| fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 | 142.250.178.99 | 200 OK | 7.8 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 IP 142.250.178.99:443
Requested byhttp://url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7824, version 1.0 Hashaf4d371a10271dafeb343f1eace762bc 6d11d743bc3cfb169d70bc86450f18351dc1a905 60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2
GET /s/poppins/v23/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://url.avanan.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Apr 2025 21:43:23 GMT
expires: Thu, 30 Apr 2026 21:43:23 GMT
cache-control: public, max-age=31536000
age: 126267
last-modified: Wed, 23 Apr 2025 16:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 142.250.178.99 | 200 OK | 7.7 kB |
URL GET fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP 142.250.178.99:443
Requested byhttp://url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint62:05:36:C2:8E:4C:CD:95:1E:1C:75:06:44:A3:57:E5:C0:17:02:80 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v23/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://url.avanan.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Apr 2025 21:38:12 GMT
expires: Thu, 30 Apr 2026 21:38:12 GMT
cache-control: public, max-age=31536000
age: 126579
last-modified: Wed, 23 Apr 2025 16:07:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va | 3.167.2.23 | 403 Forbidden | 41 kB |
URL User Request GET url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va IP 3.167.2.23:443
CertificateIssuerAmazon Subject*.avanan.click FingerprintE5:B4:EB:B3:6F:9D:67:20:14:36:82:D3:86:89:5C:74:F0:9A:6E:35 ValidityThu, 14 Nov 2024 00:00:00 GMT - Sat, 13 Dec 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (41202), with no line terminators Hash40b38915cbe7157aaea5e3860f1b8148 e1d367c7fab92927ae5a2f015fb78d4206918420 e2b6cfe0e2ee44a5eb3cd3fa1a33d1f2aa6bba8f45cedeca9df5effbc007258b
NIDS | Severity | Alert | suricata | low | ETPRO INFO HTTP Request to a *.click domain |
GET /v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va HTTP/1.1
Host: url.avanan.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html
content-length: 41202
date: Fri, 02 May 2025 08:47:49 GMT
apigw-requestid: J7n8egz4IAMEYSQ=
content-encoding: UTF-8
cache-control: max-age=100
x-cache: Error from cloudfront
via: 1.1 c99d057689db169d0b27b6e562e255c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: pQZOS7vVYOw9p9lwBcRa4tFx6SEYvcX7VFNyr3fOsr4c76OFHXbwAg==
X-Firefox-Spdy: h2
|
|
| url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va | 3.167.2.23 | 403 Forbidden | 41 kB |
URL User Request GET url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va IP 3.167.2.23:80
File typeHTML document, ASCII text, with very long lines (41202), with no line terminators Hash40b38915cbe7157aaea5e3860f1b8148 e1d367c7fab92927ae5a2f015fb78d4206918420 e2b6cfe0e2ee44a5eb3cd3fa1a33d1f2aa6bba8f45cedeca9df5effbc007258b
NIDS | Severity | Alert | suricata | low | ETPRO INFO HTTP Request to a *.click domain |
GET /v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va HTTP/1.1
Host: url.avanan.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 41202
Connection: keep-alive
Date: Fri, 02 May 2025 08:47:50 GMT
Apigw-Requestid: J7n8jjKUIAMEbbw=
content-encoding: UTF-8
cache-control: max-age=100
X-Cache: Error from cloudfront
Via: 1.1 94fbdabfcc07b91a0e8ffbb741347df8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P2
X-Amz-Cf-Id: 7pvD9N-1uJYNvWf7iX0EpshbZli10unHRKOAto_G9MDUZ4CalX8sgg==
|
|
| fonts.googleapis.com/css?family=Poppins:500,800&display=swap | 142.250.74.10 | 200 OK | 2.4 kB |
URL GET fonts.googleapis.com/css?family=Poppins:500,800&display=swap IP 142.250.74.10:443
Requested byhttp://url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
Hasha0beb48d455386445fde711ea816f524 57aa614546c96f7fae69aca95a5ac10e964bc762 f67dcebab9a9b046b80899d8bb202fc8a9c31276477cabdcb20ace72de08f218
GET /css?family=Poppins:500,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://url.avanan.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 May 2025 08:47:50 GMT
date: Fri, 02 May 2025 08:47:50 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Poppins:500,800&display=swap | 142.250.74.10 | 200 OK | 2.4 kB |
URL GET fonts.googleapis.com/css?family=Poppins:500,800&display=swap IP 142.250.74.10:443
Requested byhttp://url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint06:13:4C:49:F4:23:BB:58:C3:31:41:0E:F9:E0:C5:EF:74:A9:0C:67 ValidityMon, 31 Mar 2025 08:55:35 GMT - Mon, 23 Jun 2025 08:55:34 GMT
Hasha0beb48d455386445fde711ea816f524 57aa614546c96f7fae69aca95a5ac10e964bc762 f67dcebab9a9b046b80899d8bb202fc8a9c31276477cabdcb20ace72de08f218
GET /css?family=Poppins:500,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://url.avanan.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 May 2025 08:47:50 GMT
date: Fri, 02 May 2025 08:47:50 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| url.avanan.click/favicon.ico | 3.167.2.23 | 403 Forbidden | 42 kB |
URL GET url.avanan.click/favicon.ico IP 3.167.2.23:80
Requested byhttp://url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va
File typeHTML document, ASCII text, with very long lines (30944) Hash870933f8295b84a72f2b9a3029599703 703ccc3836db7c49776a4fe5b17e401a1231b0e8 fe5069c7a627508a36842b726496758e9d060760e725e0a16601514cff6e68bd
NIDS | Severity | Alert | suricata | low | ETPRO INFO HTTP Request to a *.click domain |
GET /favicon.ico HTTP/1.1
Host: url.avanan.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://url.avanan.click/v2/___https:/vo8067.ezepo.net/unsubscribe/3/12/3/735d69dc58b1a0ec935d0bdcc120181e/?s1=___.yxazonnoaxbycmv4chjlc3m6ytpvojy4otjkmwnjyti0mtdingzinzmym2i4owq5nzzlote1ojy6n2yyyzo0nmnkmmqwmtuxzta0ztbinjg3ntu0mgjimtc4yjy5oddjzdu5n2q4mgy0ywq5yjmxymexzdbhnmvmntu5njzhomg6va
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 42343
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 12:45:17 GMT
ETag: "870933f8295b84a72f2b9a3029599703"
x-amz-error-code: AccessDenied
x-amz-error-message: Access Denied
Date: Fri, 02 May 2025 08:47:50 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 94fbdabfcc07b91a0e8ffbb741347df8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P2
X-Amz-Cf-Id: C7tH9SvoOx2bGJPXlPbklkJs5z5-Nq9dOxDsQ54MJvhuAtw3vY_WeQ==
|
|