035
etag: "6a36-5edbe14145800"
expires: Fri, 09 Dec 2022 03:04:40 GMT
cache-control: max-age=120
last-modified: Fri, 18 Nov 2022 12:45:20 GMT
x-srv: 2
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 931988014 930892223
age: 17
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.pap.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/lazysizes.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 3.3 kB |
URL HTTP/2cdn4.holavpninstaller.com/lazysizes.js?ver=1.204.953 IP205.185.216.42:0
File typeASCII text, with very long lines (7034) Hash2af16967c2fe440d7d96c8d8963bf437 b92102beb842ddaed174f9245e4a54ce038c19cf 07f2512339669bc0a956a741a00916e5ba70c848c53fbba908c5c0ae66ad078b
GET /lazysizes.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing={%22test_installer_version_conf%22:{%22name%22:%22test_installer_version%22%2C%22on%22:0.1%2C%22ssr%22:1}%2C%22test_installer_version%22:false}; c_browser=Amb3; _gcl_au=1.1.144525141.1670554976
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:56 GMT
content-encoding: gzip
content-length: 3307
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
cache-control: public,max-age=31536000
etag: W/"md5-7060-d8513e78"
vary: Origin
x-hw: 1670554976.dop227.sk1.t,1670554976.cds255.sk1.hn,1670554976.cds250.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/static/lottie_player.js?md5=350013-706e23df | 205.185.216.42 | 200 OK | 88 kB |
URL HTTP/2cdn4.holavpninstaller.com/static/lottie_player.js?md5=350013-706e23df IP205.185.216.42:0
File typeASCII text, with very long lines (26028) Hashe3836228bea5b9a42e9a5b7c6c56395a 2d61d47df13cf5940940179442d94f770f4d3fcd 01e2161dd2b82910acbe0a3fca48b9475296e7c6c04900960bf883bfd5485984
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /static/lottie_player.js?md5=350013-706e23df HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing={%22test_installer_version_conf%22:{%22name%22:%22test_installer_version%22%2C%22on%22:0.1%2C%22ssr%22:1}%2C%22test_installer_version%22:false}; c_browser=Amb3; _gcl_au=1.1.144525141.1670554976
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:56 GMT
content-encoding: gzip
content-length: 87781
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Oct 2022 06:54:54 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
cache-control: public,max-age=31536000
etag: W/"md5-350013-706e23df"
vary: Origin
x-hw: 1670554976.dop227.sk1.t,1670554976.cds255.sk1.hn,1670554976.cds205.sk1.c
X-Firefox-Spdy: h2
|
|
| holavpn.postaffiliatepro.com/scripts/hwk0hrlkh?accountId=default1&url=S_holavpninstaller.com%2Fbrowser%2F1235&referrer=&isInIframe=false&getParams=%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&anchor= | 91.201.28.211 | 200 OK | 66 B |
URL HTTP/2holavpn.postaffiliatepro.com/scripts/hwk0hrlkh?accountId=default1&url=S_holavpninstaller.com%2Fbrowser%2F1235&referrer=&isInIframe=false&getParams=%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&anchor= IP91.201.28.211:0 ASN#203480 Quality Unit, s.r.o.
File typeASCII text, with no line terminators Hash7ddf443565cb5163b766302c65a712b6 bcd2ffca55bcc794e912e5ba2b498ab9161fea49 eb42a7223f3c8a9855b8bd6966f69b763ebedca4d80ea5288aa14c122db8f16b
GET /scripts/hwk0hrlkh?accountId=default1&url=S_holavpninstaller.com%2Fbrowser%2F1235&referrer=&isInIframe=false&getParams=%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&anchor= HTTP/1.1
Host: holavpn.postaffiliatepro.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:56 GMT
content-type: application/octet-stream
content-length: 66
set-cookie: PAPVisitorId=wcOe9nKJtyvltI1DpfWnQsDWfe4NRzlL;Max-Age=31556926;Path=/;Domain=.hola.org;Secure;SameSite=None;
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Firefox-Spdy: h2
|
|
| client.holavpninstaller.com/be_client_cgi/unblocking_rate?&limit=5&src_country=no | 54.225.227.202 | 200 OK | 377 B |
URL HTTP/2client.holavpninstaller.com/be_client_cgi/unblocking_rate?&limit=5&src_country=no IP54.225.227.202:0
File typeJSON data\012- , ASCII text, with very long lines (377), with no line terminators Hash797c590bef532fa32634e76321950add 0169e30fc92fe31bf75c972075e141b18de5b27c 4b61d53214600a2c076a6ac8a71e729d02dcf0d1d309f0431a6e1efc4f55f329
GET /be_client_cgi/unblocking_rate?&limit=5&src_country=no HTTP/1.1
Host: client.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/
Origin: https://holavpninstaller.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:56 GMT
content-type: application/json; charset=utf-8
content-length: 377
vary: Origin, Accept-Encoding
cache-control: public,max-age=3600
access-control-allow-origin: https://holavpninstaller.com
access-control-allow-credentials: true
access-control-allow-headers: x-xsrf-token
etag: W/"179-AWnjD8kv4xv3XJcgdeFBsY3lsnw"
X-Firefox-Spdy: h2
|
|
| holavpninstaller.com/access/popular.json?format_rules=true&country=undefined | 54.225.121.9 | 200 OK | 3.6 kB |
URL HTTP/2holavpninstaller.com/access/popular.json?format_rules=true&country=undefined IP54.225.121.9:0
File typeJSON data\012- , ASCII text, with very long lines (23528), with no line terminators Hashefa99d8bb5976f1e18241908a23c3ced 71cd651b64ba00da5e116fe773788af143d5ea3d 1bc9cd40de51d77944d46c733a4dcef9e55a5c183e2c07a6c31a3bad98ef158d
GET /access/popular.json?format_rules=true&country=undefined HTTP/1.1
Host: holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806
Connection: keep-alive
Cookie: XSRF-TOKEN=9228cf1c63a24e3783861d98a36eaee416e878cabdce879b; i18next=en; h_visitor_id=www-a332052e-fd68-4135-9fd9-fe220bf5abbd; ui_testing={%22test_installer_version_conf%22:{%22name%22:%22test_installer_version%22%2C%22on%22:0.1%2C%22ssr%22:1}%2C%22test_installer_version%22:false}; c_browser=Amb3; _gcl_au=1.1.144525141.1670554976; tid=lbfxat5e.8lyrgg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:56 GMT
content-type: application/json; charset=utf-8
vary: Origin, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| perr.holavpninstaller.com/be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_timing&ver=1.204.953 | 34.237.179.253 | 200 OK | 2 B |
URL HTTP/2perr.holavpninstaller.com/be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_timing&ver=1.204.953 IP34.237.179.253:0
File typeJSON data\012- , ASCII text, with no line terminators Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_timing&ver=1.204.953 HTTP/1.1
Host: perr.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://holavpninstaller.com
Content-Length: 1402
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:57 GMT
content-type: application/json; charset=utf-8
content-length: 2
vary: Origin, Accept-Encoding
x-hola-ts: 1670554977184
x-hola-conf-ver: 45
access-control-allow-origin: https://holavpninstaller.com
cache-control: private,no-store
access-control-allow-credentials: true
access-control-allow-headers: x-xsrf-token
X-Firefox-Spdy: h2
|
|
| perr.holavpninstaller.com/be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_simple_download_visit&ver=1.204.953 | 34.237.179.253 | 200 OK | 2 B |
URL HTTP/2perr.holavpninstaller.com/be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_simple_download_visit&ver=1.204.953 IP34.237.179.253:0
File typeJSON data\012- , ASCII text, with no line terminators Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_simple_download_visit&ver=1.204.953 HTTP/1.1
Host: perr.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://holavpninstaller.com
Content-Length: 819
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:57 GMT
content-type: application/json; charset=utf-8
content-length: 2
vary: Origin, Accept-Encoding
x-hola-ts: 1670554977187
x-hola-conf-ver: 45
access-control-allow-origin: https://holavpninstaller.com
cache-control: private,no-store
access-control-allow-credentials: true
access-control-allow-headers: x-xsrf-token
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash795e67bdfadc3c890a663080413b56b7 fdefde3befb6aceac3c337c34c8d738f5091908c 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashb5cba4e1962a1fe17c9021f3e418975a 01293d7e4084011451f7d17936ab2427504cdb1a ecfe30d3abc32ca9f933303d75b2055642d3c7c8197af08fe2c314394699594b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2556512b197b09798af71bea10bb4bbb 23b647aca5f8294ae82fa8cc7e2215ebe3347b60 3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/analytics.js | 142.250.74.14 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.14:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 09 Dec 2022 02:46:55 GMT
expires: Fri, 09 Dec 2022 04:46:55 GMT
cache-control: public, max-age=7200
age: 962
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/pagead/1p-conversion/981843084/?random=1670554975904&cv=11&fst=1670554975904&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=03CwCKSw9f0BEIz5ltQD&hn=www.google.com&frm=0&url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&tiba=Hola%20Browser%20-%20Access%20Global%20Content&value=pageview&bttype=purchase&auid=144525141.1670554976&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 | 142.250.74.164 | 302 Found | 63 B |
URL HTTP/2www.google.com/pagead/1p-conversion/981843084/?random=1670554975904&cv=11&fst=1670554975904&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=03CwCKSw9f0BEIz5ltQD&hn=www.google.com&frm=0&url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&tiba=Hola%20Browser%20-%20Access%20Global%20Content&value=pageview&bttype=purchase&auid=144525141.1670554976&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 IP142.250.74.164:0
File typeASCII text, with no line terminators Hash0339f8f57d1bf75003db591e28957e45 ae2286e497c9f76a02cb40c40a674b73bd293b76 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/981843084/?random=1670554975904&cv=11&fst=1670554975904&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=03CwCKSw9f0BEIz5ltQD&hn=www.google.com&frm=0&url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&tiba=Hola%20Browser%20-%20Access%20Global%20Content&value=pageview&bttype=purchase&auid=144525141.1670554976&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Dec 2022 03:02:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/981843084/?random=1670554975904&cv=11&fst=1670554975904&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=03CwCKSw9f0BEIz5ltQD&hn=www.google.com&frm=0&url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&tiba=Hola%20Browser%20-%20Access%20Global%20Content&value=pageview&bttype=purchase&auid=144525141.1670554976&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| perr.holavpninstaller.com/client_cgi/perr?id=www_pap_track_visit&info=%7B%22pathname%22%3A%22%2Fbrowser%2F1235%22%7D&ver=0.0.0&browser=firefox&build=version%3A+0.0.0%0Amakeflags%3A+%0Aid%3A+jid1-4P0kohSJxU1qGg%40jetpack%0Abrowser%3A+firefox%0Abrowser_build%3A+undefined%0Aplatform%3A+Linux+x86_64%0Auser_agent%3A+Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0%0Aurl%3A+https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806%0Areferrer%3A+%0Ah_visitor_id%3A+www-a332052e-fd68-4135-9fd9-fe220bf5abbd%0Awww_visitor_id%3A+www-a332052e-fd68-4135-9fd9-fe220bf5abbd | 34.237.179.253 | 200 OK | 42 B |
URL HTTP/2perr.holavpninstaller.com/client_cgi/perr?id=www_pap_track_visit&info=%7B%22pathname%22%3A%22%2Fbrowser%2F1235%22%7D&ver=0.0.0&browser=firefox&build=version%3A+0.0.0%0Amakeflags%3A+%0Aid%3A+jid1-4P0kohSJxU1qGg%40jetpack%0Abrowser%3A+firefox%0Abrowser_build%3A+undefined%0Aplatform%3A+Linux+x86_64%0Auser_agent%3A+Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0%0Aurl%3A+https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806%0Areferrer%3A+%0Ah_visitor_id%3A+www-a332052e-fd68-4135-9fd9-fe220bf5abbd%0Awww_visitor_id%3A+www-a332052e-fd68-4135-9fd9-fe220bf5abbd IP34.237.179.253:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /client_cgi/perr?id=www_pap_track_visit&info=%7B%22pathname%22%3A%22%2Fbrowser%2F1235%22%7D&ver=0.0.0&browser=firefox&build=version%3A+0.0.0%0Amakeflags%3A+%0Aid%3A+jid1-4P0kohSJxU1qGg%40jetpack%0Abrowser%3A+firefox%0Abrowser_build%3A+undefined%0Aplatform%3A+Linux+x86_64%0Auser_agent%3A+Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0)+Gecko%2F20100101+Firefox%2F105.0%0Aurl%3A+https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806%0Areferrer%3A+%0Ah_visitor_id%3A+www-a332052e-fd68-4135-9fd9-fe220bf5abbd%0Awww_visitor_id%3A+www-a332052e-fd68-4135-9fd9-fe220bf5abbd HTTP/1.1
Host: perr.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://holavpninstaller.com
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:57 GMT
vary: Origin
x-hola-ts: 1670554977181
x-hola-conf-ver: 45
access-control-allow-origin: https://holavpninstaller.com
cache-control: private,no-store
access-control-allow-credentials: true
access-control-allow-headers: x-xsrf-token
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash615fddb7dcff0826f0a7dd4140f370b6 06d26c99fcf20516839a656c4c5b023088eb4eaa f561bef7be5b58a820d37e40135c8bc83511ae9298e6317bf1761f7cc24941bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4363
Cache-Control: max-age=138891
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Etag: "63920fe2-1d7"
Expires: Sat, 10 Dec 2022 17:37:48 GMT
Last-Modified: Thu, 08 Dec 2022 16:25:06 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| holavpninstaller.com/favicon.ico | 54.225.121.9 | 302 Found | 82 B |
URL HTTP/2holavpninstaller.com/favicon.ico IP54.225.121.9:0
File typeASCII text, with no line terminators Hashfab6df95d22af6f7223baec31d7e3c2f 5b0f93ec640719c69678e811c3d4e1af5b4d30af 2fde297a3d9355ba9bbb941e9d3df0a0d2364020acadc10f3dcec6eb7630addf
GET /favicon.ico HTTP/1.1
Host: holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806
Cookie: XSRF-TOKEN=9228cf1c63a24e3783861d98a36eaee416e878cabdce879b; i18next=en; h_visitor_id=www-a332052e-fd68-4135-9fd9-fe220bf5abbd; ui_testing={%22test_installer_version_conf%22:{%22name%22:%22test_installer_version%22%2C%22on%22:0.1%2C%22ssr%22:1}%2C%22test_installer_version%22:false}; c_browser=Amb3; _gcl_au=1.1.144525141.1670554976; tid=lbfxat5e.8lyrgg; PAPVisitorId=wcOe9nKJtyvltI1DpfWnQsDWfe4NRzlL
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx
date: Fri, 09 Dec 2022 03:02:57 GMT
content-type: text/plain; charset=utf-8
content-length: 82
location: //s6m9m3g5.map2.ssl.hwcdn.net/favicon.ico?md5=79485-df76d7ec
vary: Accept, Accept-Encoding
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/gseccovsslca2018 |  104.18.21.226 | 200 OK | 937 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.21.226:0
Hashddc84a39bf7a1386b370a8b04cc3a245 51b6fe1e56e483370c3a6406e444b20ab6cd4047 64b906011829a10e178f33585355ac229d140f0975b661bd5fe31f8e1d252a3c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:02:57 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Mon, 12 Dec 2022 23:34:23 GMT
ETag: "51b6fe1e56e483370c3a6406e444b20ab6cd4047"
Last-Modified: Thu, 08 Dec 2022 23:34:24 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1762
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776a81408f34b4eb-OSL
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash795e67bdfadc3c890a663080413b56b7 fdefde3befb6aceac3c337c34c8d738f5091908c 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/j/collect?v=1&_v=j98&a=1851642506&t=pageview&_s=1&dl=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&ul=en-us&de=UTF-8&dt=Hola%20Browser%20-%20Access%20Global%20Content&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=1373304003&gjid=425045641&cid=966739637.1670554977&tid=UA-36775596-1&_gid=2056310679.1670554977&_r=1>m=2wgbu0NH398RP&z=1596663929 | 142.250.74.14 | 200 OK | 2 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j98&a=1851642506&t=pageview&_s=1&dl=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&ul=en-us&de=UTF-8&dt=Hola%20Browser%20-%20Access%20Global%20Content&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=1373304003&gjid=425045641&cid=966739637.1670554977&tid=UA-36775596-1&_gid=2056310679.1670554977&_r=1>m=2wgbu0NH398RP&z=1596663929 IP142.250.74.14:0
File typeASCII text, with no line terminators Hashcc7a1e792bca8ccb1946b7a07f6dbc03 11a2757082428311f587b7664fa9840376137f80 de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j98&a=1851642506&t=pageview&_s=1&dl=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&ul=en-us&de=UTF-8&dt=Hola%20Browser%20-%20Access%20Global%20Content&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=1373304003&gjid=425045641&cid=966739637.1670554977&tid=UA-36775596-1&_gid=2056310679.1670554977&_r=1>m=2wgbu0NH398RP&z=1596663929 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://holavpninstaller.com
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://holavpninstaller.com
date: Fri, 09 Dec 2022 03:02:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2556512b197b09798af71bea10bb4bbb 23b647aca5f8294ae82fa8cc7e2215ebe3347b60 3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hasha0905812e8498e6c5c0a9b4b584b972f 039b784fd1e0152ec7f49a54ba027f0b2bd1e833 ee3531ef0f334dcd73a86b1e4365a020d5db69ff7b82bad136eaf1a8e9d3b47f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash32d90ff0cc366730c3633c1201b4c058 f4175292b607197a15085e14bf69df301dff6706 b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| connect.facebook.net/en_US/fbevents.js | 157.240.221.16 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP157.240.221.16:0
File typeASCII text, with very long lines (64348) Hash44ecaa3c2a4929a40141edc4540aaf84 f29a573182333b2500d41bfc389d6c5232dfb348 6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: cMoIbzakf7ct5A+oJ8vxNrzGu6wg26tbvaKp3qmU3LzjRHHklDsFkLP22zMI25E7JLI6zgNp+Wlew2wKNDcpAQ==
content-length: 27340
x-fb-trip-id: 1679558926
date: Fri, 09 Dec 2022 03:02:57 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash615fddb7dcff0826f0a7dd4140f370b6 06d26c99fcf20516839a656c4c5b023088eb4eaa f561bef7be5b58a820d37e40135c8bc83511ae9298e6317bf1761f7cc24941bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4363
Cache-Control: max-age=138891
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Etag: "63920fe2-1d7"
Expires: Sat, 10 Dec 2022 17:37:48 GMT
Last-Modified: Thu, 08 Dec 2022 16:25:06 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
|
|
| www.google.no/pagead/1p-conversion/981843084/?random=1670554975904&cv=11&fst=1670554975904&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=03CwCKSw9f0BEIz5ltQD&hn=www.google.com&frm=0&url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&tiba=Hola%20Browser%20-%20Access%20Global%20Content&value=pageview&bttype=purchase&auid=144525141.1670554976&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 | 142.250.74.163 | 200 OK | 63 B |
URL HTTP/2www.google.no/pagead/1p-conversion/981843084/?random=1670554975904&cv=11&fst=1670554975904&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=03CwCKSw9f0BEIz5ltQD&hn=www.google.com&frm=0&url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&tiba=Hola%20Browser%20-%20Access%20Global%20Content&value=pageview&bttype=purchase&auid=144525141.1670554976&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 IP142.250.74.163:0
File typeASCII text, with no line terminators Hash0339f8f57d1bf75003db591e28957e45 ae2286e497c9f76a02cb40c40a674b73bd293b76 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/981843084/?random=1670554975904&cv=11&fst=1670554975904&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&label=03CwCKSw9f0BEIz5ltQD&hn=www.google.com&frm=0&url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&tiba=Hola%20Browser%20-%20Access%20Global%20Content&value=pageview&bttype=purchase&auid=144525141.1670554976&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 09 Dec 2022 03:02:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/metrika/tag.js |  93.158.134.119 | 200 OK | 74 kB |
URL HTTP/2mc.yandex.ru/metrika/tag.js IP93.158.134.119:0
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (598) Hash4ba71e95391652850ae1357c3f86070a 9fb4192b8c54fe215edbbf464aaa645fc29a0e49 0792ded85ac6357e2ca3a90ea9fedc6bb835610614f35a3a6766f3fc9fa7b3e1
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73711
date: Fri, 09 Dec 2022 03:02:57 GMT
access-control-allow-origin: *
etag: "6391b12a-11fef"
expires: Fri, 09 Dec 2022 04:02:57 GMT
last-modified: Thu, 08 Dec 2022 12:40:58 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash32d90ff0cc366730c3633c1201b4c058 f4175292b607197a15085e14bf69df301dff6706 b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 03:02:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| holavpninstaller.com/users/get_user?source=login&tz_offset=0 | 54.225.121.9 | 200 OK | 46 B |
URL HTTP/2holavpninstaller.com/users/get_user?source=login&tz_offset=0 IP54.225.121.9:0
File typeJSON data\012- , ASCII text, with no line terminators Hash52b663d2c5b997506f5cbae1a6d51baf 4dcfa8325fd386c93d2cf5fd3ef15c8b2593e368 ccd6a2170d1db66e6f4b53321ea21e766ecbf52a0b93c5aff5f96024fe700416
GET /users/get_user?source=login&tz_offset=0 HTTP/1.1
Host: holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806
Connection: keep-alive
Cookie: XSRF-TOKEN=9228cf1c63a24e3783861d98a36eaee416e878cabdce879b; i18next=en; h_visitor_id=www-a332052e-fd68-4135-9fd9-fe220bf5abbd; ui_testing={%22test_installer_version_conf%22:{%22name%22:%22test_installer_version%22%2C%22on%22:0.1%2C%22ssr%22:1}%2C%22test_installer_version%22:false}; c_browser=Amb3; _gcl_au=1.1.144525141.1670554976; tid=lbfxat5e.8lyrgg; PAPVisitorId=wcOe9nKJtyvltI1DpfWnQsDWfe4NRzlL; _ga=GA1.2.966739637.1670554977; _gid=GA1.2.2056310679.1670554977; _gat_UA-36775596-1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:57 GMT
content-type: application/json; charset=utf-8
content-length: 46
vary: Origin, Accept-Encoding
set-cookie: user=%7B%7D; Domain=.holavpninstaller.com; Path=/; Secure
connect.sid=s%3Ayh3ff7RWFnAhVNf3lsSwf_7GgfCLRptZ.24jwr4F%2FJgPTz9OkZ7YBDdCUBQAd%2FdECACzY7IBd%2B%2BM; Path=/; Expires=Sat, 09 Dec 2023 03:02:57 GMT; HttpOnly; Secure; SameSite=None
cache-control: private,no-store
etag: W/"2e-Tc+oMl/Thsk9LPX9PvFciyWT42g"
X-Firefox-Spdy: h2
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-36775596-1&cid=966739637.1670554977&jid=1373304003&gjid=425045641&_gid=2056310679.1670554977&_u=YEBAAEAAAAAAACAAI~&z=614023812 | 108.177.14.154 | 200 OK | 4 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-36775596-1&cid=966739637.1670554977&jid=1373304003&gjid=425045641&_gid=2056310679.1670554977&_u=YEBAAEAAAAAAACAAI~&z=614023812 IP108.177.14.154:0
File typeASCII text, with no line terminators Hash48c0473b7821185d937e685216e2168b 3743e47f8a429a5e87b86cb582d78940733d9d2e 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-36775596-1&cid=966739637.1670554977&jid=1373304003&gjid=425045641&_gid=2056310679.1670554977&_u=YEBAAEAAAAAAACAAI~&z=614023812 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://holavpninstaller.com
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://holavpninstaller.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 09 Dec 2022 03:02:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/81472444?wmode=7&page-url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A2327%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A1555167718950%3Ahid%3A505561908%3Az%3A0%3Ai%3A20221209030256%3Aet%3A1670554977%3Ac%3A1%3Arn%3A926844273%3Arqn%3A1%3Au%3A1670554977989984909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A10%2C723%2C196%2C0%2C390%2C0%2C%2C972%2C3%2C%2C%2C%2C2326%3Aco%3A0%3Ans%3A1670554973281%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670554977%3At%3AHola%20Browser%20-%20Access%20Global%20Content&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) | 93.158.134.119 | 302 Found | 400 B |
URL HTTP/2mc.yandex.ru/watch/81472444?wmode=7&page-url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A2327%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A1555167718950%3Ahid%3A505561908%3Az%3A0%3Ai%3A20221209030256%3Aet%3A1670554977%3Ac%3A1%3Arn%3A926844273%3Arqn%3A1%3Au%3A1670554977989984909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A10%2C723%2C196%2C0%2C390%2C0%2C%2C972%2C3%2C%2C%2C%2C2326%3Aco%3A0%3Ans%3A1670554973281%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670554977%3At%3AHola%20Browser%20-%20Access%20Global%20Content&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) IP93.158.134.119:0
File typeJSON data\012- , ASCII text, with very long lines (400), with no line terminators Hasha3e52bf3117200d3adf5f8ca4e55c10a c39ba7fe87ed00ea2b89ffa3f265bc6201b9bc2c 93bd3613f008209162bdd166da0de1ca9d78db9e4c81164bc1055395f642f542
GET /watch/81472444?wmode=7&page-url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A2327%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A1555167718950%3Ahid%3A505561908%3Az%3A0%3Ai%3A20221209030256%3Aet%3A1670554977%3Ac%3A1%3Arn%3A926844273%3Arqn%3A1%3Au%3A1670554977989984909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A10%2C723%2C196%2C0%2C390%2C0%2C%2C972%2C3%2C%2C%2C%2C2326%3Aco%3A0%3Ans%3A1670554973281%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670554977%3At%3AHola%20Browser%20-%20Access%20Global%20Content&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://holavpninstaller.com
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/81472444/1?wmode=7&page-url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A2327%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A1555167718950%3Ahid%3A505561908%3Az%3A0%3Ai%3A20221209030256%3Aet%3A1670554977%3Ac%3A1%3Arn%3A926844273%3Arqn%3A1%3Au%3A1670554977989984909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A10%2C723%2C196%2C0%2C390%2C0%2C%2C972%2C3%2C%2C%2C%2C2326%3Aco%3A0%3Ans%3A1670554973281%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670554977%3At%3AHola%20Browser%20-%20Access%20Global%20Content&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 09 Dec 2022 03:02:57 GMT
access-control-allow-origin: https://holavpninstaller.com
set-cookie: yabs-sid=974645391670554977; Path=/; SameSite=None; Secure
i=bGFoRoT3hx8uueFqaYyloqQFmvK0azJxriBJcqjg045ofuK6AQpS7XkUVsGdVmFdab+q8VgjTZnhCaJLBqQbBcAxcTw=; Expires=Mon, 06-Dec-2032 03:02:54 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1746325961670554977; Expires=Sat, 09-Dec-2023 03:02:57 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1746325961670554977; Expires=Sat, 09-Dec-2023 03:02:57 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702090977.yc.1670554977#1702090977.yrts.1670554977#1702090977.yrtsi.1670554977; Expires=Sat, 09-Dec-2023 03:02:57 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09-Dec-2022 03:02:57 GMT
last-modified: Fri, 09-Dec-2022 03:02:57 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/metrika/advert.gif | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/metrika/advert.gif IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 09 Dec 2022 03:02:57 GMT
access-control-allow-origin: *
etag: "6391b12a-2b"
expires: Fri, 09 Dec 2022 04:02:57 GMT
accept-ranges: bytes
last-modified: Thu, 08 Dec 2022 12:40:58 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=465027364356184&ev=PageView&dl=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&rl=&if=false&ts=1670554976953&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670554976952.1038348194&it=1670554976655&coo=false&rqm=GET | 157.240.221.35 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=465027364356184&ev=PageView&dl=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&rl=&if=false&ts=1670554976953&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670554976952.1038348194&it=1670554976655&coo=false&rqm=GET IP157.240.221.35:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=465027364356184&ev=PageView&dl=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&rl=&if=false&ts=1670554976953&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670554976952.1038348194&it=1670554976655&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 09 Dec 2022 03:02:57 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hash11530ac013db0d867fc877f1b563893c e5565abd8ba91b074ed6a9fb3b27461cdbb98b81 09479cba689bb06a242f0dabd0f7829cdfdc2a274b0f0f4a9c9d096196a5ca10
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:02:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 20:03:40 GMT
Expires: Tue, 13 Dec 2022 20:03:39 GMT
Etag: "e5565abd8ba91b074ed6a9fb3b27461cdbb98b81"
Cache-Control: max-age=406241,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776a8140ed5b0b51-OSL
|
|
| s6m9m3g5.map2.ssl.hwcdn.net/favicon.ico?md5=79485-df76d7ec | 209.197.3.7 | 200 OK | 56 kB |
URL HTTP/1.1s6m9m3g5.map2.ssl.hwcdn.net/favicon.ico?md5=79485-df76d7ec IP209.197.3.7:0
File typeMS Windows icon resource - 20 icons, 24x24, 8 bits/pixel, 20x20, 8 bits/pixel\012- data Hash92d15225fb6aadcd67a4357c0dde25ea f5db5e3ea49dd7ca772ee318e2cd073f0d93f6cc 0f35cd82db4a8692044d6ad36cfd26566cc915c3a488b63fb844054bb8d0a581
GET /favicon.ico?md5=79485-df76d7ec HTTP/1.1
Host: s6m9m3g5.map2.ssl.hwcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 03:02:58 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 56079
Content-Type: image/x-icon
Last-Modified: Sat, 01 Jan 2000 00:00:00 GMT
Accept-Ranges: bytes
Server: nginx
Cache-Control: public,max-age=31536000
ETag: W/"md5-79485-df76d7ec"
Vary: Origin
X-HW: 1670554977.dop009.sk1.t,1670554978.cds069.sk1.shn,1670554978.dop009.sk1.t,1670554978.cds260.sk1.c
|
|
| mc.yandex.ru/watch/81472444/1?page-url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&charset=utf-8&hittoken=1670554977_4679e225190635bdfc3dc17f2c7bacdc89b6bf3890d97e4ce6eaef67fda4df4a&browser-info=pa%3A1%3Aar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A1555167718950%3Ahid%3A505561908%3Az%3A0%3Ai%3A20221209030257%3Aet%3A1670554977%3Ac%3A1%3Arn%3A570108018%3Arqn%3A2%3Au%3A1670554977989984909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670554973281%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1670554977&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(0)&force-urlencoded=1&site-info=%7B%22__ymu%22%3A%7B%22test_installer_version%22%3A0%7D%7D | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/81472444/1?page-url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&charset=utf-8&hittoken=1670554977_4679e225190635bdfc3dc17f2c7bacdc89b6bf3890d97e4ce6eaef67fda4df4a&browser-info=pa%3A1%3Aar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A1555167718950%3Ahid%3A505561908%3Az%3A0%3Ai%3A20221209030257%3Aet%3A1670554977%3Ac%3A1%3Arn%3A570108018%3Arqn%3A2%3Au%3A1670554977989984909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670554973281%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1670554977&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(0)&force-urlencoded=1&site-info=%7B%22__ymu%22%3A%7B%22test_installer_version%22%3A0%7D%7D IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/81472444/1?page-url=https%3A%2F%2Fholavpninstaller.com%2Fbrowser%2F1235%3Fcam%3Dam%26filename%3D%5BS2E1%5D%2520The%2520Dundies%26clickid%3D3460279205906603210%26subid%3D916806&charset=utf-8&hittoken=1670554977_4679e225190635bdfc3dc17f2c7bacdc89b6bf3890d97e4ce6eaef67fda4df4a&browser-info=pa%3A1%3Aar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A941%3Acn%3A1%3Adp%3A0%3Als%3A1555167718950%3Ahid%3A505561908%3Az%3A0%3Ai%3A20221209030257%3Aet%3A1670554977%3Ac%3A1%3Arn%3A570108018%3Arqn%3A2%3Au%3A1670554977989984909%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670554973281%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1670554977&t=gdpr(14)mc(p-1-up-1)clc(0-0-0)rqnt(2)aw(1)ti(0)&force-urlencoded=1&site-info=%7B%22__ymu%22%3A%7B%22test_installer_version%22%3A0%7D%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://holavpninstaller.com
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 09 Dec 2022 03:02:58 GMT
access-control-allow-origin: https://holavpninstaller.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 09-Dec-2022 03:02:58 GMT
last-modified: Fri, 09-Dec-2022 03:02:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| perr.holavpninstaller.com/be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_pap_visitor_id_after_timeout&ver=1.204.953 | 34.237.179.253 | 200 OK | 2 B |
URL HTTP/2perr.holavpninstaller.com/be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_pap_visitor_id_after_timeout&ver=1.204.953 IP34.237.179.253:0
File typeJSON data\012- , ASCII text, with no line terminators Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_pap_visitor_id_after_timeout&ver=1.204.953 HTTP/1.1
Host: perr.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://holavpninstaller.com
Content-Length: 705
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:59 GMT
content-type: application/json; charset=utf-8
content-length: 2
vary: Origin, Accept-Encoding
x-hola-ts: 1670554979928
x-hola-conf-ver: 45
access-control-allow-origin: https://holavpninstaller.com
cache-control: private,no-store
access-control-allow-credentials: true
access-control-allow-headers: x-xsrf-token
X-Firefox-Spdy: h2
|
|
| perr.holavpninstaller.com/be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_pap_changed&ver=1.204.953 | 34.237.179.253 | 200 OK | 2 B |
URL HTTP/2perr.holavpninstaller.com/be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_pap_changed&ver=1.204.953 IP34.237.179.253:0
File typeJSON data\012- , ASCII text, with no line terminators Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /be_client_cgi/perr?tid=lbfxat5e.8lyrgg&browser=firefox&id=www_pap_changed&ver=1.204.953 HTTP/1.1
Host: perr.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Origin: https://holavpninstaller.com
Content-Length: 804
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:59 GMT
content-type: application/json; charset=utf-8
content-length: 2
vary: Origin, Accept-Encoding
x-hola-ts: 1670554979937
x-hola-conf-ver: 45
access-control-allow-origin: https://holavpninstaller.com
cache-control: private,no-store
access-control-allow-credentials: true
access-control-allow-headers: x-xsrf-token
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/21a35820304a59ba40b1f7d65acb91c8.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 0 B |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/21a35820304a59ba40b1f7d65acb91c8.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/21a35820304a59ba40b1f7d65acb91c8.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 28676
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-243048-97444afb"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds205.sk1.c
X-Firefox-Spdy: h2
|
|
| cdn4.holavpninstaller.com/www/hola/pub/96ed5852953871d64af12de6831a7b1f.1.204.953.chunk.js?ver=1.204.953 | 205.185.216.42 | 200 OK | 0 B |
URL HTTP/2cdn4.holavpninstaller.com/www/hola/pub/96ed5852953871d64af12de6831a7b1f.1.204.953.chunk.js?ver=1.204.953 IP205.185.216.42:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/96ed5852953871d64af12de6831a7b1f.1.204.953.chunk.js?ver=1.204.953 HTTP/1.1
Host: cdn4.holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Cookie: ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; c_browser=Amb3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 03:02:55 GMT
content-encoding: gzip
content-length: 77135
content-type: application/javascript; charset=utf-8
last-modified: Sat, 01 Jan 2000 00:00:00 GMT
accept-ranges: bytes
server: nginx
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
access-control-allow-origin: *
cache-control: public,max-age=31536000
etag: W/"md5-267214-9ed9f789"
vary: Origin
x-hw: 1670554975.dop227.sk1.t,1670554975.cds255.sk1.hn,1670554975.cds012.sk1.c
X-Firefox-Spdy: h2
|
|
| holavpninstaller.com/www/hola/pub/locale/en/translation.json | 54.225.121.9 | 200 OK | 0 B |
URL HTTP/2holavpninstaller.com/www/hola/pub/locale/en/translation.json IP54.225.121.9:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/locale/en/translation.json HTTP/1.1
Host: holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806
Connection: keep-alive
Cookie: XSRF-TOKEN=9228cf1c63a24e3783861d98a36eaee416e878cabdce879b; i18next=en; h_visitor_id=www-a332052e-fd68-4135-9fd9-fe220bf5abbd; ui_testing={%22test_installer_version_conf%22:{%22name%22:%22test_installer_version%22%2C%22on%22:0.1%2C%22ssr%22:1}%2C%22test_installer_version%22:false}; c_browser=Amb3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:56 GMT
content-type: application/json; charset=utf-8
strict-transport-security: max-age=63072000
vary: Origin, Accept-Encoding
x-content-type-options: nosniff
cache-control: public,max-age=10
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806 | 54.225.121.9 | 200 OK | 0 B |
URL HTTP/2holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806 IP54.225.121.9:0
GET /browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806 HTTP/1.1
Host: holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:55 GMT
content-type: text/html; charset=utf-8
set-cookie: XSRF-TOKEN=9228cf1c63a24e3783861d98a36eaee416e878cabdce879b; Max-Age=86400; Path=/; Expires=Sat, 10 Dec 2022 03:02:55 GMT; Secure; SameSite=None
i18next=en; Path=/; Expires=Sat, 09 Dec 2023 03:02:55 GMT; SameSite=Strict
h_visitor_id=www-a332052e-fd68-4135-9fd9-fe220bf5abbd; Max-Age=31536000; Path=/; Expires=Sat, 09 Dec 2023 03:02:55 GMT
ui_testing=%7B%22test_installer_version_conf%22%3A%7B%22name%22%3A%22test_installer_version%22%2C%22on%22%3A0.1%2C%22ssr%22%3A1%7D%2C%22test_installer_version%22%3Afalse%7D; Domain=.holavpninstaller.com; Path=/
c_browser=Amb3; Max-Age=3600; Domain=.holavpninstaller.com; Path=/; Expires=Fri, 09 Dec 2022 04:02:55 GMT
strict-transport-security: max-age=63072000
vary: Origin, Accept-Encoding
x-content-type-options: nosniff
content-language: en
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' https://metrika.yandex.ru/
cache-control: private, no-cache, no-store, must-revalidate
x-xss-protection: 0
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500 | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500 IP142.250.74.106:0
GET /css2?family=IBM+Plex+Mono:wght@400;500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 03:02:55 GMT
date: Fri, 09 Dec 2022 03:02:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| holavpninstaller.com/www/hola/pub/locale/en/hp_new_txt.json | 54.225.121.9 | 200 OK | 0 B |
URL HTTP/2holavpninstaller.com/www/hola/pub/locale/en/hp_new_txt.json IP54.225.121.9:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /www/hola/pub/locale/en/hp_new_txt.json HTTP/1.1
Host: holavpninstaller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://holavpninstaller.com/browser/1235?cam=am&filename=[S2E1]%20The%20Dundies&clickid=3460279205906603210&subid=916806
Connection: keep-alive
Cookie: XSRF-TOKEN=9228cf1c63a24e3783861d98a36eaee416e878cabdce879b; i18next=en; h_visitor_id=www-a332052e-fd68-4135-9fd9-fe220bf5abbd; ui_testing={%22test_installer_version_conf%22:{%22name%22:%22test_installer_version%22%2C%22on%22:0.1%2C%22ssr%22:1}%2C%22test_installer_version%22:false}; c_browser=Amb3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 03:02:56 GMT
content-type: application/json; charset=utf-8
strict-transport-security: max-age=63072000
vary: Origin, Accept-Encoding
x-content-type-options: nosniff
cache-control: public,max-age=10
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Montserrat:400,500,600,700 | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Montserrat:400,500,600,700 IP142.250.74.106:0
GET /css?family=Montserrat:400,500,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 03:02:55 GMT
date: Fri, 09 Dec 2022 03:02:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap IP142.250.74.106:0
GET /css2?family=Inter:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://holavpninstaller.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 03:02:55 GMT
date: Fri, 09 Dec 2022 03:02:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|