192.236.176.76/
200 OK 142 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size 142 kB (142088 bytes)
Hash 3a29165b00747f0b7237eb950316b503
24bd0625d23a2dbad693793367d0d055b7cbae37
6a5470e192d3338539e2e5fed7a6594f0625b7503cb1aaec20a5d2ddaccc5fe6
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET / HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:00 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4182
Expires: Wed, 07 Dec 2022 14:15:42 GMT
Date: Wed, 07 Dec 2022 13:06:00 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash aaee4cb7873d6f1effbadf269482e100
bd55730ac8414fb6861b03c2a97319b4063e2cb9
d724fd9c5704fb8948d575357cad0032e89cf275d57ddb86f013fa97e033487c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2639
Cache-Control: max-age=166154
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:00 GMT
Etag: "63906b73-1d7"
Expires: Fri, 09 Dec 2022 11:15:14 GMT
Last-Modified: Wed, 07 Dec 2022 10:31:15 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 12:18:46 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2834
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13622
Expires: Wed, 07 Dec 2022 16:53:02 GMT
Date: Wed, 07 Dec 2022 13:06:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZAnQP6GlVMV0YxBfd2P6y2+AKsmLe0kMiM6IpZjy2WMrwZwLnApAAzqz4yBL4H939HNMFj0u9Ac=
x-amz-request-id: NN7Z4FR5MPKQJ5H1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 12:49:22 GMT
age: 998
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 13:06:00 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
192.236.176.76/assets/css/style.css
200 OK 70 kB URL HTTP/1.1 192.236.176.76/assets/css/style.css
IP
File type ASCII text, with very long lines (426), with CRLF line terminators
Hash 8bac82613961b37e786a00ceb6d5599a
3e72037d0ea19194b2eda560f74e117117cf8d21
25db9800483d0022568d0861b9e590d474fa262787c119a9f15a4b62a0f75fea
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/css/style.css HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:00 GMT
Server: Apache
Last-Modified: Sat, 18 Jun 2022 23:46:55 GMT
Accept-Ranges: bytes
Content-Length: 70097
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: text/css
192.236.176.76/assets/js/form.js
200 OK 6.1 kB URL HTTP/1.1 192.236.176.76/assets/js/form.js
IP
File type ASCII text, with CRLF line terminators
Hash 2d003b6efc29272999cdc49c8f77e7d2
f14b178a8fa44b827c6516ca0604d35e4191d2d9
a801f10aac667c7eca1a65456f37a9ac29cf82c9598595e00531fc471d7ae520
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/js/form.js HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 27 May 2022 22:11:22 GMT
Accept-Ranges: bytes
Content-Length: 6102
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/assets/js/app.js
200 OK 16 kB URL HTTP/1.1 192.236.176.76/assets/js/app.js
IP
File type ASCII text, with very long lines (547), with CRLF line terminators
Hash 5daba10a4fa6f00f1e8de36e2478b79b
d6a954a9965c46325a76bb82a831cc2affcac230
4e29c7738821001931ecac974efea0004527a7b320122e71f1f8f88efaab2a40
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/js/app.js HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 19 Jun 2022 00:27:54 GMT
Accept-Ranges: bytes
Content-Length: 15463
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: application/javascript
192.236.176.76/assets/js/words.js
200 OK 21 kB URL HTTP/1.1 192.236.176.76/assets/js/words.js
IP
File type ASCII text, with CRLF line terminators
Hash e93c5ebfcbd8ba23fc254f73842628ea
12893a3c15969559369cbb71b19ae2be0b5c108a
8392dda51f0e72cd030cbd5f8cae4887316ff7601c862bc7693a8e077ee74568
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/js/words.js HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 20 Nov 2021 09:19:54 GMT
Accept-Ranges: bytes
Content-Length: 21397
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: application/javascript
192.236.176.76/code.jquery.com/jquery-3.6.0.min.js
200 OK 90 kB URL HTTP/1.1 192.236.176.76/code.jquery.com/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
Analyzer Verdict Alert quad9 Sinkholed
GET /code.jquery.com/jquery-3.6.0.min.js HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 17 Feb 2022 02:50:38 GMT
Accept-Ranges: bytes
Content-Length: 89501
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: application/javascript
192.236.176.76/assets/css/metamask.css
200 OK 794 kB URL HTTP/1.1 192.236.176.76/assets/css/metamask.css
IP
File type Unicode text, UTF-8 text, with CRLF, CR line terminators
Size 794 kB (793545 bytes)
Hash 4e4bf12953ee343fea54d5c004229aa2
882c6cbfc5e80b037183df8234eeda4c4efe3ec9
6aae39399e1f269497d306cd0ae884b5489a5065c5539ffa2668a5939316ff71
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/css/metamask.css HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 17 Dec 2021 11:47:32 GMT
Accept-Ranges: bytes
Content-Length: 793545
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: text/css
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 0f3e88a653b59f535d9945d21e08b680
1b5b19fcd37539e85af71c656c83688ff98be390
b56b3006f9251298eb66ef4bf143fb4da78f8fcf516590ba59a4fc657aa92408
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "B56B3006F9251298EB66EF4BF143FB4DA78F8FCF516590BA59A4FC657AA92408"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=200
Expires: Wed, 07 Dec 2022 13:09:21 GMT
Date: Wed, 07 Dec 2022 13:06:01 GMT
Connection: keep-alive
192.236.176.76/assets/images/avatar.jpg
200 OK 4.0 kB URL HTTP/1.1 192.236.176.76/assets/images/avatar.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 80x53, components 3\012- data
Hash 8db3346b4c7661ebd80d60d30f2376c3
92b7db5fd615fe69f8feacfe0b6c475d3ce90842
4c0d06d64a8c7b7e628df806e068ca0993f6bc0eda6e6bd949b8e267b12443e1
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/avatar.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Tue, 21 Dec 2021 19:52:40 GMT
Accept-Ranges: bytes
Content-Length: 4023
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/media/safepal-2.png
200 OK 8.4 kB URL HTTP/1.1 192.236.176.76/assets/images/media/safepal-2.png
IP
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash c9e253f7ac54c785a8e52b092d7cd5b5
d5cfe3a6b8c560c7dcf49f88b45a0991f120397b
c8ff5d607114ee0434fcc6a23047b04fbe9e7465a2c6d7d70c1dbf501ba0c277
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/safepal-2.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 21:32:04 GMT
Accept-Ranges: bytes
Content-Length: 8438
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/1.png
200 OK 3.7 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/1.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 1209d911b32dc2147b94d606b63cd4f0
c04dac737ecc115472f8825baacc9dcced062a7a
dd96bc841f3ea99e844d79b4af86eabf5626eae058c784a6237aa1136655a814
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/1.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:16 GMT
Accept-Ranges: bytes
Content-Length: 3716
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/restless-promocard.webp
200 OK 93 kB URL HTTP/1.1 192.236.176.76/assets/images/restless-promocard.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 784x784, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 79ec48a392a0ebb6fe5411c07d424fe7
c85a82ec45043d261186ddfbf9be1110437c71cc
d377595e910904dafaa69e0e189b8f26ee248e3ce8459be73cdc58944c6c6ad0
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/restless-promocard.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 14:14:36 GMT
Accept-Ranges: bytes
Content-Length: 93226
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/webp
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/assets/images/media/math.png
200 OK 7.2 kB URL HTTP/1.1 192.236.176.76/assets/images/media/math.png
IP
File type PNG image data, 340 x 183, 8-bit colormap, non-interlaced\012- data
Hash 4473ff9c2c057d6ac4240bd6e7759349
e17b560f53974ef252fbb322e7c8d034aebd6690
b0b38756b915f03c8070087f049eccac8a0a7e80e7d6aafedfc2bf87946c68ee
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/math.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 10:39:18 GMT
Accept-Ranges: bytes
Content-Length: 7158
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/media/walletconnect-logo.png
200 OK 3.4 kB URL HTTP/1.1 192.236.176.76/assets/images/media/walletconnect-logo.png
IP
File type PNG image data, 286 x 176, 8-bit colormap, non-interlaced\012- data
Hash 509cd98112fdc9b7a07e516fecce320e
8fc19b5b4ab53036f479124499677398d15f11f8
ec2eada2aace5a4e51644986b6b4fa0e750dcba4390d9bb1a8ec3fd378049ee3
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/walletconnect-logo.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 15:00:24 GMT
Accept-Ranges: bytes
Content-Length: 3415
Keep-Alive: timeout=5, max=9995
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/media/safepal.png
200 OK 12 kB URL HTTP/1.1 192.236.176.76/assets/images/media/safepal.png
IP
File type PNG image data, 514 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 1d236ae8ccc14622ad076cdb6d6835e5
9031913560b5c3db05d9561e80653fd82af2646a
d6381609621fae329a549e57d43432a7d7000c20a200d0f5388da078bc7c63e4
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/safepal.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 11:06:52 GMT
Accept-Ranges: bytes
Content-Length: 11867
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/media/binance.png
200 OK 40 kB URL HTTP/1.1 192.236.176.76/assets/images/media/binance.png
IP
File type PNG image data, 1024 x 232, 8-bit/color RGBA, non-interlaced\012- data
Hash 6ac926b828ca0430d7103bacd062b086
595d827a956b675299b0190468c602c7d66a5a7f
7ffb4dce58b9714be95d1627ebe80e420ca58e489d95f371b19927e0493ec31f
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/binance.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 11:28:34 GMT
Accept-Ranges: bytes
Content-Length: 40053
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd6dabd083ee1c237c8ea3ba38cc48d5
bbe4420bf1c0fe0d5621336865563418d2f16f39
c9314cdac13bc2ea94505f473538ab4d5c0a940dfbc2f5447e6f22a5af580572
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/assets/images/unnamed.png
200 OK 582 kB URL HTTP/1.1 192.236.176.76/assets/images/unnamed.png
IP
File type PNG image data, 550 x 550, 8-bit/color RGB, non-interlaced\012- data
Size 582 kB (581891 bytes)
Hash 444fa19d5f99b6243d2e94c2abff222c
83a1bd9084a05d9eaa17ae06fea73dee97ad5053
e5fc15b640bcf2ab91f31fd960aebb8fd95e8996b1a499ff2867fff28db9ec9b
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/unnamed.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Jun 2022 07:35:24 GMT
Accept-Ranges: bytes
Content-Length: 581891
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/2.jpg
200 OK 3.0 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 5f65d917c27e533b0027eb43700ff3b9
6e88f5cd8b42ebe39e8a228c3702fcfb2e334632
987545c8c5dd5389df9617568ca4fdda0916c3a6c4b0a46ef93676a0371355f8
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/2.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:26 GMT
Accept-Ranges: bytes
Content-Length: 2970
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/nft/eth.svg
200 OK 684 B URL HTTP/1.1 192.236.176.76/assets/images/nft/eth.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 6f8e2979d428180222796ff4a33ab929
49244279a17bc96f6760112da740103f6bf5aa76
c88a7b74c4d55a5b8080b148da4010b4d35f7e3aa178eab4f9b312e9b4e16547
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/nft/eth.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 18:29:04 GMT
Accept-Ranges: bytes
Content-Length: 684
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9995
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/wallet.svg
200 OK 1.2 kB URL HTTP/1.1 192.236.176.76/assets/images/wallet.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1173), with no line terminators
Hash 8e6b9c9f0e09b53b9e75bd934cdce204
4f543d6415fb147b11280bbd295cda76e5f706de
d7c3db2bddf3110dcff83280a91ec357268a3e2adcf2cad7f5c2f1c59a4736c8
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/wallet.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:56 GMT
Accept-Ranges: bytes
Content-Length: 1173
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/collection.svg
200 OK 1.1 kB URL HTTP/1.1 192.236.176.76/assets/images/collection.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1090), with no line terminators
Hash 7bb57bdac85951065b5c528f747fc538
4f7ffba9056a1aeb138b10bb1df80d54b93fcf46
0304371ce0adc28148c52f73da46c6aa04a81a906a40ef51a8dc3824b4a27459
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/collection.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:54 GMT
Accept-Ranges: bytes
Content-Length: 1090
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9992
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/nft.svg
200 OK 966 B URL HTTP/1.1 192.236.176.76/assets/images/nft.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (966), with no line terminators
Hash 2d0a07dc21e172de5e86a7528a57c697
49fc96114ee20c1dad2f496413a284cf3ccfae9b
70af639883560c3e224a542b07775556966feedc29ee188ba0e2e97574f5f075
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/nft.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:52 GMT
Accept-Ranges: bytes
Content-Length: 966
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/css/fonts/EuclidCircularB-Regular-WebXL.ttf
200 OK 154 kB URL HTTP/1.1 192.236.176.76/assets/css/fonts/EuclidCircularB-Regular-WebXL.ttf
IP
File type TrueType Font data, 19 tables, 1st "BASE", 16 names, Macintosh, language 0x2, type 1 string, otCopyright (c) 2018 Swiss Typefaces Sarl. All rights reserved.\266Version 3.001FontEuclid is a \012- data
Size 154 kB (154192 bytes)
Hash d5aac9e768d285a459e8b4ea0ff490bf
4347a5a09e8e4014ec4a13634f20fafeb1c7b6c0
08b11e464af41dc1764715793aee5078e632b68606feb061b996f3ff8be7401c
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/css/fonts/EuclidCircularB-Regular-WebXL.ttf HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/assets/css/metamask.css
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Sun, 20 Jun 2021 15:08:20 GMT
Accept-Ranges: bytes
Content-Length: 154192
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: font/ttf
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/assets/css/fonts/EuclidCircularB-Bold-WebXL.ttf
200 OK 151 kB URL HTTP/1.1 192.236.176.76/assets/css/fonts/EuclidCircularB-Bold-WebXL.ttf
IP
File type TrueType Font data, 19 tables, 1st "BASE", 16 names, Macintosh, language 0x2, type 1 string, otCopyright (c) 2018 Swiss Typefaces Sarl. All rights reserved.\266Version 3.001FontEuclid is a \012- data
Size 151 kB (150928 bytes)
Hash cd393be20accd12b36efefde5bb590db
df1ac0dc8cc96d6ef9f5be99fa7addf30984dbd8
df4f17393abc2d0e8ea15d6b55644cfdee10d34445d6c26204f427554f3754de
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/css/fonts/EuclidCircularB-Bold-WebXL.ttf HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/assets/css/metamask.css
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Sun, 20 Jun 2021 15:08:22 GMT
Accept-Ranges: bytes
Content-Length: 150928
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: font/ttf
fonts.gstatic.com/s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2
200 OK 155 kB URL HTTP/2 fonts.gstatic.com/s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2
IP
File type Web Open Font Format (Version 2), CFF, length 155276, version 1.0\012- data
Size 155 kB (155276 bytes)
Hash 0ba49c096a77b67734434cebcaf2e14d
2f9e28ab559782402f27332633c843c40209d95a
35dca8a7145a17c8d1306f25a3ca091578e15396f0b22d61eb8e73262ac75577
GET /s/materialiconsoutlined/v108/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://192.236.176.76
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 155276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 04:55:39 GMT
expires: Fri, 01 Dec 2023 04:55:39 GMT
cache-control: public, max-age=31536000
age: 547822
last-modified: Thu, 11 Aug 2022 01:57:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.236.176.76/assets/images/bg.jpg
404 Not Found 315 B URL HTTP/1.1 192.236.176.76/assets/images/bg.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/bg.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/assets/css/style.css
HTTP/1.1 404 Not Found
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=9991
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
192.236.176.76/assets/images/media/coin98-2.png
200 OK 35 kB URL HTTP/1.1 192.236.176.76/assets/images/media/coin98-2.png
IP
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash 2f313667fbc9863ff992ab52869d7d81
8d73df9c64d1569260ee1ba054d378c892ee61fd
dc3deafae6ec83a38bab73557b4eb2276296cb35ca79876fff24d3a9e3ac5a4e
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/coin98-2.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 21:31:20 GMT
Accept-Ranges: bytes
Content-Length: 35290
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/png
fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
200 OK 128 kB URL HTTP/2 fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://192.236.176.76
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 20:33:17 GMT
expires: Fri, 01 Dec 2023 20:33:17 GMT
cache-control: public, max-age=31536000
age: 491564
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 21:48:03 GMT
expires: Fri, 01 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 487078
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 16:40:43 GMT
expires: Fri, 01 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 505518
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.236.176.76/assets/images/box-2.jpg
200 OK 76 kB URL HTTP/1.1 192.236.176.76/assets/images/box-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x200, components 3\012- data
Hash 851af398c54ff59f88dd8215bdea0c90
a81dda1ee709655349067fc62658614bd99ee020
c64cdfc26418b1acac4e70e8bad3c3b301195327ce066dea7367be8d77a4ccf1
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-2.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:17:50 GMT
Accept-Ranges: bytes
Content-Length: 76434
Keep-Alive: timeout=5, max=9990
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/box-3.jpg
200 OK 32 kB URL HTTP/1.1 192.236.176.76/assets/images/box-3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 371x200, components 3\012- data
Hash fec4631e12cc4141e1e2635ef44084b6
a7e9561dd810991f71bae0314a1ca92c451650df
2c558695c9958eaaca5c9f6ac5bb1a079f8980de4963693bf831f68577ac8812
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-3.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:17:56 GMT
Accept-Ranges: bytes
Content-Length: 32446
Keep-Alive: timeout=5, max=9995
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/theweeknd-promocard.webp
200 OK 549 kB URL HTTP/1.1 192.236.176.76/assets/images/theweeknd-promocard.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 549 kB (549248 bytes)
Hash 7943e86715fbcefd5796f2d6c1b0c1c7
8fb31d5a0b0d22f05c4ac6b0f522fe8bab022e5d
041a3bb1cf6615f09801ac1badbccc2a3a314d54a726f94ff083991b0a0cf69e
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/theweeknd-promocard.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 14:14:06 GMT
Accept-Ranges: bytes
Content-Length: 549248
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9992
Connection: Keep-Alive
Content-Type: image/webp
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
192.236.176.76/assets/images/wallet/metamask-alternative.webp
200 OK 62 kB URL HTTP/1.1 192.236.176.76/assets/images/wallet/metamask-alternative.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash f67565450ff9a3c29c5a73f01a58ea72
9632ff494b58def54782d1d19218107283dcc836
5e45e1bc3b0e1c17fc51b0cc145a1f99bb0dd93959afa62d7166204dbcecdd3c
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet/metamask-alternative.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 17:18:56 GMT
Accept-Ranges: bytes
Content-Length: 62154
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9989
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/wallet/trust-alternative.webp
200 OK 5.5 kB URL HTTP/1.1 192.236.176.76/assets/images/wallet/trust-alternative.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c9e78fe6c6e121908c1d04fdb68a8934
4460f24fadc7bf575ec84bf6022daca434947c8b
dbc6b5512ca6a2fc08f2af7f246d300c7b0ffce7da57bed015f2830a4239f515
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet/trust-alternative.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 17:19:40 GMT
Accept-Ranges: bytes
Content-Length: 5498
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/media/math-2.png
200 OK 13 kB URL HTTP/1.1 192.236.176.76/assets/images/media/math-2.png
IP
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash a2e66b93a02f261b86bc5758166ef555
7b04f1275ee6be75af8acacaf9e56c620baa8e8a
d358840e3efc571222edc8fba26f0a7def6a0e413fc0daf07c2b110225966db6
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/math-2.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 21:33:08 GMT
Accept-Ranges: bytes
Content-Length: 12631
Keep-Alive: timeout=5, max=9991
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/wallet/walletconnect-alternative.webp
200 OK 1.8 kB URL HTTP/1.1 192.236.176.76/assets/images/wallet/walletconnect-alternative.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bc79cf15ae946361ea45f926480b8906
4c596a3a3bc8bf270f3c2520558522b7caba9358
56f27987ad3ced2c98776375e3e0554ec3e49d9d30585eb3274723963eed3d70
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/wallet/walletconnect-alternative.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 23 Dec 2021 17:19:10 GMT
Accept-Ranges: bytes
Content-Length: 1750
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=10000
Content-Type: image/webp
192.236.176.76/assets/images/box-1.png
200 OK 82 kB URL HTTP/1.1 192.236.176.76/assets/images/box-1.png
IP
File type PNG image data, 300 x 200, 8-bit/color RGB, non-interlaced\012- data
Hash 3e06ec023fc7753a29b0932295607804
2208d29f1c53644ea180d1912433abb8e3480c2f
2f0141fb9e98a18432e5a477ac1a9b24fe33e7f67bd74ca7fb53fa41463eb448
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-1.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:17:46 GMT
Accept-Ranges: bytes
Content-Length: 81577
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/4.png
200 OK 4.1 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/4.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash e1a49a417f8b9d62a662f9114f85aa10
6743f2cbfcc78f6f4d5850054d131daa874e5854
896d3d489f353b7b4f3995e0ec155ac30e0a76f5d02e2a2d4cfdc728d2db982f
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/4.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:42 GMT
Accept-Ranges: bytes
Content-Length: 4149
Keep-Alive: timeout=5, max=9988
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/sturec-promocard.webp
200 OK 536 kB URL HTTP/1.1 192.236.176.76/assets/images/sturec-promocard.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 536 kB (536108 bytes)
Hash 863f2eb63172027722ee6f6eee7c8fe3
77e91efb5e9dddc9f76d9c28597b0ca1b022f903
df48c77c9af155bfa7d0a40747c67ced85ba3b4b76be1cb949909e49e15c535b
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/sturec-promocard.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 14:14:24 GMT
Accept-Ranges: bytes
Content-Length: 536108
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/nft/6.png
200 OK 1.5 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/6.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash bb6a788b5b6fe3130c5dcc982636532b
2ea62313ebbefbedb58aeaf8f136c754b5c31380
0ab3b532fe6146c7a8a2b5c8d8c9aa855824715ea8194784d75c5b56a7208425
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/6.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:40:40 GMT
Accept-Ranges: bytes
Content-Length: 1500
Keep-Alive: timeout=5, max=9992
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/sale.svg
200 OK 1.1 kB URL HTTP/1.1 192.236.176.76/assets/images/sale.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1062), with no line terminators
Hash 0edec9905d8191838fa507442c7cd037
d9456d5baf1f2e2466d907ce0a93daf8283f190f
cd1e6c82fc02dfac88bede7cc326200f97213b362c6e5715d2b5d48f6cc9b2d7
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/sale.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:50 GMT
Accept-Ranges: bytes
Content-Length: 1062
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9990
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/nft/5.png
200 OK 22 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/5.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 9374e0e5ef2709b1e36b80f4df1939e6
00df4b7c5f571ed5658b9caecbeeb7838840859d
b8d6db569f4b3d492427b9b1f340f5d748cd5069dbd32058f15118efda9d8f5e
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/5.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:48 GMT
Accept-Ranges: bytes
Content-Length: 22249
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/7.png
200 OK 4.1 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/7.png
IP
File type PNG image data, 100 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 98a561436ae37cf62368739c2b2d0ab3
cb633d6ef0c36f4963df9c34725174ffaf1b7f65
51f8e39428b85eb68838441f98ae3dc70a5afb7d07a9efa3518e5cfca40d5ad2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/7.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:40:52 GMT
Accept-Ranges: bytes
Content-Length: 4130
Keep-Alive: timeout=5, max=9987
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/8.jpg
200 OK 2.3 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash ba47f9e14523f4fe2942eb76cd687ce0
4b2ed4b84b96dc1a8eabadc98e6e996cfa787707
6e50b34fc59004ea8e733203eaaed4d7fd5e2aeb2c812e82d6488a626ac44266
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/8.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:00 GMT
Accept-Ranges: bytes
Content-Length: 2313
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/nft/9.png
200 OK 5.3 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/9.png
IP
File type PNG image data, 98 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash ec5b51eb59932287963751ba5e75cd98
0a0175c8fae2c2462e9db457c95406e0825059a0
cafcd535a573c4e34e658dab37955414f6aa171255e7201273231aebb2f88ebb
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/9.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:06 GMT
Accept-Ranges: bytes
Content-Length: 5317
Keep-Alive: timeout=5, max=9991
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/10.png
200 OK 12 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/10.png
IP
File type PNG image data, 100 x 99, 8-bit/color RGB, non-interlaced\012- data
Hash af6b6c4bcaf2214f3c45fde6f99f94b5
4eb18bf98ba3ddde19e752641b3ab88e7a8202dc
571ef4a6a96c9926a20ef6e316802d92f2e522752135cb0f0a62264f59c556ef
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/10.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:12 GMT
Accept-Ranges: bytes
Content-Length: 11838
Keep-Alive: timeout=5, max=9989
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/11.png
200 OK 3.6 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/11.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash fb9b3c121dfcbf3b76076efa623de8ff
b0eb6869edadd978adeee69a1df24cd42c251f24
418620ef156fbb8c60a73be5f804fd5088afcd5a7403e19da9b980441ee938c2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/11.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:18 GMT
Accept-Ranges: bytes
Content-Length: 3609
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/media/binance-2.png
200 OK 26 kB URL HTTP/1.1 192.236.176.76/assets/images/media/binance-2.png
IP
File type PNG image data, 377 x 345, 8-bit/color RGBA, non-interlaced\012- data
Hash bb44e9b6506daab9507f1914762c4da7
e40f2cf474778dcbe4767937c04df9222fa93e18
14722564bad5407c92440fca9dc43c708e5c4ee350f72a08b4bbdc6ff8b0f966
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/binance-2.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 21:30:14 GMT
Accept-Ranges: bytes
Content-Length: 25833
Keep-Alive: timeout=5, max=9999
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/css/fonts/Roboto-Bold.ttf
200 OK 167 kB URL HTTP/1.1 192.236.176.76/assets/css/fonts/Roboto-Bold.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data
Size 167 kB (167336 bytes)
Hash 9ece5b48963bbc96309220952cda38aa
013f1bbcbbd80991a5f00fca52a90d0d7ab8b81f
baf44ce81636cc927fc27768437e5da853bac699e8aaf832d042f0dfed29b4b4
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/css/fonts/Roboto-Bold.ttf HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/assets/css/metamask.css
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 09 Jan 2013 13:00:00 GMT
Accept-Ranges: bytes
Content-Length: 167336
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9986
Connection: Keep-Alive
Content-Type: font/ttf
192.236.176.76/assets/images/nft/14.jpg
200 OK 5.0 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/14.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash 9fede95006b696d4cb4ce6eb808ef8cb
e3778157a13851fc087eb893266bc39fef18b0aa
190c5b2c6b34a26461c43c8d0b30b5132b2e928b09702b81d5b546117a304adb
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/14.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:38 GMT
Accept-Ranges: bytes
Content-Length: 5020
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/nft/15.png
200 OK 5.8 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/15.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash c92a879c154730c5ac23ce546a142bab
7e65de6c54d6763a7ccdc394b64ca77d49e8ac21
4c06d3913bfdd7221e44618347b81655cf2f86d4cfbe71f7b7b827e051e22104
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/15.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:44 GMT
Accept-Ranges: bytes
Content-Length: 5771
Keep-Alive: timeout=5, max=9990
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/box-round-3.png
200 OK 4.3 kB URL HTTP/1.1 192.236.176.76/assets/images/box-round-3.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4efa7376add61639fbbf50684c70c8ab
44b377818eed2ce42f077c7214d19d1ecd708499
aec9cb69da734d6838e551235a9447816316186c76cdfc68cd134e1ded0e9b70
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-round-3.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:18:20 GMT
Accept-Ranges: bytes
Content-Length: 4268
Keep-Alive: timeout=5, max=9988
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/creating.png
200 OK 32 kB URL HTTP/1.1 192.236.176.76/assets/images/creating.png
IP
File type PNG image data, 1500 x 1000, 8-bit/color RGB, non-interlaced\012- data
Hash 1db4d001bcd7641dfe5e3d076d1e499f
823bd5d86805d0157595338e8d28c67f2786ef22
0634513d55647004e621086940cf2dff4d363896da7f5d4b5b3926e60ae6f942
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/creating.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 06:00:10 GMT
Accept-Ranges: bytes
Content-Length: 32011
Keep-Alive: timeout=5, max=9998
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/categories/music.webp
200 OK 131 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/music.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 131 kB (130734 bytes)
Hash b74b0a9e12d5194fabe6686e6cd36fbe
483164561faed595318dddbabf17678eeaa7a78a
a336a33e8d6a3b74fee191121a0c950229bc6097f9018983181b730b875c741d
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/music.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:44 GMT
Accept-Ranges: bytes
Content-Length: 130734
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9989
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/photography-category.webp
200 OK 215 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/photography-category.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 215 kB (215364 bytes)
Hash 5b836f4bed45402184ccd898d52fa8bc
4e407d1900f8928da324c957cf43a99aab478ed0
bbf7fa21aa40409faa6416554f4bec4b482dc671c6338ca88050a61f2603a7fc
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/photography-category.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 06:32:42 GMT
Accept-Ranges: bytes
Content-Length: 215364
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9987
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/collectibles.webp
200 OK 52 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/collectibles.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 476ce7100d248414d01ebe385b9a3699
036cc014ba812783bd079e04bbc828ecd1f1094d
ccf8d844fce53f496903e474f331d318e9498ea957126a2152afee889f4a60ea
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/categories/collectibles.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:36 GMT
Accept-Ranges: bytes
Content-Length: 52248
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9985
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/nft/3.png
200 OK 2.6 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/3.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash 096ff4156dffe840fa815d6caf9ff5e7
8871d70770ce4e1677b01160d1c00182328896f4
3aa8c59639a748328ada5ef2189b4a565cd0e3571c8fb38cd19c8de6a3304dc2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/3.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 16:53:34 GMT
Accept-Ranges: bytes
Content-Length: 2612
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/12.png
200 OK 8.0 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/12.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Hash c536d8d155a861f787d58a373f3ec93d
5f77ba5bad3968fa2ea76c7ab32f9853bddd95a8
b74078c917bd7f31a0a657be970f735663eab535a3fc47df90d99fd363e6a7b2
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/12.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:24 GMT
Accept-Ranges: bytes
Content-Length: 8002
Keep-Alive: timeout=5, max=9988
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/nft/13.png
200 OK 7.9 kB URL HTTP/1.1 192.236.176.76/assets/images/nft/13.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 0bdfba71540624b348d9175b2e0d6e22
998e712d22141d691403202d2c3cd38c89d4e9ef
d2869ac97772c8fd23ccbf6c47b503dbf132e07960fb053ad37425d718ed2464
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/nft/13.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 14:41:30 GMT
Accept-Ranges: bytes
Content-Length: 7925
Keep-Alive: timeout=5, max=9986
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/categories/domain-names.webp
200 OK 52 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/domain-names.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 13f3061ad278717cf185a4e3be105d35
037ecd16b1646de7690a1a2b8c15c4260a5b0f19
84092dbeee0c446ec5a3fb0aa65b244c1d92ced4d0ed39f4e4e65f548e8f0fca
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/domain-names.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:42 GMT
Accept-Ranges: bytes
Content-Length: 51922
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/box-round-2.jpg
200 OK 3.3 kB URL HTTP/1.1 192.236.176.76/assets/images/box-round-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash f4395c8ac4ac54a65f56aa7a69b43bd0
606050f665bfec3a725c7cf4e8687eb9679535cd
e4736f079ba8ebb7c4439bd7d3bebb8579c4eebde23288396f6ebaf3e25f7b74
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-round-2.jpg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:18:14 GMT
Accept-Ranges: bytes
Content-Length: 3315
Keep-Alive: timeout=5, max=9984
Connection: Keep-Alive
Content-Type: image/jpeg
192.236.176.76/assets/images/safety.png
200 OK 26 kB URL HTTP/1.1 192.236.176.76/assets/images/safety.png
IP
File type PNG image data, 1500 x 1000, 8-bit/color RGB, non-interlaced\012- data
Hash 2083686d34342fb331aa1af9f060e66c
f156340f8e8c4325d228f3713f75899f3541f161
450ba6bba349c42a6abb95e79cb90a49671d01a9eb52b879c7d74d24662a36c5
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/safety.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 05:59:58 GMT
Accept-Ranges: bytes
Content-Length: 26166
Keep-Alive: timeout=5, max=9987
Connection: Keep-Alive
Content-Type: image/png
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 12:08:58 GMT
cache-control: public,max-age=3600
age: 3423
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
192.236.176.76/assets/images/categories/art.webp
200 OK 257 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/art.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 257 kB (257268 bytes)
Hash 5306867e611ccf4ae4870f2a397ac666
05ddd42571a601d60d4fdef8539bc6e827d4d724
9a1d2967a227349ee6e2a778ff87f336b77cd406bac35dea39a05345d9a2fa04
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/art.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 06:24:10 GMT
Accept-Ranges: bytes
Content-Length: 257268
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9997
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/sports.webp
200 OK 129 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/sports.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 129 kB (129352 bytes)
Hash 9a0077fded7f3fb9b2618594ebc859e4
d8149685f5d0c6fe66311dee6e606f2e2c13d8b9
ebac54aa2f93a252975e3ca96d62dec0caa9a01e1f33668620aac442a0036ce7
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/sports.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 06:32:56 GMT
Accept-Ranges: bytes
Content-Length: 129352
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9985
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/utility.webp
200 OK 141 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/utility.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 141 kB (140854 bytes)
Hash 77290dadd246bda015753085a7c755fe
c04973aabbe7c8925766c84c0bf88c7a820f8949
46441628c5e6b667e374d0fd5b4688efb15be39524e608bb20765f2274e38526
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/categories/utility.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:56:08 GMT
Accept-Ranges: bytes
Content-Length: 140854
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9983
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/virtual-worlds.webp
200 OK 97 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/virtual-worlds.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bd88b2dc4a25e15e246d200396492836
fdf5d8ea368487a3554cf4caba2a17a82a28e8a7
3b337c5115eccc66bbfebd7fc08aab4f6200c4f4a3773b680d42804aae1f4351
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/categories/virtual-worlds.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:40 GMT
Accept-Ranges: bytes
Content-Length: 97424
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9986
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/categories/trading-cards.webp
200 OK 180 kB URL HTTP/1.1 192.236.176.76/assets/images/categories/trading-cards.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 180 kB (179596 bytes)
Hash a995601de89992960cb18f1ba89479d2
110346a4d12b8e47c3ad44385f85a916d15ee206
ecf70633eab5862ce8d0097d47f1c075be220c716a2a2e44930d2acca6c19811
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/categories/trading-cards.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:38 GMT
Accept-Ranges: bytes
Content-Length: 179596
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9995
Connection: Keep-Alive
Content-Type: image/webp
192.236.176.76/assets/images/opensea-white.svg
200 OK 2.9 kB URL HTTP/1.1 192.236.176.76/assets/images/opensea-white.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2931), with no line terminators
Hash 270535333a04e0f7c6c352a4f2eba9ca
cbc9913a2608de3e31025ed329d7e3be4987b977
d79ac289a5efb3158ff63a02ee4dbe102a69890f69302bce8ef05c989d4d4e76
Analyzer Verdict Alert quad9 Sinkholed
GET /assets/images/opensea-white.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:55:26 GMT
Accept-Ranges: bytes
Content-Length: 2931
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/box-round-1.png
200 OK 4.3 kB URL HTTP/1.1 192.236.176.76/assets/images/box-round-1.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4efa7376add61639fbbf50684c70c8ab
44b377818eed2ce42f077c7214d19d1ecd708499
aec9cb69da734d6838e551235a9447816316186c76cdfc68cd134e1ded0e9b70
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/box-round-1.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 22 Dec 2021 20:18:08 GMT
Accept-Ranges: bytes
Content-Length: 4268
Keep-Alive: timeout=5, max=9984
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/media/coin98.png
200 OK 37 kB URL HTTP/1.1 192.236.176.76/assets/images/media/coin98.png
IP
File type PNG image data, 1004 x 293, 8-bit/color RGBA, non-interlaced\012- data
Hash 65c8e1ac373c711c710c994c3f19b2ae
a8e5540ee20d94721e5ba575685c1d97264a8f32
1908c3f5b1976cd9801caf8c9ada40ab10e2551106b8c637d54baa99d9e6da06
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/coin98.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 13:24:42 GMT
Accept-Ranges: bytes
Content-Length: 36575
Keep-Alive: timeout=5, max=9982
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/media/trust.png
200 OK 12 kB URL HTTP/1.1 192.236.176.76/assets/images/media/trust.png
IP
File type PNG image data, 512 x 247, 8-bit/color RGBA, non-interlaced\012- data
Hash f3ff07254b9994058d557ab3c86bb2bc
f2100a85293aa31fe7e0d14c1e058430099a161d
244793fb9439b1028ae8e4f2a1eb2649a9eb7faa67df04e30a0f5a1bc6c5966a
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/trust.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Wed, 01 Dec 2021 21:23:36 GMT
Accept-Ranges: bytes
Content-Length: 12291
Keep-Alive: timeout=5, max=9985
Connection: Keep-Alive
Content-Type: image/png
192.236.176.76/assets/images/media/metamask-fox.svg
200 OK 3.2 kB URL HTTP/1.1 192.236.176.76/assets/images/media/metamask-fox.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3231), with no line terminators
Hash c06f3a3e804ebc7343949fdca3fdd7f8
d96957b5a42c4f69e11a55e388234a26daf4a039
b855851451c3eb7220bc7331d6cf7f19dad4580ebc35610211f028848ba7fc34
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/media/metamask-fox.svg HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 02 Dec 2021 14:05:54 GMT
Accept-Ranges: bytes
Content-Length: 3231
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9994
Connection: Keep-Alive
Content-Type: image/svg+xml
192.236.176.76/assets/images/security.png
200 OK 97 kB URL HTTP/1.1 192.236.176.76/assets/images/security.png
IP
File type PNG image data, 1500 x 1000, 8-bit/color RGB, non-interlaced\012- data
Hash ee348f630a972f4a0cc2cc74fcb7db7a
90d0abd95ac53fcbada5434087c2c5d132990c92
965ac99b7a9ec5202b90564257b53640604925f49e1ef00f47ea0764db9b13ca
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/security.png HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Thu, 23 Dec 2021 05:59:36 GMT
Accept-Ranges: bytes
Content-Length: 97399
Keep-Alive: timeout=5, max=9996
Connection: Keep-Alive
Content-Type: image/png
ocsp.digicert.com/
200 OK 471 B IP
Hash 053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2615
Cache-Control: max-age=161064
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:01 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 09:50:25 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
192.236.176.76/assets/images/32x32.webp
200 OK 422 B URL HTTP/1.1 192.236.176.76/assets/images/32x32.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9ba41886d6ada0a2620317827a729606
bc53be78ad9418abaf8225b7f49f28baa77a3c98
e4bd91072de073dd0a39ad4f7ac4afd25bdb6051d224005eafc19bd28e384b45
Analyzer Verdict Alert openphish Crypto/Wallet
quad9 Sinkholed
GET /assets/images/32x32.webp HTTP/1.1
Host: 192.236.176.76
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://192.236.176.76/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 13:06:01 GMT
Server: Apache
Last-Modified: Fri, 17 Dec 2021 18:56:02 GMT
Accept-Ranges: bytes
Content-Length: 422
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=9993
Connection: Keep-Alive
Content-Type: image/webp
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 38d1c089860ce360f5266ae101ab05ca
31705702b50e1c818c052b6d2a23f22583aa07d1
097ac1bb8edd3ef2e02fa551d824a0104c6995e130f9cdc4bcfa65583a9785d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81a7e0ed8b45460991a7d9b719423d48
fa4824b64d5484b955cecebbeea06710ced4fba5
2fb356139722003d5c83566b936968a5ce9ba3756f69ace50a53bea6c1b9f7eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 12:51:04 GMT
expires: Wed, 07 Dec 2022 13:06:04 GMT
cache-control: public, max-age=900
age: 898
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Wed, 07 Dec 2022 13:06:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 38d1c089860ce360f5266ae101ab05ca
31705702b50e1c818c052b6d2a23f22583aa07d1
097ac1bb8edd3ef2e02fa551d824a0104c6995e130f9cdc4bcfa65583a9785d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oQf1lQxaG8KgxPWAf9OkxA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zGqZziEtomk/kDLZv+i3P5Rz7Mw=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81a7e0ed8b45460991a7d9b719423d48
fa4824b64d5484b955cecebbeea06710ced4fba5
2fb356139722003d5c83566b936968a5ce9ba3756f69ace50a53bea6c1b9f7eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 07 Dec 2022 13:06:02 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9084a518c70ad57bb3226fb519b648fd
79348ebe6f5900a035d4d65e08a7409fd9708f15
f0c6b0f66c31aa7cb2d2808eb4c04c3681d48e731efc8cbba0f3fef1d218ce7b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 8795de8576b45ce7ba933b95f9fd2f3f
6aa82c26c0ac45adc87ae702789bd304978fcfc6
ac3f2612ce7d6da3492e058f6abb051f79e15bab085d0e88978c93a45f54c80d
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 07 Dec 2022 13:06:02 GMT
server: ESF
cache-control: private
content-length: 31058
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c2bc646545bfb8251d6d5061622e92f9
b14bf36b5bc259fe2429b8521f73f14703195fba
521f345ee743d506ed3b636023dbd6942238d94d7a0dbda7575c15eb659edfb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js
IP
File type ASCII text, with very long lines (36162)
Hash e9bf756aa2fac02f3307febffa242635
d0da1ab271c03a49fe6499a38e6f3c34d396c5d4
12655f58f30c13fae1942aae99ace0d8e450ead33ec120b89d78fd98a279e0bb
GET /js/th/YkfklCtf3s5-_1quWHAnTHHVaBZ-i7ToAeXFpu3i2Ro.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14349
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 15:46:54 GMT
expires: Wed, 06 Dec 2023 15:46:54 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
age: 76748
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.ytimg.com/vi_webp/gfGuPd1CELo/maxresdefault.webp
200 OK 24 kB URL HTTP/2 i.ytimg.com/vi_webp/gfGuPd1CELo/maxresdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 94d015ce62cec9dc2c61420a977da42b
c657a723c06ab007f5dd99b12bcbc500f534bded
cc374be9c2cde17b898c0a88a66162c972adf073e335828e60555b699c76b58e
GET /vi_webp/gfGuPd1CELo/maxresdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 24130
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 11:27:55 GMT
expires: Wed, 07 Dec 2022 13:27:55 GMT
cache-control: public, max-age=7200
age: 5887
etag: "1633564202"
content-type: image/webp
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c2bc646545bfb8251d6d5061622e92f9
b14bf36b5bc259fe2429b8521f73f14703195fba
521f345ee743d506ed3b636023dbd6942238d94d7a0dbda7575c15eb659edfb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9e83e23c9303fc167d2b23bceba4f304
cc712e67770a00bcc9901a6881f5b1cd343cf054
16378fd60ce4fb8ead3bbc313e6ae0166f68d532d40c586f8c71cb6cd1a91f50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yt3.ggpht.com/uPCDZ2LTlORkwQ8e_cj5B-ax9KBoVZA0xxp6wWiUH2deSV8uoaV6gjvr7pL1-0sGrPr_5yK7_ww=s68-c-k-c0x00ffffff-no-rj
200 OK 2.2 kB URL HTTP/2 yt3.ggpht.com/uPCDZ2LTlORkwQ8e_cj5B-ax9KBoVZA0xxp6wWiUH2deSV8uoaV6gjvr7pL1-0sGrPr_5yK7_ww=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3\012- data
Hash 184161ae4a7d95a66d334b8e86b5c138
177f1960c06ecd54e8b15728d5e8491b9e049abf
f4cd6bdb68a11d75123376a8d84333fd2e97059aa3185ca07ae443378bb2d47d
GET /uPCDZ2LTlORkwQ8e_cj5B-ax9KBoVZA0xxp6wWiUH2deSV8uoaV6gjvr7pL1-0sGrPr_5yK7_ww=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="channels4_profile.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2154
x-xss-protection: 0
date: Wed, 07 Dec 2022 12:50:09 GMT
expires: Wed, 07 Dec 2022 20:42:54 GMT
cache-control: public, max-age=86400, no-transform
age: 953
etag: "v2"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9e83e23c9303fc167d2b23bceba4f304
cc712e67770a00bcc9901a6881f5b1cd343cf054
16378fd60ce4fb8ead3bbc313e6ae0166f68d532d40c586f8c71cb6cd1a91f50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 13:06:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Wed, 07 Dec 2022 13:06:02 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f246ab424bcd9918c1c84402e15e4f9e
1620a2dc07aef74eca193c01c88b56c9630bada9
0ba118c0af62209f618ab41fdde4e3fc283e03dae3c3f73c1628aba0f72e20f1
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1138
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 07 Dec 2022 13:06:02 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4771
Expires: Wed, 07 Dec 2022 14:25:34 GMT
Date: Wed, 07 Dec 2022 13:06:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4771
Expires: Wed, 07 Dec 2022 14:25:34 GMT
Date: Wed, 07 Dec 2022 13:06:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4771
Expires: Wed, 07 Dec 2022 14:25:34 GMT
Date: Wed, 07 Dec 2022 13:06:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4771
Expires: Wed, 07 Dec 2022 14:25:34 GMT
Date: Wed, 07 Dec 2022 13:06:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d62ac4e-2ac8-4e49-a61b-a48cff80ffd2.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d62ac4e-2ac8-4e49-a61b-a48cff80ffd2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8055d0db573ab34924db3b60ed788bb2
a4aae05e7a929fc7f652f56748d2a2da9c44ac45
f6a9555f112882d4ac284c6dc26ae0f02f6ccf8ee312615e01ebec8242bade1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d62ac4e-2ac8-4e49-a61b-a48cff80ffd2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 3d4d7dd0-2be0-46c1-a9c0-aa3cce2e8c81
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSvUHhJIAMFZYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64c8-63a6960043564aa762caaabe;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XuCC11WgzRMNmSeJIacnkPnv1FU_H6_MHMwXYHDoiuXbAWXT7zjDQw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:28:34 GMT
age: 52649
etag: "a4aae05e7a929fc7f652f56748d2a2da9c44ac45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 06:11:41 GMT
age: 24862
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons
200 OK 8.8 kB URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons
IP
Hash 316e597464e68bd9e3b2777fbcc19657
9414211c1fe658f92efb6bcbd383ef44cc82ba58
dcf03f8c1a6c5d8c0c8ff2621f28bede1f544aab43e91dbc9e2c90e3a83d6e48
GET /css2?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 13:06:01 GMT
date: Wed, 07 Dec 2022 13:06:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Sharp
200 OK 8.9 kB URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Sharp
IP
Hash d1c4e48fd3d699a2a23060e3754b91b9
7473308ba25506d46a8535126e559abf4362e255
f04206113906036d1f27b40daa90788c80adb939b8c8c2749f836a5613a5fd45
GET /css2?family=Material+Icons+Sharp HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 13:06:01 GMT
date: Wed, 07 Dec 2022 13:06:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ViuPsZBEVJ-aGOcsfrl3nXu244mzMUMQVhpPeNlO7W3sBrrfuUfXpA==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:32:04 GMT
age: 52439
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Round
200 OK 7.8 kB URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Round
IP
Hash 09260695b9353289e8b45b5396281403
5fae6836055b86c4c038e1929a2df49db1089f69
66ddca6fb7e2a80acd76387fbb9e6117fbb8405ff70d68a1403d925167bd4afe
GET /css2?family=Material+Icons+Round HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 13:06:01 GMT
date: Wed, 07 Dec 2022 13:06:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Outlined
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Outlined
IP
GET /css2?family=Material+Icons+Outlined HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 13:06:01 GMT
date: Wed, 07 Dec 2022 13:06:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.opensea.io/Logos/opensea-pride.svg
200 OK 0 B URL HTTP/2 static.opensea.io/Logos/opensea-pride.svg
IP
GET /Logos/opensea-pride.svg HTTP/1.1
Host: static.opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 13:06:01 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdt4rZ1g5vY_MZuK5wVtnFkhy0lcbomtYq20azS5pNKne94LDOGcwAVSMrMBuM1eJ4LvFEHfZZ1wKIiDmQ7UlAojVA
last-modified: Sat, 04 Jun 2022 00:44:06 GMT
etag: W/"c6663547ec3b4fce760ea28efc547df9"
x-goog-generation: 1654303446305079
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4301
x-goog-hash: crc32c=cQBNsw==, md5=xmY1R+w7T852DqKO/FR9+Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
cache-control: public,max-age=3600
cf-cache-status: REVALIDATED
set-cookie: __cf_bm=7Y6CW328VQCJePhjotsf_mnwb6zUr7IOZak1RmA9MMQ-1670418361-0-AUsLCC7gUVu77dNU7TDLoIrVGwD5sw+wI6BbNCBkgS3LIxbFJnAR3Xt7XsHf5dDHelPrGsfdhVlZz/apSxUZDVU=; path=/; expires=Wed, 07-Dec-22 13:36:01 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 775d79e58d870b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap
IP
GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 13:06:01 GMT
date: Wed, 07 Dec 2022 13:06:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Material+Icons+Two+Tone
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Material+Icons+Two+Tone
IP
GET /css2?family=Material+Icons+Two+Tone HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 13:06:01 GMT
date: Wed, 07 Dec 2022 13:06:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.opensea.io/gas-free/video-background.svg
200 OK 0 B URL HTTP/2 static.opensea.io/gas-free/video-background.svg
IP
GET /gas-free/video-background.svg HTTP/1.1
Host: static.opensea.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 13:06:01 GMT
content-type: image/svg+xml
x-guploader-uploadid: ADPycdsv4zeXqUuap7ZHtxBQ21htxixgBfJlRFfz6TZdvVkxamQCb5XxIxGi0GI401w11xqjWWSS-ncaCkPSUhPaR3Qg
x-goog-generation: 1630524348914119
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 20064
x-goog-hash: crc32c=8vorDw==, md5=9AtoCsBIAExuRya7g4YFUA==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
last-modified: Wed, 01 Sep 2021 19:25:48 GMT
etag: W/"f40b680ac048004c6e4726bb83860550"
cache-control: public,max-age=3600
cf-cache-status: HIT
age: 2734
set-cookie: __cf_bm=o09nA3P8lB_pWUoi5XnBh44byywm7XogpX476y_BXF4-1670418361-0-Af0TvcNTDQDNKOVo2Mod+AcurbfdDD83jcL0UJUnwhlGcXfAfS12Q9Cs1DdrfQCbWVwTnuGKOi0hgAgbbjwhjJQ=; path=/; expires=Wed, 07-Dec-22 13:36:01 GMT; domain=.opensea.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 775d79e63e1e0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
200 OK 0 B URL HTTP/2 www.youtube.com/embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0
IP
GET /embed/gfGuPd1CELo?playlist=gfGuPd1CELo&cc_load_policy=3&autoplay=0&controls=0&loop=0&modestbranding=1&rel=0 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://192.236.176.76/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Dec 2022 13:06:01 GMT
strict-transport-security: max-age=31536000
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=fdskz0UNtu8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=Uqg3FCzgGtg; Domain=.youtube.com; Expires=Mon, 05-Jun-2023 13:06:01 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+924; expires=Fri, 06-Dec-2024 13:06:01 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.236.176.76
95.101.11.115
104.18.17.184
93.184.220.29