| gdata.help/ |  212.23.151.234 | 301 Moved Permanently | 0 B |
IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
content-length: 0
location: https://www.gdata.help/
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashaabe410b4bbe4d8beb0e4561d3aa158e e1788632902ddea62cdd9e7ad6009a75ffb69788 ad535e27b201e92670770b2b868c58f7c05633ec66490a41ef4592f062834c1f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD535E27B201E92670770B2B868C58F7C05633EC66490A41EF4592F062834C1F"
Last-Modified: Wed, 09 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6410
Expires: Wed, 09 Nov 2022 08:42:46 GMT
Date: Wed, 09 Nov 2022 06:55:56 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash7908acd0c083145e2b454aaeb063c236 0696647bb0a4118327f637a50ebcc21bac39d592 ffc30b68df0b33d67f31e37bbf5ae5cf4c23e1c8b8197bf76a95ee06bec4cd36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4254
Cache-Control: max-age=103569
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 06:55:56 GMT
Etag: "636a2fef-1d7"
Expires: Thu, 10 Nov 2022 11:42:05 GMT
Last-Modified: Tue, 08 Nov 2022 10:31:11 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2b57492bf85f4ae6abbd1641b17dc9ab 008e71ec05d47bf025ca64e17da2ea1bd8e71111 17894427c471f7fa02ca274795dc55df1bfc99d7bd83f9ee36249394035110fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17894427C471F7FA02CA274795DC55DF1BFC99D7BD83F9EE36249394035110FD"
Last-Modified: Wed, 09 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14297
Expires: Wed, 09 Nov 2022 10:54:13 GMT
Date: Wed, 09 Nov 2022 06:55:56 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: bWUv4uFYLmOVpj8D0krIAsRXPa/G7oW3qGumGChw4URX1tYXZXHq6QjvkW44T7JYUew5A9zUGx2zh1CBHwuDVw==
x-amz-request-id: 8WZVYQ1PM760QTMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 09 Nov 2022 06:48:52 GMT
age: 424
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 09 Nov 2022 06:55:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ |  104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hash9bb07792e4d5175622b608f4836a0252 b57bcbbc8ea925c7b659f25aacdf9ba61de3634c 0c3682ef35b43f6fd63d53e6e85b15acff5e5e775e483a16519f01a2efcdeaba
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 06:55:56 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 06 Nov 2022 00:43:39 GMT
Expires: Sun, 13 Nov 2022 00:43:38 GMT
Etag: "b57bcbbc8ea925c7b659f25aacdf9ba61de3634c"
Cache-Control: max-age=322661,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7674a54b1938b511-OSL
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash2a47d129a3af5f02c654faf925c60273 9ad27ed9f4500c939260a677c12e702599b00fa9 0e031af077bf7009ffefada782407a247bbd31bddc96994c68de7bfe902bf992
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5690
Cache-Control: max-age=99939
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 06:55:57 GMT
Etag: "636a1c26-1d7"
Expires: Thu, 10 Nov 2022 10:41:36 GMT
Last-Modified: Tue, 08 Nov 2022 09:06:46 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
|
|
| www.gdata.help/images/icons/linkext7.gif | 212.23.151.234 | 200 OK | 166 B |
URL HTTP/2www.gdata.help/images/icons/linkext7.gif IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
File typeGIF image data, version 89a, 7 x 7\012- data Hasha552528f9f67fb79fdbee14e7f03d762 46f997f4f9288e4d126cf7c29e89fe49c3a7dcce 9dffa9ced81b990b68f95a146a07eebd50bb5e013a080b6930d8a3b3e2b3a9bd
GET /images/icons/linkext7.gif HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:57 GMT
content-type: image/gif
content-length: 166
accept-ranges: bytes
etag: W/"166-1654266284000"
last-modified: Fri, 03 Jun 2022 14:24:44 GMT
X-Firefox-Spdy: h2
|
|
| www.gdata.help/download/attachments/65589/atl.site.logo?version=1&modificationDate=1567602300000&api=v2 | 212.23.151.234 | 200 OK | 3.2 kB |
URL HTTP/2www.gdata.help/download/attachments/65589/atl.site.logo?version=1&modificationDate=1567602300000&api=v2 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
File typePNG image data, 34 x 48, 8-bit/color RGBA, non-interlaced\012- data Hashef8e82a83c2f2e7b57984525bf587c21 3ca78ea3488149c5890ec2ef30f828460e98b92a 264a368ea330fda3e83102a7d721fba674a73001992b6ea1d0096363ce621db7
GET /download/attachments/65589/atl.site.logo?version=1&modificationDate=1567602300000&api=v2 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:57 GMT
content-type: image/png;charset=UTF-8
content-length: 3181
cache-control: private, max-age=315360000
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-confluence-request-time: 1667976957220
last-modified: Mon, 19 Jan 1970 03:26:42 GMT
accept-ranges: bytes
content-disposition: inline; filename="atl.site.logo"
X-Firefox-Spdy: h2
|
|
| www.gdata.help/download/attachments/1703954/DOC?version=2&modificationDate=1567602927000&api=v2 | 212.23.151.234 | 200 OK | 22 kB |
URL HTTP/2www.gdata.help/download/attachments/1703954/DOC?version=2&modificationDate=1567602927000&api=v2 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data Hashf0c500176bdf96d3794f5c2807bafeea c9a707a0694b378d8f374541b2dc257207618d46 cf9b09a99f6f72fd01f119823b6ca5a5677027ff04978bcb787187166a044d71
GET /download/attachments/1703954/DOC?version=2&modificationDate=1567602927000&api=v2 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:57 GMT
content-type: image/png;charset=UTF-8
content-length: 22249
cache-control: private, max-age=315360000
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-confluence-request-time: 1667976957234
last-modified: Mon, 19 Jan 1970 03:26:42 GMT
accept-ranges: bytes
content-disposition: inline; filename="DOC"
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.187.146.10 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.187.146.10:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: obL8acyVsMmn+hey9m1MMQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: edAzphE4hUBjXy2RP8K2em7uBBA=
|
|
| www.gdata.help/s/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/45/_/favicon.ico | 212.23.151.234 | 200 OK | 163 kB |
URL HTTP/2www.gdata.help/s/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/45/_/favicon.ico IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
File typeMS Windows icon resource - 7 icons, 16x16, 32 bits/pixel, 16x16, 32 bits/pixel\012- data Size163 kB (163242 bytes) Hash868449b5976e244b569d613f9649e8b0 82ec851270a5f724239b0bbc6ea998379c766d46 53ef311f0011ac0f0e9c122a660b5215d82604e75f79d209a8352049ffb80b39
GET /s/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/45/_/favicon.ico HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: image/x-icon
content-length: 163242
X-Firefox-Spdy: h2
|
|
| tracking.gdatasoftware.com/matomo.php?action_name=Documentation%20-%20Documentation%20-%20Help%20Center&idsite=30&rec=1&r=447055&h=6&m=55&s=55&url=https%3A%2F%2Fwww.gdata.help%2F&_id=&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=SOCQx9&pf_net=345&pf_srv=119&pf_tfr=25&pf_dm1=1664&uadata=%7B%7D | 212.23.151.164 | 204 No Content | 0 B |
URL HTTP/2tracking.gdatasoftware.com/matomo.php?action_name=Documentation%20-%20Documentation%20-%20Help%20Center&idsite=30&rec=1&r=447055&h=6&m=55&s=55&url=https%3A%2F%2Fwww.gdata.help%2F&_id=&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=SOCQx9&pf_net=345&pf_srv=119&pf_tfr=25&pf_dm1=1664&uadata=%7B%7D IP212.23.151.164:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /matomo.php?action_name=Documentation%20-%20Documentation%20-%20Help%20Center&idsite=30&rec=1&r=447055&h=6&m=55&s=55&url=https%3A%2F%2Fwww.gdata.help%2F&_id=&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=SOCQx9&pf_net=345&pf_srv=119&pf_tfr=25&pf_dm1=1664&uadata=%7B%7D HTTP/1.1
Host: tracking.gdatasoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://www.gdata.help
Connection: keep-alive
Referer: https://www.gdata.help/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 09 Nov 2022 06:55:58 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.gdata.help
vary: Origin
gd_country_code: NO
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' *.gdata.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata-advancedanalytics.com *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com; frame-src 'self' gdata.jobbase.io gdata.onlyfy.jobs *.gdata.de www.paypal.com *.criteo.com *.criteo.net *.onfastspring.com *.saferpay.com www.youtube-nocookie.com www.google.com www.google.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com www.awin1.com bid.g.doubleclick.net tpc.googlesyndication.com fbanalytics.org m.youtube.com player.vimeo.com gdata.jobbase.io; report-uri https://www.gdatasoftware.com/__cspreporting__
x-xss-protection: 0
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
|
|
| www.gdata.help/rest/shortcuts/latest/shortcuts/8402/ddced44bb0598e055d3e72e58aec601d?_=1667976954734 | 212.23.151.234 | 200 OK | 2.9 kB |
URL HTTP/2www.gdata.help/rest/shortcuts/latest/shortcuts/8402/ddced44bb0598e055d3e72e58aec601d?_=1667976954734 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
Hash82d93601a66938d35fbae92b94b3b54b 9a411f67054a9e3c29f2e4f5d9d6c52a04cb62dd 3b062d79a7fe03408673eacd560e9b58b2ae3e90de96ad48a7b81c8ab55324e7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /rest/shortcuts/latest/shortcuts/8402/ddced44bb0598e055d3e72e58aec601d?_=1667976954734 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: application/json
cache-control: no-transform, max-age=2147483647
x-content-type-options: nosniff
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1b6e55fb9c16b8ec503ca6fb935f650f 1e392159765235158a218248677dc21c46bc4f42 89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5696
Expires: Wed, 09 Nov 2022 08:30:54 GMT
Date: Wed, 09 Nov 2022 06:55:58 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1b6e55fb9c16b8ec503ca6fb935f650f 1e392159765235158a218248677dc21c46bc4f42 89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5696
Expires: Wed, 09 Nov 2022 08:30:54 GMT
Date: Wed, 09 Nov 2022 06:55:58 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1b6e55fb9c16b8ec503ca6fb935f650f 1e392159765235158a218248677dc21c46bc4f42 89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5696
Expires: Wed, 09 Nov 2022 08:30:54 GMT
Date: Wed, 09 Nov 2022 06:55:58 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b197dc2-1415-4c19-8d36-1fa334168ba5.jpeg | 34.120.237.76 | 200 OK | 9.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b197dc2-1415-4c19-8d36-1fa334168ba5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash29429581f8dc762c69c5916009f70080 9265cae98aa663a5498925b70079abdd8e7031fd c3deee74c80905a1e92b84868b9987cb30ad7a210dca066b97c325cc2c83872e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b197dc2-1415-4c19-8d36-1fa334168ba5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9313
x-amzn-requestid: be3f6b0f-cf61-4bec-ad1a-87abdbc45d73
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bTTTwF5AoAMFZAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636acc17-5ca45b5b1065a4ea492f2ac6;Sampled=0
x-amzn-remapped-date: Tue, 08 Nov 2022 21:37:27 GMT
x-amz-cf-pop: SEA19-C3, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 9lVY7YgQQ0FAP3ItgCSWePY0Msd4RIyBz4eNPc-K51BtnWUjOObv6g==
via: 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 21:43:31 GMT
etag: "9265cae98aa663a5498925b70079abdd8e7031fd"
content-type: image/jpeg
age: 33147
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4e2853cc6ec6223160471401e6871f4b f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: C7GYpM3mXSf0hVyGO9Zzlxa3IHXHdyPlXsvr3i0GoQnaPZF6lO-OwA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 06:24:20 GMT
age: 1898
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.gdata.help/rest/inlinecomments/1.0/comments?containerId=1703956&sv-language-key=en&_=1667976954733 | 212.23.151.234 | 200 OK | 8.2 kB |
URL HTTP/2www.gdata.help/rest/inlinecomments/1.0/comments?containerId=1703956&sv-language-key=en&_=1667976954733 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
Hashca6167ef838c4319c567da1c4c9e9321 9f7b3f5afb5f6142faea53990c8036a2e2131011 fc9565f22d46dce4ffe18afb4e1cc9444c03144c4765f3350fc16154b639e9f8
GET /rest/inlinecomments/1.0/comments?containerId=1703956&sv-language-key=en&_=1667976954733 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: application/json;charset=UTF-8
x-content-type-options: nosniff
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0adf10c-d2d8-4768-a99e-671dd205fa5f.jpeg | 34.120.237.76 | 200 OK | 9.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0adf10c-d2d8-4768-a99e-671dd205fa5f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash10699bfbe3966b42cce253bfd3c09d0d dd74707d8871dd800aa29bda2edc6105bd00adf6 26b571dbe9c885db2a2a6ae4e4a432b843a2815fb34ec976db7a3e6148a4dc8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0adf10c-d2d8-4768-a99e-671dd205fa5f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9741
x-amzn-requestid: 19706043-9952-4148-bf73-815d2b80f88a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKom8FixIAMFjzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63675492-26d889196e698552262b0ef6;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 06:30:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 30pGKplOuXFYhdd8rDJhmKimfi5RdviDma-8hJ6Bf6zrwO8KgVhODw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 22:03:53 GMT
age: 31925
etag: "dd74707d8871dd800aa29bda2edc6105bd00adf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F609c6c88-4535-488a-8bf4-de0e93b9ae31.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F609c6c88-4535-488a-8bf4-de0e93b9ae31.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash86ec3f22045de1a100eccf27d91593ae e26769d82108f89057b05096061f1276d34e223a b863d19ab12945922b4d014c517f5ffe349cefe2bbe1c2f16661371f22378cbd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F609c6c88-4535-488a-8bf4-de0e93b9ae31.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10822
x-amzn-requestid: 1b1e2dfc-4096-45cf-adb3-58f0b1d614bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEAXHFhroAMF_Zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364adc6-7b94977b4143970a48bc1857;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 06:14:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vzUPLMO4CDywKUQvQ9gbltVLYlNher7ZTXYC9A00LfwycdEmG7m9wg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 11:14:46 GMT
age: 70872
etag: "e26769d82108f89057b05096061f1276d34e223a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| tracking.gdatasoftware.com/plugins/HeatmapSessionRecording/configs.php?idsite=30&trackerid=tXwiEY&url=https%3A%2F%2Fwww.gdata.help%2F | 212.23.151.164 | 200 OK | 117 B |
URL HTTP/2tracking.gdatasoftware.com/plugins/HeatmapSessionRecording/configs.php?idsite=30&trackerid=tXwiEY&url=https%3A%2F%2Fwww.gdata.help%2F IP212.23.151.164:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
File typeASCII text, with no line terminators Hash2c0f1c9663c5df12a84a8fc4d6ac53c3 a1a2b519cb580294534cd917f1d5e8f9e8adb8f2 5f4eb5a53bcc7288909aca294c6ef35bc587912c4c43f96e6a04ef1b3902eaef
GET /plugins/HeatmapSessionRecording/configs.php?idsite=30&trackerid=tXwiEY&url=https%3A%2F%2Fwww.gdata.help%2F HTTP/1.1
Host: tracking.gdatasoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: application/javascript
content-length: 117
expires: Wed, 09 Nov 2022 18:55:58 GMT
cache-control: max-age=43200
gd_country_code: NO
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' *.gdata.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata-advancedanalytics.com *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com; frame-src 'self' gdata.jobbase.io gdata.onlyfy.jobs *.gdata.de www.paypal.com *.criteo.com *.criteo.net *.onfastspring.com *.saferpay.com www.youtube-nocookie.com www.google.com www.google.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com www.awin1.com bid.g.doubleclick.net tpc.googlesyndication.com fbanalytics.org m.youtube.com player.vimeo.com gdata.jobbase.io; report-uri https://www.gdatasoftware.com/__cspreporting__
x-xss-protection: 0
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4b0973b-d22d-4fb5-b777-cb6b2ea614f8.jpeg | 34.120.237.76 | 200 OK | 14 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4b0973b-d22d-4fb5-b777-cb6b2ea614f8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfea291bfa3958eac1ec082c954f464e6 1b24dd3abd50d37ef919770c858328dc4f3187ad ff66cca8d93c51768479304fb954fd60d550b142946c47f149e1a3579d6fe235
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4b0973b-d22d-4fb5-b777-cb6b2ea614f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14020
x-amzn-requestid: 2243eecc-7f97-41e4-b516-da8c84cc1ddc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bTTVBGQjIAMF3_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636acc1f-10ead8811b8f8dc26e2e6929;Sampled=0
x-amzn-remapped-date: Tue, 08 Nov 2022 21:37:35 GMT
x-amz-cf-pop: SEA19-C3, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: hUDLrdbHOdDTuHKjFnwiLCPAlWBI1MU3LpWV--ELMf-lLdl4ZToFxw==
via: 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 21:44:13 GMT
etag: "1b24dd3abd50d37ef919770c858328dc4f3187ad"
content-type: image/jpeg
age: 33105
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.gdata.help/s/28f574950bff4d64a485a4459bafddc7-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/621e71338d038f297a14106797a09a27/_/download/contextbatch/js/editor-v4,editor,macro-browser,-_super,-atl.general,-page,-main,-viewcontent,-atl.comments,-browser-metrics-plugin.contrib/batch.js?com.appanvil.aura.license=true&frontend.editor.v4=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&locale=en-US&scm-display-getting-started=true | 212.23.151.234 | 200 OK | 515 kB |
URL HTTP/2www.gdata.help/s/28f574950bff4d64a485a4459bafddc7-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/621e71338d038f297a14106797a09a27/_/download/contextbatch/js/editor-v4,editor,macro-browser,-_super,-atl.general,-page,-main,-viewcontent,-atl.comments,-browser-metrics-plugin.contrib/batch.js?com.appanvil.aura.license=true&frontend.editor.v4=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&locale=en-US&scm-display-getting-started=true IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
Size515 kB (515139 bytes) Hashd99df2ad31306ad19211688b842481f8 92c78f2c8bc1f7ee2bdc94fb05430cc52c593fb2 d5dc8e02cc690b0d5c62e249098b74a9c519798ca01319b33fc06fc923a80446
GET /s/28f574950bff4d64a485a4459bafddc7-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/621e71338d038f297a14106797a09a27/_/download/contextbatch/js/editor-v4,editor,macro-browser,-_super,-atl.general,-page,-main,-viewcontent,-atl.comments,-browser-metrics-plugin.contrib/batch.js?com.appanvil.aura.license=true&frontend.editor.v4=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&locale=en-US&scm-display-getting-started=true HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: text/javascript
x-confluence-request-time: 1667976959254
expires: Thu, 09 Nov 2023 06:55:59 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/synchrony-proxy/resources/js/vendor/sockjs.min.js | 212.23.151.234 | 200 OK | 18 kB |
URL HTTP/2www.gdata.help/synchrony-proxy/resources/js/vendor/sockjs.min.js IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
File typeUnicode text, UTF-8 text, with very long lines (32034) Hash13e505aadf981835790a10ca17d9d536 533d30e146379efe59023575399039adddfa6fa3 416c6085f4429bc4904750003fcb3af34b74d7d95939c4e120a872cedb751320
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /synchrony-proxy/resources/js/vendor/sockjs.min.js HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: application/javascript;charset=utf-8
content-length: 17775
access-control-allow-headers: content-type, accept, x-token, x-atlassian-mau-ignore
access-control-max-age: 86400
content-encoding: gzip
access-control-allow-origin: *
etag: "pWzRSOOq34MQbGLrouECnppGJ10"
vary: Accept-Encoding
cache-control: max-age=300
access-control-allow-methods: GET, PUT, POST, OPTIONS
X-Firefox-Spdy: h2
|
|
| www.gdata.help/synchrony-proxy/v1/data/Synchrony-71db3a7c-8f0e-3618-a1e3-f4f35d95966c/confluence-1703956?state-at=@head&state-format=type-tagged&rewrite-request=true&cached=true | 212.23.151.234 | 200 OK | 2.5 kB |
URL HTTP/2www.gdata.help/synchrony-proxy/v1/data/Synchrony-71db3a7c-8f0e-3618-a1e3-f4f35d95966c/confluence-1703956?state-at=@head&state-format=type-tagged&rewrite-request=true&cached=true IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
File typeASCII text, with very long lines (8758), with no line terminators Hashd75d6df02bac075496699ee4c6ffdffe fbd7db5742efb2d0b09e38ba08faf88238da15ab df34780628b1db22affc89a748daad054ab583c577e1a783b4239b8a9299ed32
POST /synchrony-proxy/v1/data/Synchrony-71db3a7c-8f0e-3618-a1e3-f4f35d95966c/confluence-1703956?state-at=@head&state-format=type-tagged&rewrite-request=true&cached=true HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
X-Requested-With: XMLHttpRequest
Content-Length: 726
Origin: https://www.gdata.help
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: application/json;charset=UTF-8
content-length: 2500
access-control-allow-headers: content-type, accept, x-token, x-atlassian-mau-ignore
access-control-max-age: 86400
content-encoding: gzip
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: no-cache,private
access-control-allow-methods: GET, PUT, POST, OPTIONS
X-Firefox-Spdy: h2
|
|
| www.gdata.help/s/30897ff3f3e82c2bc2774b53ef6907a9-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/621e71338d038f297a14106797a09a27/_/download/contextbatch/css/editor-v4,editor,macro-browser,-_super,-atl.general,-page,-main,-viewcontent,-atl.comments,-browser-metrics-plugin.contrib/batch.css?com.appanvil.aura.license=true&frontend.editor.v4=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&scm-display-getting-started=true | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/s/30897ff3f3e82c2bc2774b53ef6907a9-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/621e71338d038f297a14106797a09a27/_/download/contextbatch/css/editor-v4,editor,macro-browser,-_super,-atl.general,-page,-main,-viewcontent,-atl.comments,-browser-metrics-plugin.contrib/batch.css?com.appanvil.aura.license=true&frontend.editor.v4=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&scm-display-getting-started=true IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /s/30897ff3f3e82c2bc2774b53ef6907a9-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/621e71338d038f297a14106797a09a27/_/download/contextbatch/css/editor-v4,editor,macro-browser,-_super,-atl.general,-page,-main,-viewcontent,-atl.comments,-browser-metrics-plugin.contrib/batch.css?com.appanvil.aura.license=true&frontend.editor.v4=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&scm-display-getting-started=true HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: text/css
x-confluence-request-time: 1667976959254
expires: Thu, 09 Nov 2023 06:55:59 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/s/4b7e2304e74ad2eab13e31abbedac255-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/2fa3934ed1dbeb196ed6f3ece79f3838/_/download/contextbatch/js/request-access-plugin,-_super/batch.js?locale=en-US | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/s/4b7e2304e74ad2eab13e31abbedac255-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/2fa3934ed1dbeb196ed6f3ece79f3838/_/download/contextbatch/js/request-access-plugin,-_super/batch.js?locale=en-US IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /s/4b7e2304e74ad2eab13e31abbedac255-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/2fa3934ed1dbeb196ed6f3ece79f3838/_/download/contextbatch/js/request-access-plugin,-_super/batch.js?locale=en-US HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: text/javascript
x-confluence-request-time: 1667976959682
expires: Thu, 09 Nov 2023 06:55:59 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/s/f1f0025e1e7d49312a3cab4d27ed683f-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/ffc19a9df1ac86c7172136f339aa511c/_/download/contextbatch/js/atl.confluence.plugins.pagetree-desktop,main,page,atl.general,viewcontent,atl.comments,-_super/batch.js?com.appanvil.aura.license=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&locale=en-US&scm-display-getting-started=true | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/s/f1f0025e1e7d49312a3cab4d27ed683f-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/ffc19a9df1ac86c7172136f339aa511c/_/download/contextbatch/js/atl.confluence.plugins.pagetree-desktop,main,page,atl.general,viewcontent,atl.comments,-_super/batch.js?com.appanvil.aura.license=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&locale=en-US&scm-display-getting-started=true IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /s/f1f0025e1e7d49312a3cab4d27ed683f-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/ffc19a9df1ac86c7172136f339aa511c/_/download/contextbatch/js/atl.confluence.plugins.pagetree-desktop,main,page,atl.general,viewcontent,atl.comments,-_super/batch.js?com.appanvil.aura.license=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&locale=en-US&scm-display-getting-started=true HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:57 GMT
content-type: text/javascript
x-confluence-request-time: 1667976957221
expires: Thu, 09 Nov 2023 06:55:57 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/rest/jira-metadata/1.0/metadata/aggregate?pageId=1703956&_=1667976954736 | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/rest/jira-metadata/1.0/metadata/aggregate?pageId=1703956&_=1667976954736 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /rest/jira-metadata/1.0/metadata/aggregate?pageId=1703956&_=1667976954736 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: application/json
x-content-type-options: nosniff
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/rest/highlighting/1.0/panel-items?pageId=1703956&_=1667976954738 | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/rest/highlighting/1.0/panel-items?pageId=1703956&_=1667976954738 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /rest/highlighting/1.0/panel-items?pageId=1703956&_=1667976954738 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: application/json
x-content-type-options: nosniff
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/s/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/45/_/styles/colors.css | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/s/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/45/_/styles/colors.css IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /s/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/45/_/styles/colors.css HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:57 GMT
content-type: text/css;charset=UTF-8
x-confluence-request-time: 1667976957219
expires: Thu, 09 Nov 2023 06:55:57 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/plugins/editor-loader/editor.action?parentPageId=&pageId=1703956&spaceKey=DOC&atl_after_login_redirect=%2F&timeout=12000&_=1667976954732 | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/plugins/editor-loader/editor.action?parentPageId=&pageId=1703956&spaceKey=DOC&atl_after_login_redirect=%2F&timeout=12000&_=1667976954732 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /plugins/editor-loader/editor.action?parentPageId=&pageId=1703956&spaceKey=DOC&atl_after_login_redirect=%2F&timeout=12000&_=1667976954732 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: text/html;charset=UTF-8
cache-control: no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-confluence-request-time: 1667976958818
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/plugins/pagetree/naturalchildren.action?decorator=none&excerpt=false&sort=position&reverse=false&disableLinks=false&expandCurrent=true&placement=sidebar&hasRoot=true&pageId=1703956&treeId=0&startDepth=0&mobile=false&ancestors=1703956&treePageId=1703956&_=1667976954735 | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/plugins/pagetree/naturalchildren.action?decorator=none&excerpt=false&sort=position&reverse=false&disableLinks=false&expandCurrent=true&placement=sidebar&hasRoot=true&pageId=1703956&treeId=0&startDepth=0&mobile=false&ancestors=1703956&treePageId=1703956&_=1667976954735 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /plugins/pagetree/naturalchildren.action?decorator=none&excerpt=false&sort=position&reverse=false&disableLinks=false&expandCurrent=true&placement=sidebar&hasRoot=true&pageId=1703956&treeId=0&startDepth=0&mobile=false&ancestors=1703956&treePageId=1703956&_=1667976954735 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/plain, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: text/html;charset=UTF-8
cache-control: no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
x-confluence-request-time: 1667976958892
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/plugins/macrobrowser/browse-macros.action?detailed=false¯oMetadataClientCacheKey=1667970344179 | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/plugins/macrobrowser/browse-macros.action?detailed=false¯oMetadataClientCacheKey=1667970344179 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /plugins/macrobrowser/browse-macros.action?detailed=false¯oMetadataClientCacheKey=1667970344179 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: application/json;charset=UTF-8
cache-control: public, max-age=315360000
expires: Sat, 06 Nov 2032 06:55:58 GMT
x-confluence-request-time: 1667976958919
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/rest/scroll-versions/1.0/getting-started/DOC?_=1667976954739 | 212.23.151.234 | 401 Unauthorized | 0 B |
URL HTTP/2www.gdata.help/rest/scroll-versions/1.0/getting-started/DOC?_=1667976954739 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /rest/scroll-versions/1.0/getting-started/DOC?_=1667976954739 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 401 Unauthorized
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: application/json
cache-control: no-transform
x-content-type-options: nosniff
vary: User-Agent
www-authenticate: OAuth realm="https%3A%2F%2Fwww.gdata.help"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.gdata.help/ | 212.23.151.234 | 200 OK | 0 B |
IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:56 GMT
content-type: text/html;charset=UTF-8
x-confluence-request-time: 1667976956877
set-cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921; Path=/; HttpOnly
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/s/8c9bcfae02f149576bae4c6090a20d35-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/56cd166f0673cad889194cd9ac6945df/_/download/contextbatch/css/_super/batch.css | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/s/8c9bcfae02f149576bae4c6090a20d35-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/56cd166f0673cad889194cd9ac6945df/_/download/contextbatch/css/_super/batch.css IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /s/8c9bcfae02f149576bae4c6090a20d35-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/56cd166f0673cad889194cd9ac6945df/_/download/contextbatch/css/_super/batch.css HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:57 GMT
content-type: text/css
x-confluence-request-time: 1667976957208
expires: Thu, 09 Nov 2023 06:55:57 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/s/57bce9de06faeefe35fcec7badc746fe-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/ffc19a9df1ac86c7172136f339aa511c/_/download/contextbatch/css/atl.confluence.plugins.pagetree-desktop,main,page,atl.general,viewcontent,atl.comments,-_super/batch.css?com.appanvil.aura.license=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&scm-display-getting-started=true | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/s/57bce9de06faeefe35fcec7badc746fe-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/ffc19a9df1ac86c7172136f339aa511c/_/download/contextbatch/css/atl.confluence.plugins.pagetree-desktop,main,page,atl.general,viewcontent,atl.comments,-_super/batch.css?com.appanvil.aura.license=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&scm-display-getting-started=true IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /s/57bce9de06faeefe35fcec7badc746fe-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/ffc19a9df1ac86c7172136f339aa511c/_/download/contextbatch/css/atl.confluence.plugins.pagetree-desktop,main,page,atl.general,viewcontent,atl.comments,-_super/batch.css?com.appanvil.aura.license=true&gatekeeper-ui-v2=true&highlightactions=true&hostenabled=true&scm-display-getting-started=true HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:57 GMT
content-type: text/css
x-confluence-request-time: 1667976957219
expires: Thu, 09 Nov 2023 06:55:57 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/s/d41d8cd98f00b204e9800998ecf8427e-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/2fa3934ed1dbeb196ed6f3ece79f3838/_/download/contextbatch/css/request-access-plugin,-_super/batch.css | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/s/d41d8cd98f00b204e9800998ecf8427e-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/2fa3934ed1dbeb196ed6f3ece79f3838/_/download/contextbatch/css/request-access-plugin,-_super/batch.css IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /s/d41d8cd98f00b204e9800998ecf8427e-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/2fa3934ed1dbeb196ed6f3ece79f3838/_/download/contextbatch/css/request-access-plugin,-_super/batch.css HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: text/css
x-confluence-request-time: 1667976959679
expires: Thu, 09 Nov 2023 06:55:59 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/rest/analytics/1.0/publish/bulk | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/rest/analytics/1.0/publish/bulk IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /rest/analytics/1.0/publish/bulk HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 2189
Origin: https://www.gdata.help
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: application/json
x-content-type-options: nosniff
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/rest/scroll-versions/1.0/pagetree/DOC?parentScrollPageId=D41797E4017724E1CAA408A931626671&parentPageId=1703956&expandedScrollPageId=D41797E4017724E1CAA408A931626671&expandedPageId=&versionId=current&variantId=all&isShowUnavailablePages=true&sortBy=position&reverseOrder=false&startDepth=0&isShowToplevelPages=false&languageKey=en&openedPageIds=D41797E4017724E1CAA408A931626671&_=1667976954740 | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/rest/scroll-versions/1.0/pagetree/DOC?parentScrollPageId=D41797E4017724E1CAA408A931626671&parentPageId=1703956&expandedScrollPageId=D41797E4017724E1CAA408A931626671&expandedPageId=&versionId=current&variantId=all&isShowUnavailablePages=true&sortBy=position&reverseOrder=false&startDepth=0&isShowToplevelPages=false&languageKey=en&openedPageIds=D41797E4017724E1CAA408A931626671&_=1667976954740 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /rest/scroll-versions/1.0/pagetree/DOC?parentScrollPageId=D41797E4017724E1CAA408A931626671&parentPageId=1703956&expandedScrollPageId=D41797E4017724E1CAA408A931626671&expandedPageId=&versionId=current&variantId=all&isShowUnavailablePages=true&sortBy=position&reverseOrder=false&startDepth=0&isShowToplevelPages=false&languageKey=en&openedPageIds=D41797E4017724E1CAA408A931626671&_=1667976954740 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: application/json
cache-control: no-store, no-transform
x-content-type-options: nosniff
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/rest/scroll-versions/1.0/pagetree/DOC?parentScrollPageId=D41797E4017724E1CAA408A931626671&parentPageId=1703956&expandedScrollPageId=D41797E4017724E1CAA408A931626671&expandedPageId=1703956&versionId=current&variantId=all&isShowUnavailablePages=true&sortBy=undefined&reverseOrder=undefined&startDepth=1&isShowToplevelPages=false&languageKey=en&_=1667976954741 | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/rest/scroll-versions/1.0/pagetree/DOC?parentScrollPageId=D41797E4017724E1CAA408A931626671&parentPageId=1703956&expandedScrollPageId=D41797E4017724E1CAA408A931626671&expandedPageId=1703956&versionId=current&variantId=all&isShowUnavailablePages=true&sortBy=undefined&reverseOrder=undefined&startDepth=1&isShowToplevelPages=false&languageKey=en&_=1667976954741 IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /rest/scroll-versions/1.0/pagetree/DOC?parentScrollPageId=D41797E4017724E1CAA408A931626671&parentPageId=1703956&expandedScrollPageId=D41797E4017724E1CAA408A931626671&expandedPageId=1703956&versionId=current&variantId=all&isShowUnavailablePages=true&sortBy=undefined&reverseOrder=undefined&startDepth=1&isShowToplevelPages=false&languageKey=en&_=1667976954741 HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:59 GMT
content-type: application/json
cache-control: no-store, no-transform
x-content-type-options: nosniff
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/s/063fbdc75466b26181b13c2b03a69991-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/56cd166f0673cad889194cd9ac6945df/_/download/contextbatch/js/_super/batch.js?locale=en-US | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/s/063fbdc75466b26181b13c2b03a69991-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/56cd166f0673cad889194cd9ac6945df/_/download/contextbatch/js/_super/batch.js?locale=en-US IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /s/063fbdc75466b26181b13c2b03a69991-CDN/g1c6ky/8402/f0863dd17de361916f7914addff17e0432a0be98/56cd166f0673cad889194cd9ac6945df/_/download/contextbatch/js/_super/batch.js?locale=en-US HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:57 GMT
content-type: text/javascript
x-confluence-request-time: 1667976957220
expires: Thu, 09 Nov 2023 06:55:57 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| www.gdata.help/rest/webResources/1.0/resources | 212.23.151.234 | 200 OK | 0 B |
URL HTTP/2www.gdata.help/rest/webResources/1.0/resources IP212.23.151.234:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
POST /rest/webResources/1.0/resources HTTP/1.1
Host: www.gdata.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Content-Length: 170
Origin: https://www.gdata.help
Connection: keep-alive
Referer: https://www.gdata.help/
Cookie: JSESSIONID=2269995C352CD39D68F2A18993FC8921
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.0 (Ubuntu)
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: application/json
x-content-type-options: nosniff
content-encoding: gzip
vary: User-Agent
X-Firefox-Spdy: h2
|
|
| tracking.gdatasoftware.com/matomo.js | 212.23.151.164 | 200 OK | 0 B |
URL HTTP/2tracking.gdatasoftware.com/matomo.js IP212.23.151.164:0 ASN#12329 Telekommunikation Mittleres Ruhrgebiet GmbH
GET /matomo.js HTTP/1.1
Host: tracking.gdatasoftware.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gdata.help/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 09 Nov 2022 06:55:58 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=43200
etag: W/"6358e972-2d2db"
expires: Wed, 09 Nov 2022 18:55:58 GMT
last-modified: Wed, 26 Oct 2022 08:01:54 GMT
pragma: public
gd_country_code: NO
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self' *.gdata.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata-advancedanalytics.com *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com; frame-src 'self' gdata.jobbase.io gdata.onlyfy.jobs *.gdata.de www.paypal.com *.criteo.com *.criteo.net *.onfastspring.com *.saferpay.com www.youtube-nocookie.com www.google.com www.google.de *.gdata.ch *.gdata.fr *.gdata.at *.gdata.nl *.gdata.it *.gdata.be *.gdata.es *.gdata.pt *.gdatasoftware.co.uk *.gdatasoftware.com *.gdata-software.com *.gdata-advancedanalytics.de *.gdata.co.jp *.gdata-china.com *.gdata-hongkong.com *.inventorofantivirus.com www.awin1.com bid.g.doubleclick.net tpc.googlesyndication.com fbanalytics.org m.youtube.com player.vimeo.com gdata.jobbase.io; report-uri https://www.gdatasoftware.com/__cspreporting__
x-xss-protection: 0
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
content-encoding: gzip
X-Firefox-Spdy: h2
|
|