Report - discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s

Report Overview

Submitted URL
discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s
IP
172.67.177.193
ASN
#13335 CLOUDFLARENET
Submitted
2022-09-22 08:30:29
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	652 B	1.5 kB	23.36.76.226
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
discord.com	1053	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	31 kB	162.159.137.232
steamcommunity.com	4728	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	374 B	39 kB	23.53.54.51
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	395 B	633 B	216.58.211.10
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.36
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	34.160.144.191
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	44.242.41.15
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.6 kB	55 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.76.226
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	662 B	1.4 kB	142.250.74.3
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.0 kB	31 kB	93.184.220.29
discordgifts.ru	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	477 B	78 kB	172.67.177.193
cdn.discordapp.com	2474	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4.0 kB	755 kB	162.159.135.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-22	medium	discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s	72 B	2023-03-07	2024-03-04
Pretty URL discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s IP 172.67.177.193 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:06:54 Last Seen2024-03-04 19:14:25 Times Seen9 Hash fb66ce5a8cc5e1b3b6f494684c637ebd 1c9ad116ca27259fbeeb33af1425be497f5d4f23 5863b501dbcab16cee6e29209a40b31a97342ae5b99119267775157755d131fa Loading...

	discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s	104 B	2023-03-07	2024-03-31
Pretty URL discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s IP 172.67.177.193 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:42 Last Seen2024-03-31 06:12:24 Times Seen199 Hash aa3cf285e47a1ba1f27d140bac2e49e9 9f756cac9c103f3f346e6e40a91e7e8c66bfc82e 99c0848540540bcded9ee53be5f86aa69ec8b5098f9db89e3400016f4c235179 Loading...

	discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s	143 B	2023-03-07	2023-03-07
Pretty URL discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s IP 172.67.177.193 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:06:54 Last Seen2023-03-07 23:06:54 Times Seen1 Hash c5998aeaab944cfd8655dc1f2a7feda9 cf4affa729136bd58027758d77b86ab1a4c374ef b3f62bd184c051d71592e98c5608a32db9f51b03eb366c6c5f362ca74462856e Loading...

	discordgifts.ru/4asc/script.js	31 kB	2023-03-07	2023-03-07
Pretty URL discordgifts.ru/4asc/script.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:06:54 Last Seen2023-03-07 23:06:58 Times Seen1 Hash 9a02f3a77ac1340ad9d1b5a012b7a878 ba11e3be76ef3b33fb65492fb064a24cae4d5a91 bb031f03aff02c689687c1283970c76a4ac68954f220eb2b6000c2a0cf6e2f57 Loading...

	discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s	68 B	2023-03-07	2024-03-04
Pretty URL discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s IP 172.67.177.193 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:06:54 Last Seen2024-03-04 19:14:25 Times Seen7 Hash 9125c3f0b7a9a48174426f865ab323be d03c2c8cea9098b72a4642e8d38ca5bbca8c4511 38798e3bac949cb402ffcb2263f0c831435d4954802f67bc19c45dfbc4ebdf2a Loading...

HTTP Transactions (47)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.36

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
804f8bbb7f556d51a5f52d5ebd5b6eef
922cd7e06df278615a04abb81d811d14596c8180
ef4804d381a34ab67873a7755621081c49c646310e085a9b2356ae07098f6021

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Backoff, Retry-After, Content-Type
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 22 Sep 2022 07:52:44 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: v1NpR-j1XPayV6l5Zj624bRSzi9lkKhv8LV04Wx2SME6eKolYpIShw==
Age: 2254

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7011
Expires: Thu, 22 Sep 2022 10:27:10 GMT
Date: Thu, 22 Sep 2022 08:30:19 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
afb65a07bf7214addf83d17a53acba32
a8e973204431320aa7b362a4e73944520c4b51b9
46e1a9e6c98245afb7fa84bc6d9ba6844105024e2d3f56e28748e6c321475d02

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46E1A9E6C98245AFB7FA84BC6D9BA6844105024E2D3F56E28748E6C321475D02"
Last-Modified: Wed, 21 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14019
Expires: Thu, 22 Sep 2022 12:23:58 GMT
Date: Thu, 22 Sep 2022 08:30:19 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: G2gLIeaj1pSwC7guJxZ6+ZxrvZ0+lQrLI9feRFMa82dRTFHI34WxzzWlHTEFBmlBIBt8D0S3C5Q=
x-amz-request-id: F99M6DVJV6B9PBYC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 22 Sep 2022 07:43:43 GMT
age: 2796
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.76.226

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
031a4c15fdd732176e11406ddee8e258
0a3115b02151b1b9f36dfc2a90146d7be71de4ae
8bbf8d7ab8485ee21143ec6d4dec022f6273ce04ef3ed814c830b8aa29afee28

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "8BBF8D7AB8485EE21143EC6D4DEC022F6273CE04EF3ED814C830B8AA29AFEE28"
Last-Modified: Wed, 21 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 22 Sep 2022 14:30:19 GMT
Date: Thu, 22 Sep 2022 08:30:19 GMT
Connection: keep-alive

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.76.226

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
031a4c15fdd732176e11406ddee8e258
0a3115b02151b1b9f36dfc2a90146d7be71de4ae
8bbf8d7ab8485ee21143ec6d4dec022f6273ce04ef3ed814c830b8aa29afee28

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "8BBF8D7AB8485EE21143EC6D4DEC022F6273CE04EF3ED814C830B8AA29AFEE28"
Last-Modified: Wed, 21 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 22 Sep 2022 14:30:19 GMT
Date: Thu, 22 Sep 2022 08:30:19 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.36

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.36:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 22 Sep 2022 08:03:22 GMT
Cache-Control: max-age=3600
Expires: Thu, 22 Sep 2022 08:05:33 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SANsOWYzE3lBZcmvstvJj6q8L_9FijthmaVg1jMcmjPsntEXN32Vgg==
Age: 1617

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
ff6d50919e56aed75c47feb45ee2f2ec
98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef
b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5374
Cache-Control: max-age=90367
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Etag: "632ac61c-1d7"
Expires: Fri, 23 Sep 2022 09:36:26 GMT
Last-Modified: Wed, 21 Sep 2022 08:06:52 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
5a5b5718515eef3910a48646046f1782
95d9fbdada7c50da30014ae4481b60f3e69e614f
bf150988dbca3fe9a9bc73be62aaaedad2e099e54f301bbb660f910f692314b4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2641
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Last-Modified: Thu, 22 Sep 2022 07:46:18 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
ba9a8289aa3bf469249abf0554b07b27
a96bb2f997f4271f6dde6af62a756ac6245bbd38
adaf3a2ace16699d106ee7e921718c338b50e10dd16fdbf03112391c403727cf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4193
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Last-Modified: Thu, 22 Sep 2022 07:20:26 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 278

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
ba9a8289aa3bf469249abf0554b07b27
a96bb2f997f4271f6dde6af62a756ac6245bbd38
adaf3a2ace16699d106ee7e921718c338b50e10dd16fdbf03112391c403727cf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4193
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Last-Modified: Thu, 22 Sep 2022 07:20:26 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 278

ocsp.digicert.com/

93.184.220.29

200 OK

26 kB

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
26 kB (26133 bytes)
Hash
5dcf86b7c43ac49a0322cd810571142c
2fecdf182ab9bf8c55a973d05b33dd3412adf64d
760a68210358c99ce84f93a983e54b76b4b4c562ff21ed412eaff9f49d0798b0

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2274
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Last-Modified: Thu, 22 Sep 2022 07:52:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
ba9a8289aa3bf469249abf0554b07b27
a96bb2f997f4271f6dde6af62a756ac6245bbd38
adaf3a2ace16699d106ee7e921718c338b50e10dd16fdbf03112391c403727cf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6336
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Last-Modified: Thu, 22 Sep 2022 06:44:43 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278

discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s

172.67.177.193

200 OK

77 kB

URL HTTP/2
discordgifts.ru/billing/promotions/vy98rpaEJZnhh5x37dfgerU3s
IP
172.67.177.193:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1273), with CRLF, LF line terminators
Size
77 kB (76654 bytes)
Hash
d79f22bea37c2c8148feadb171939f7a
292b2baa2a7f2c13811ca111825de70f043b9248
759cbee4ae6de054fcd76647d29c946f4ea5075d4cc11555ecc9bfabccacf105

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /billing/promotions/vy98rpaEJZnhh5x37dfgerU3s HTTP/1.1
Host: discordgifts.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
set-cookie: session=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsaW5rSUQiOjQ1MzM0LCJvd25lciI6MjAzNywiZG9tYWluSUQiOjk2MTEsImRvbWFpbiI6ImRpc2NvcmRnaWZ0cy5ydSIsInBhdGgiOiJiaWxsaW5nL3Byb21vdGlvbnMvdnk5OHJwYUVKWm5oaDV4MzdkZmdlclUzcyIsInJlYWxJcCI6IjkxLjkwLjQyLjE1NCIsImlhdCI6MTY2MzgzNTQxOX0.h31s8hmPfqyVnQC-tZILLGe4WnaRouwTUVEae_vbvOw; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qwjdvbyW0HujH%2B1iTvuYc5v34uxy3X1CqqR4O1R5TnEKfOHSxtTIsYnNd903xv06Gd6Z%2FXChgxr0Od%2BtPDGSw7sWyEMAurUqspndFeTxsuz3nb8ugsjWKoG7xoCLq2XMaio%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9ad89dca60b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
5a5b5718515eef3910a48646046f1782
95d9fbdada7c50da30014ae4481b60f3e69e614f
bf150988dbca3fe9a9bc73be62aaaedad2e099e54f301bbb660f910f692314b4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2641
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Last-Modified: Thu, 22 Sep 2022 07:46:18 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 279

cdn.discordapp.com/attachments/818120722869911602/884000199557677076/44.png

162.159.135.233

200 OK

5.1 kB

URL HTTP/2
cdn.discordapp.com/attachments/818120722869911602/884000199557677076/44.png
IP
162.159.135.233:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 193 x 113, 8-bit/color RGBA, non-interlaced\012- data
Size
5.1 kB (5095 bytes)
Hash
65018bc94629ba373792d102edc9ddd2
e3bcd1933781ba3c407d726b9a879ed648cc7f8d
47c1a7587b8b43d15e190669cb87d689c41c6ada64d4791a4368894902c93aaf

HTTP Headers

GET /attachments/818120722869911602/884000199557677076/44.png HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: image/png
content-length: 5095
cf-ray: 74e9ad8e581fb50c-OSL
accept-ranges: bytes
cache-control: public, max-age=31536000
etag: "65018bc94629ba373792d102edc9ddd2"
expires: Fri, 22 Sep 2023 08:30:19 GMT
last-modified: Sun, 05 Sep 2021 09:01:11 GMT
vary: Accept-Encoding
cf-cache-status: HIT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1630832471538039
x-goog-hash: crc32c=0puVng==, md5=ZQGLyUYpujc3ktEC7cnd0g==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5095
x-guploader-uploadid: ADPycdum22FO-Ia5acqljha6ueEatO-Wz7v0hmt_iyRGhwtlu6x4-vnQvHcN8yynBiNoh18lwqMoB0sLj0kiVcOn9vF-DQ
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NcW0AE5EvlNKkPVXIxXWm52f%2BDyEKxQ%2B5LmbxAiavnu4glbmqpodMBh7FH1hw9JHK%2BXQdFizbEQhAlrfV%2F7ruthuqRAdIy2g1q2jnxXymFNdHYbCsYRejGAmvx4Yx%2Bc%2Bk2fqEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

cdn.discordapp.com/attachments/818120722869911602/884001809654484993/e6d6b255259ac878d00819a9555072ad.png

162.159.135.233

200 OK

288 B

URL HTTP/2
cdn.discordapp.com/attachments/818120722869911602/884001809654484993/e6d6b255259ac878d00819a9555072ad.png
IP
162.159.135.233:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced\012- data
Size
288 B (288 bytes)
Hash
e6d6b255259ac878d00819a9555072ad
6beb12d36acbad79743495aef581891a1ff4f5f5
21d34772ed80c8be7ab9e7338498bdfe2f66c77b61542cc48e103fd77ecd7f60

HTTP Headers

GET /attachments/818120722869911602/884001809654484993/e6d6b255259ac878d00819a9555072ad.png HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: image/png
content-length: 288
cf-ray: 74e9ad8e5816b50c-OSL
accept-ranges: bytes
cache-control: public, max-age=31536000
etag: "e6d6b255259ac878d00819a9555072ad"
expires: Fri, 22 Sep 2023 08:30:19 GMT
last-modified: Sun, 05 Sep 2021 09:07:35 GMT
vary: Accept-Encoding
cf-cache-status: HIT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1630832855435973
x-goog-hash: crc32c=jKAAYA==, md5=5tayVSWayHjQCBmpVVByrQ==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 288
x-guploader-uploadid: ADPycdsQ0cXHwSciZfw5L48IjKZjk3XoGTbVezGmuAfM-J51Dt08bm_a0yfNPcYqYBixDczNzHaChXAgdn7Mjm2WaXe8eQ
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zNSgZ75%2FwvFojNX8QwpYYXS4GfGAo4GEc%2Fo5JBSo7%2BNmzzeI7l%2BrTvpuZK%2Bc%2BIUi2TDnKyz1JiDqtYr3FlkcMf3Wq9zpnJPHiL%2FyrtutjnxVhE8C2OazN5zh2kalv3OOgMAn7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
ba9a8289aa3bf469249abf0554b07b27
a96bb2f997f4271f6dde6af62a756ac6245bbd38
adaf3a2ace16699d106ee7e921718c338b50e10dd16fdbf03112391c403727cf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4193
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:19 GMT
Last-Modified: Thu, 22 Sep 2022 07:20:26 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 278

cdn.discordapp.com/attachments/818120722869911602/884000234466869299/66.png

162.159.135.233

200 OK

358 kB

URL HTTP/2
cdn.discordapp.com/attachments/818120722869911602/884000234466869299/66.png
IP
162.159.135.233:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 708 x 464, 8-bit/color RGBA, non-interlaced\012- data
Size
358 kB (357891 bytes)
Hash
1f3804a68918996481e867f30dc0df05
65ee0c18aa74294884c4fe5edfb9406f3a567187
818637899615c4100981db44740795fc42d9163bc436c8596d384304fd8f2caa

HTTP Headers

GET /attachments/818120722869911602/884000234466869299/66.png HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: image/png
content-length: 357891
cf-ray: 74e9ad8e5819b50c-OSL
accept-ranges: bytes
cache-control: public, max-age=31536000
etag: "1f3804a68918996481e867f30dc0df05"
expires: Fri, 22 Sep 2023 08:30:19 GMT
last-modified: Sun, 05 Sep 2021 09:01:19 GMT
vary: Accept-Encoding
cf-cache-status: HIT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1630832479872659
x-goog-hash: crc32c=PgvrCA==, md5=HzgEpokYmWSB6GfzDcDfBQ==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 357891
x-guploader-uploadid: ADPycduA1klBibQ547oBnVwMuG4WJBhhFNfSmTbuz6Bm4NAofo7wS8ay3hNQlqTEP4iB2BvZC-oolDMzMEVah3emDAY67FxvUiEW
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zj4Zs2YSbNtmNGFEVdYC6MuRCJG9uqQs9MglqNZb1y2EriPrasfXyRwsgcpHBekk%2FORLRHyqcsj3FFVs3jzXB%2FxvyLozTmfpbY0Ozk4w3qEwPwVlmsM0zfdLPwckt62w%2BsSyOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

cdn.discordapp.com/attachments/818120722869911602/884000214405496832/55.png

162.159.135.233

200 OK

357 kB

URL HTTP/2
cdn.discordapp.com/attachments/818120722869911602/884000214405496832/55.png
IP
162.159.135.233:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 708 x 448, 8-bit/color RGBA, non-interlaced\012- data
Size
357 kB (357275 bytes)
Hash
52fad5e8c8138689b6a5fad2e79cc63f
36f43d633257152492f931be7efa37d6007974aa
2ce3da00b8194687cc9ccc2732560e47bb79b2a825f51212bf87a0f7d200aa05

HTTP Headers

GET /attachments/818120722869911602/884000214405496832/55.png HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: image/png
content-length: 357275
cf-ray: 74e9ad8e5814b50c-OSL
accept-ranges: bytes
cache-control: public, max-age=31536000
etag: "52fad5e8c8138689b6a5fad2e79cc63f"
expires: Fri, 22 Sep 2023 08:30:19 GMT
last-modified: Sun, 05 Sep 2021 09:01:15 GMT
vary: Accept-Encoding
cf-cache-status: HIT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1630832475088091
x-goog-hash: crc32c=S8hpnQ==, md5=UvrV6MgThom2pfrS55zGPw==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 357275
x-guploader-uploadid: ADPycduH5DsyIRbkKRz6rVW0B7z6D5RRxir_Ri3ao08ScjHfwPvHjdTQ2OZu9lO41Fbg2_L1q_3eMiGrDWJnW0POQGPD3Q
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ASUSthZiB6%2BRS%2BZh%2BkoyJKcPWx5PUBqVlZI3Gb2CTdzloWvST%2FzegVXeGquPWMbA1mEMFx6Jf%2BfTPJKI1PeaExx2qzLppYLyyxKo%2BbJoInAwJbnj4WnpaTB3HTrGQLd0zn0GFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

discord.com/assets/c8d1fec4ad144f280f54.js

162.159.137.232

403 Forbidden

6.5 kB

URL HTTP/2
discord.com/assets/c8d1fec4ad144f280f54.js
IP
162.159.137.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (531)
Size
6.5 kB (6528 bytes)
Hash
dd0ff8b8b405371dbcafe65982ea216b
f019a3fca148912184eeaf3b679328a5301d6144
744caa99d80013528c710df1505d81583ccffbab0dda298a7b8b7becbc1b8c97

HTTP Headers

GET /assets/c8d1fec4ad144f280f54.js HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 403 Forbidden
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lcw3uBU1BFv1zZY8OD8YpO8Hg1jqFGbD7a2QPlgTGqqp4xiQqnCP41mQGgEd16NmTGksq4cZvbcOH%2FKiEfDPv8Poga4VQl9j3aPyFPuKSfjKJNa4JMNZqy2VsM%2BD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74e9ad8e798fb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
3eaa593eb9ce2d4e2c1cd2b695dc92a7
79a0e8bd28a5e53afdea1bbb1ac929d3e5e97bdc
adab3a925537782aefbb82de8b7e01276de87f354faa16204686d9bf38c34648

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2177
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:30:20 GMT
Last-Modified: Thu, 22 Sep 2022 07:54:03 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

44.242.41.15

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.242.41.15:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: eNFXwFpZaYXruyRpCIrKtg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qiV4GikgC/tl0AEoxCxSDsjaOl8=

steamcommunity.com/favicon.ico

23.53.54.51

200 OK

39 kB

URL HTTP/1.1
steamcommunity.com/favicon.ico
IP
23.53.54.51:0
ASN
#1299 Telia Company AB

File type
MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Size
39 kB (38554 bytes)
Hash
231913fdebabcbe65f4b0052372bde56
553909d080e4f210b64dc73292f3a111d5a0781f
9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: steamcommunity.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Content-Type: image/x-icon
Cache-Control: public,max-age=86400
Expires: Tue, 19 Oct 2021 17:05:06 GMT
Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT
Content-Length: 38554
Date: Thu, 22 Sep 2022 08:30:20 GMT
Connection: keep-alive

discord.com/assets/41b19499e43362e694db.js

162.159.137.232

403 Forbidden

6.5 kB

URL HTTP/2
discord.com/assets/41b19499e43362e694db.js
IP
162.159.137.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (531)
Size
6.5 kB (6528 bytes)
Hash
388019eff3e73040e182e0ba29f42f1a
fc69da64e2347287255be1e04409fa639253962a
295ff3ffbea05f847e9d854c2943f8e8f44e24b2906ecbca3f7812f7c669eb32

HTTP Headers

GET /assets/41b19499e43362e694db.js HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 403 Forbidden
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gT9cWmZJcK9G9C8NBB%2B2bgPyO9%2Bli35Y2Y6NK0LlXmcx%2Fov0WgkUDvBKNaQqBJivVYsVXXjg%2F2ABAkn3ICcKgJxmE0gSTr0wcUD3pkYyc5ki4Nsjgluoq7ZWxmwc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74e9ad8e798cb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.discordapp.com/attachments/818120722869911602/884000175457185842/22.png

162.159.135.233

200 OK

4.8 kB

URL HTTP/2
cdn.discordapp.com/attachments/818120722869911602/884000175457185842/22.png
IP
162.159.135.233:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 145 x 111, 8-bit/color RGBA, non-interlaced\012- data
Size
4.8 kB (4801 bytes)
Hash
fe01874dab639725b72a1af7febf8fa7
73009a4449ec313b36e2db781414371f2ca45bb6
c63f99eb34e670eb4edc8501009a29957766b66fd4b58f1b645c809cc4d35ec6

HTTP Headers

GET /attachments/818120722869911602/884000175457185842/22.png HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:30:20 GMT
content-type: image/png
content-length: 4801
cf-ray: 74e9ad8e581cb50c-OSL
accept-ranges: bytes
cache-control: public, max-age=31536000
etag: "fe01874dab639725b72a1af7febf8fa7"
expires: Fri, 22 Sep 2023 08:30:20 GMT
last-modified: Sun, 05 Sep 2021 09:01:05 GMT
vary: Accept-Encoding
cf-cache-status: MISS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1630832465793711
x-goog-hash: crc32c=Kj16ew==, md5=/gGHTatjlyW3Khr3/r+Ppw==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4801
x-guploader-uploadid: ADPycdtOVsai4HTy0OPJRsHUPEX2VH3BzX5LUQ-9L9srG84Q8psLVWpCC2ebwijdxrKBzAcUX4ucgTxvn-sjBsX-3R_tsA
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VZCu%2F0DQ%2Fjc7lZw5xFb%2B7aI%2Bt%2FvP0OxYliGOjnmRVtop4BWflNgwIYd7IBXEkKgFHbIY%2B7ne2gmtXafwVkj0HDUZ%2B0ekLNK4YS%2Bx2QLxs5faji4EhmhBxEOOUA%2BvfWecvJs%2FrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

cdn.discordapp.com/attachments/818120722869911602/884000187708747836/33.png

162.159.135.233

200 OK

5.0 kB

URL HTTP/2
cdn.discordapp.com/attachments/818120722869911602/884000187708747836/33.png
IP
162.159.135.233:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 193 x 113, 8-bit/color RGBA, non-interlaced\012- data
Size
5.0 kB (5006 bytes)
Hash
b95b182cbb45def7e9d738a6b1cb7f52
0108ef451205142b295649426db473843bb5857e
7a0e9b77119af13449fe59ded26ab577de8b03d1aaaded707f1b79ed0e26ed6c

HTTP Headers

GET /attachments/818120722869911602/884000187708747836/33.png HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:30:20 GMT
content-type: image/png
content-length: 5006
cf-ray: 74e9ad8e581eb50c-OSL
accept-ranges: bytes
cache-control: public, max-age=31536000
etag: "b95b182cbb45def7e9d738a6b1cb7f52"
expires: Fri, 22 Sep 2023 08:30:20 GMT
last-modified: Sun, 05 Sep 2021 09:01:08 GMT
vary: Accept-Encoding
cf-cache-status: MISS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1630832468728311
x-goog-hash: crc32c=6iXUlg==, md5=uVsYLLtF3vfp1zimsct/Ug==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5006
x-guploader-uploadid: ADPycdvc9BMQLxP_7YlGchDoDZW63r_y3jt8f2amDxd_jnfiwhDq3cyx2elGejgzIrXnOfs-G1QBR57teQoGOoOB7vAbPhnnaWHw
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M3H94QvdwJ02M7U5WRTII7iNj6SExfTRCirtKzzg8xjl%2Bf2OoLEG7oSKKNUhjH8FmgAAvdP%2Bxd4rCtf%2FNetWcYSYiz0CZZfLPD5j%2B0KBcJQtc1D05MGzbFqqrl7CqEMUX1%2BEfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

cdn.discordapp.com/attachments/818120722869911602/883999740071657542/nitro.png

162.159.135.233

200 OK

7.0 kB

URL HTTP/2
cdn.discordapp.com/attachments/818120722869911602/883999740071657542/nitro.png
IP
162.159.135.233:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 300 x 122, 8-bit/color RGBA, non-interlaced\012- data
Size
7.0 kB (7036 bytes)
Hash
203a6b5fb33e009a7b1a8ede2b995552
fc7848c80aa4e1e90fe9c6c156f1f550b0114899
8c89c4f3023d02b04197a30ca20f42ca7eb2634e1432ffff7b9d641a1f71a066

HTTP Headers

GET /attachments/818120722869911602/883999740071657542/nitro.png HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:30:20 GMT
content-type: image/png
content-length: 7036
cf-ray: 74e9ad8e581bb50c-OSL
accept-ranges: bytes
cache-control: public, max-age=31536000
etag: "203a6b5fb33e009a7b1a8ede2b995552"
expires: Fri, 22 Sep 2023 08:30:20 GMT
last-modified: Sun, 05 Sep 2021 08:59:21 GMT
vary: Accept-Encoding
cf-cache-status: MISS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1630832361995283
x-goog-hash: crc32c=/XhSjA==, md5=IDprX7M+AJp7Go7eK5lVUg==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7036
x-guploader-uploadid: ADPycduttV6FyW0pdlGkAHsahuC0PbUWFMEisKpEefiFD88CL2T_Qu-0RhZ7ZUanSvWVFufVEH2GJf3qyH03oATelja0HVPoVP-7
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HpnjhlN8wwp4WhOdV2BqrFM9x1lU0wpV5dbYzs6rL1EA7DfG%2BvjgjYxY1F4Kc5ECxbwpSV%2BqhxTB15U5EsreV7VQkPDMrmpRSLeP6qGLuK1d%2BCVxTr%2FYIwXXF%2BxRw8vEIOtudg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

cdn.discordapp.com/attachments/818120722869911602/884000156729630780/11.png

162.159.135.233

200 OK

6.5 kB

URL HTTP/2
cdn.discordapp.com/attachments/818120722869911602/884000156729630780/11.png
IP
162.159.135.233:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 177 x 97, 8-bit/color RGBA, non-interlaced\012- data
Size
6.5 kB (6452 bytes)
Hash
dfc8ae4a47d9c2c611137ab2ba0d72cc
23d7a322bda0fa808d9d0cbfbe1dc0c4ca49b6c0
3978ebf7a0aaecceaf4bd64ac52812d43c6b88aeba593c383c4a3aef10f3b11b

HTTP Headers

GET /attachments/818120722869911602/884000156729630780/11.png HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:30:20 GMT
content-type: image/png
content-length: 6452
cf-ray: 74e9ad8e581ab50c-OSL
accept-ranges: bytes
cache-control: public, max-age=31536000
etag: "dfc8ae4a47d9c2c611137ab2ba0d72cc"
expires: Fri, 22 Sep 2023 08:30:20 GMT
last-modified: Sun, 05 Sep 2021 09:01:01 GMT
vary: Accept-Encoding
cf-cache-status: MISS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-goog-generation: 1630832461344425
x-goog-hash: crc32c=LFggdw==, md5=38iuSkfZwsYRE3qyug1yzA==
x-goog-metageneration: 2
x-goog-storage-class: NEARLINE
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 6452
x-guploader-uploadid: ADPycdsu5PZtiyXol3e0xDcFkF6tLMUatXd6fx6Nd-VFj60XagtmawOvyDsb2a3G1kFjGXvjnWqw_9ocmqylicQtHRC7FhtVBOGU
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zK%2Fbp91B7y69K%2FpH%2BZMe4ixtR64A10FKOdnZprzHCISZqtNVryeH1HCaRWHA4qnfhJc%2F%2B4SR1FTOJk8QUzdN5ycAfQXVPWt%2F3fZw2PyxNFovoMh%2FqBEN05HYXRTsXPV3YK9%2BHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5579
Expires: Thu, 22 Sep 2022 10:03:20 GMT
Date: Thu, 22 Sep 2022 08:30:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5579
Expires: Thu, 22 Sep 2022 10:03:20 GMT
Date: Thu, 22 Sep 2022 08:30:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5579
Expires: Thu, 22 Sep 2022 10:03:20 GMT
Date: Thu, 22 Sep 2022 08:30:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5579
Expires: Thu, 22 Sep 2022 10:03:20 GMT
Date: Thu, 22 Sep 2022 08:30:21 GMT
Connection: keep-alive

discord.com/assets/5c9406522a805df295db.js

162.159.137.232

403 Forbidden

2.1 kB

URL HTTP/2
discord.com/assets/5c9406522a805df295db.js
IP
162.159.137.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (531)
Size
2.1 kB (2113 bytes)
Hash
76d3fa1321c17c4ae918fba4e4db55f2
abac4ce86bdc09da32603279c83c03a9ce89a30f
d13a96816e226fa46ea6818b28ee874f4dc1feadcb3f5b8c9da219fc4f1927a5

HTTP Headers

GET /assets/5c9406522a805df295db.js HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 403 Forbidden
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XVZrm6ksDtZrBm9%2F4RPBQx5jDYvrWgaDaCl15hnbaHzxTY5dlk8vXTdwNhKw1alVexiQfXmzLbWz1xd44GACEi8ynSgy%2FkfsDg9QKdIO6Q5e%2FQw66ZWghPX7pGK3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74e9ad8e6988b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f33332-2080-459e-ab54-a452b2278994.jpeg

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f33332-2080-459e-ab54-a452b2278994.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8748 bytes)
Hash
888247c1153f8770b880395734749107
7c27c02029eb49e726a076679be2c793da696e45
515852e0d38cdaf86bce45fa5e0df453d08ca36cf6ecfa0c4b868c2143afe333

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0f33332-2080-459e-ab54-a452b2278994.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8748
x-amzn-requestid: 83c28267-4d10-476d-8b11-08b48b046985
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YzG6CGtroAMFyqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ab840-1167c5285b6837d311bfe2a9;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 07:07:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xo0ilY8z0C3rDISFOM5EixEK7HAelSut4hgNNwGYAVQIfPP8C6pUCg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 03:56:35 GMT
age: 16426
etag: "7c27c02029eb49e726a076679be2c793da696e45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb0692-30b9-4b69-a748-f7a4474a72e0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11286 bytes)
Hash
9becda6e892a190dbbc63216ae697506
ba3369e1827d8f01ca10acb8648195847dd02ffd
d71dd28e0ff260326ba0c30748fa11160f4544c2a264d3a3dc361af0de9fd283

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb0692-30b9-4b69-a748-f7a4474a72e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11286
x-amzn-requestid: 7263b60d-fffe-4c0b-8de5-59dc9ac92a47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwZHOaIAMFSQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84cf-62e160b156b587cc21c7fda5;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QxgrVMX7xwI6qE3T3-LRS3JWoJauPyvCSb9TacW9-ktw-BIq5PSF-g==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:48:26 GMT
etag: "ba3369e1827d8f01ca10acb8648195847dd02ffd"
content-type: image/jpeg
age: 38515
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.5 kB (7507 bytes)
Hash
4d98acc059a69d51165fb5e0c7430ea3
09bd3300d710c3212483159f8398b84cde09da26
6e38bbb5c79c4f714973e10961d7bad9e7ae8711cf24d68b13a77206f474d2a6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7507
x-amzn-requestid: 2a40c792-8b1b-4476-92de-1fce3df48fc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCmaHefoAMF4Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e28-6b05350006b7f3fb73d1e37a;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gZ8I075ljJuPvMcsyyRU3m09P9z7mL3WNBiex99pwXtoWDzt_jWP0A==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:25:13 GMT
age: 36308
etag: "09bd3300d710c3212483159f8398b84cde09da26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

discord.com/assets/0.1fafb1729b3e11fa547c.css

162.159.137.232

403 Forbidden

10 kB

URL HTTP/2
discord.com/assets/0.1fafb1729b3e11fa547c.css
IP
162.159.137.232:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (531)
Size
10 kB (10288 bytes)
Hash
8d2ebf04a81459f616a14de84a77c84f
b4a422e273926438eba8fa9a0c738da8ab61240a
cb39f78b26f591a03aa64b0056057dee66e4aeee6295e8926e096ab7a1dd9470

HTTP Headers

GET /assets/0.1fafb1729b3e11fa547c.css HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 403 Forbidden
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cq2rHff%2B7rj%2BgDV7g%2FiJCyTXCXLf5P9RYDlJ%2F%2F0fvS9YEYZV3gTWW2JC1TSHrsm5SPd5HhNY9A8FSPasOjp8GtqNGv79DbdFw8ACnXaHW%2Fo9RvRQqlegbQo7Z6lH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74e9ad8e595cb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10754 bytes)
Hash
af5773255351157d72c28a670a355c60
c803e5866edbe6c9baec14e93677f610bdf09bff
3229b4aa1c698647ad96d114174782549ad240f1b2c4ba8c268165a16afc84f0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10754
x-amzn-requestid: 2d03531d-6055-477f-9cb6-9ea9fa27eeb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vHJ4IAMF42Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-692620e80d5b2efe1d0e3a82;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eYUP9NfAkmU4A-mZvysejq1228Qfb8vbfdXOaHQvr6mjXhnVoWdqJw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:09 GMT
etag: "c803e5866edbe6c9baec14e93677f610bdf09bff"
content-type: image/jpeg
age: 39372
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5453bf0-e297-4ace-a174-b28be2bb7e8d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11645 bytes)
Hash
298be26294efc965abc5707a84df8a0a
5ee6c32afd92810ae61a791c059928e33148bb0c
d9b5fe88c8e03f6a6a64e360015080bca00f7fb147515a137447832bacc2e6e7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5453bf0-e297-4ace-a174-b28be2bb7e8d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11645
x-amzn-requestid: 0ae5c056-6d78-4c37-8e18-b9abfe1e1f47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YzG34FKIIAMF6Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ab832-59fbd91527ea400d333ddc41;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 07:07:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Q7rg9YqHScSwWXfS96bSI5Mb0mSYQ-jbShb7wddPcG51nhn0_8DIJA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 15:21:32 GMT
age: 61729
etag: "5ee6c32afd92810ae61a791c059928e33148bb0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Press%20+%20Start%20+%202p

216.58.211.10

400 Bad Request

0 B

URL HTTP/2
fonts.googleapis.com/css?family=Press%20+%20Start%20+%202p
IP
216.58.211.10:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css?family=Press%20+%20Start%20+%202p HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 400 Bad Request
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 22 Sep 2022 08:30:19 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

cdn.discordapp.com/attachments/880449376957390941/880495556596744252/779a770c34fcb823a598a7277301adaf.png

162.159.135.233

403 Forbidden

0 B

URL HTTP/2
cdn.discordapp.com/attachments/880449376957390941/880495556596744252/779a770c34fcb823a598a7277301adaf.png
IP
162.159.135.233:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /attachments/880449376957390941/880495556596744252/779a770c34fcb823a598a7277301adaf.png HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 403 Forbidden
date: Thu, 22 Sep 2022 08:30:20 GMT
content-type: application/xml; charset=UTF-8
cf-ray: 74e9ad8e5817b50c-OSL
cache-control: private, max-age=0
content-disposition: attachment
expires: Thu, 22 Sep 2022 08:30:20 GMT
vary: Accept-Encoding
cf-cache-status: MISS
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-guploader-uploadid: ADPycdvkYmu1KJlIcg_QEf4_-QMTofuJj4AQlySGtbmr804DXJ49B-3Yd7JmuPt2Z_5UAV04ZdQfkArSLZk518_dl2-DrmUhlhUm
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nDzYfjDyhhwDYWJae8gjVLzimQFuxAYalWTMSkvzn7Ej9w%2Fe9JlXAKSzA0%2BHjRWT11ub4myrZueXO%2BxJ3CLS%2BzMjVsI195Ey5O%2FT6uHEJdyiuhVeZd40MQN5pn%2FqrECvix5VZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

discord.com/assets/220d6edab61258b8bec9.js

162.159.137.232

403 Forbidden

0 B

URL HTTP/2
discord.com/assets/220d6edab61258b8bec9.js
IP
162.159.137.232:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /assets/220d6edab61258b8bec9.js HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 403 Forbidden
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=unTJ6eae6QVRCLD29d9QbmKyX7MCEd9jDJGqJSerDa3E6AEGDwIflKFgzxItIei9fQQPALOt7MKQ5PbqS6Jv%2BmNXqjOry7iv4uKCZloyFvKoGOpQ1sR7iduno0Ww"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74e9ad8e698ab521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

discord.com/assets/00a0131a221e58790dd0.js

162.159.137.232

403 Forbidden

0 B

URL HTTP/2
discord.com/assets/00a0131a221e58790dd0.js
IP
162.159.137.232:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /assets/00a0131a221e58790dd0.js HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://discordgifts.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 403 Forbidden
date: Thu, 22 Sep 2022 08:30:19 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tbm%2BSxXC8Yd2nYusEPA%2F8p0F6oe0GttrGKyuPOIa6mvCft9W2apaTEWYKarbLAgudVAkHuA0wDTQ1%2Fsn7zXkddxrc39p33r3NxQmQpqYTXE3jtgyEcOAXajh29A3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 74e9ad8e7990b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (47)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size