200 OK 44 kB URL User Request GET HTTP/1.1 IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10731), with CRLF, LF line terminators
Hash 99c69752234477706661f6c348a0ec7c
df97d9d9ba2236ca52d4f1dd65a8bec35d75c86b
76c59bf965cb6e825dca8edacf04677359dabfd62ab8e0262acda6b53cde67a4
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.world Domain
suricata medium ET INFO HTTP Request to Suspicious *.world Domain
GET / HTTP/1.1
Host: scoff.world
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:30 GMT
Server: Apache
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_D39EMcCqJIsX+7pVM7BkCurtJCNjD0n2V0Pz95DyNimgOQ2bP07Qp2ddNcPYO266UzWQ7qCkzpmPQSls/oHM6Q==
Keep-Alive: timeout=5, max=117
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
200 OK 100 kB URL User Request GET HTTP/1.1 IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54064), with CRLF, LF line terminators
Hash a0a378c5abb61f32eec5c5bf7da7efda
288786fe4647a2147604c5a28a69a958b88ff4d0
119872ef5b35b5c7b1bfc6ae0915eb267386cf37cd19a1cc671d76090e06d3c6
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.world Domain
suricata medium ET INFO HTTP Request to Suspicious *.world Domain
GET / HTTP/1.1
Host: scoff.world
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:32 GMT
Server: Apache
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_D39EMcCqJIsX+7pVM7BkCurtJCNjD0n2V0Pz95DyNimgOQ2bP07Qp2ddNcPYO266UzWQ7qCkzpmPQSls/oHM6Q==
Keep-Alive: timeout=5, max=121
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fscoff.world%2F&&l=en&o=1701672158405
200 OK 555 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fscoff.world%2F&&l=en&o=1701672158405
IP
ASN #61157 PlusServer GmbH
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with CRLF line terminators
Hash f277dd5c019104abbddb08f84fb8a979
613818911afad613a4b880125e08478b274d9bc5
6ed4b8c83dcb08225d03b108a1f2e52c45a388ddbfa3a41ce25636223b30f57d
GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fscoff.world%2F&&l=en&o=1701672158405 HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:33 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Mon, 04 Dec 2023 06:42:33 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
scoff.world/px.js?ch=1
200 OK 346 B IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.world Domain
GET /px.js?ch=1 HTTP/1.1
Host: scoff.world
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:33 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=111
Connection: Keep-Alive
Content-Type: application/javascript
scoff.world/px.js?ch=2
200 OK 346 B IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.world Domain
GET /px.js?ch=2 HTTP/1.1
Host: scoff.world
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:33 GMT
Server: Apache
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=62
Connection: Keep-Alive
Content-Type: application/javascript
a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1701672153&h=http%3A%2F%2Fscoff.world%2F&&l=en&odw=0&dlt=1&l=en
200 OK 558 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1701672153&h=http%3A%2F%2Fscoff.world%2F&&l=en&odw=0&dlt=1&l=en
IP
ASN #61157 PlusServer GmbH
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with CRLF line terminators
Hash c6e497b889af959bd968d78641732f71
57b27810046eec36f1208aa9b5dc63ad913b7a39
b3a947cb06f7e203e0f2712db8de6dff96cd53383508c3ffce6f4146906d7396
GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1701672153&h=http%3A%2F%2Fscoff.world%2F&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:33 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Mon, 04 Dec 2023 06:42:33 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
i4.cdn-image.com/__media__/js/min.js?v2.3
200 OK 8.4 kB URL GET HTTP/1.1 i4.cdn-image.com/__media__/js/min.js?v2.3
IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type ASCII text, with very long lines (8349), with CRLF line terminators
Hash c16c3a4c0fad29106f34d00e89f6886e
6e11811ab8a98bb295b0916cdee68b302c33403d
097786d677a859b7bc87e285377b083b76d66a2fc2832a16bcd50b0e99df77ff
GET /__media__/js/min.js?v2.3 HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 06:42:33 GMT
Content-Type: application/javascript
Content-Length: 8435
Last-Modified: Thu, 16 Feb 2023 20:25:06 GMT
Connection: keep-alive
ETag: "63ee9122-20f3"
Expires: Mon, 18 Dec 2023 06:42:33 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1701672153&h=http%3A%2F%2Fscoff.world%2F&&l=en&odw=0&dlt=1&l=en
200 OK 14 kB URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1701672153&h=http%3A%2F%2Fscoff.world%2F&&l=en&odw=0&dlt=1&l=en
IP
ASN #61157 PlusServer GmbH
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type ASCII text, with very long lines (45545), with CRLF, LF line terminators
Hash a9978f22a93b5ada37cca3d5bd310f89
734cb2bdeff128eed9ede26ccee9c8f16118b0da
5d13761a8d774d001f4adaa440986d0242c795c5eae4107521dd206977ebb4df
GET /delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1701672153&h=http%3A%2F%2Fscoff.world%2F&&l=en&odw=0&dlt=1&l=en HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:33 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Mon, 04 Dec 2023 06:42:33 GMT
Transfer-Encoding: chunked
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
cdn.consentmanager.net/delivery/flags-square/en.svg
200 OK 2.6 kB URL GET HTTP/1.1 cdn.consentmanager.net/delivery/flags-square/en.svg
IP
ASN #60068 Datacamp Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash 10c6e579553a382bfb4abf6f074e9e68
bc02899da9a57b21c584bcf75799fa1c9bcf68f4
36a01c14fbed3d5f50c6a103ac487e2b173e2025d74fbfdf4c443b0e87b4dfe0
GET /delivery/flags-square/en.svg HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:33 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 15 Jul 2022 22:28:50 GMT
ETag: W/"7b29-5e3df8ad54c80"
Cache-Control: max-age=31536000
Expires: Wed, 27 Nov 2024 20:13:08 GMT
X-77-NZT: EwwBuUwJFAH3HioHAAwBuUwKAQH35wAAAAgB1GY4nAGB
X-77-NZT-Ray: af585630a97fe680d9746d65293f3418
X-Accel-Expires: @1732738388
X-77-Cache: HIT
Content-Encoding: gzip
X-Accel-Date: 1701202619
X-77-Age: 469765
Server: CDN77-Turbo
X-Cache-LB: HIT, HIT
X-Age-LB: 231, 469534
X-77-POP: stockholmSE
i4.cdn-image.com/__media__/pics/29626/register_dot_com_logo.png
200 OK 20 kB URL GET HTTP/1.1 i4.cdn-image.com/__media__/pics/29626/register_dot_com_logo.png
IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type PNG image data, 296 x 49, 8-bit/color RGBA, interlaced\012- data
Hash 11af339e75a3367ff96f92f3a760f715
e35ebad10b6bbe6eebb9e4c991622052a749a8d3
1727757983ae91603ef10bbac574f9511f4ec96c91f935703a2568f4d6419639
GET /__media__/pics/29626/register_dot_com_logo.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 06:42:33 GMT
Content-Type: image/png
Content-Length: 19957
Last-Modified: Tue, 06 Dec 2022 11:28:23 GMT
Connection: keep-alive
ETag: "638f2757-4df5"
Expires: Mon, 18 Dec 2023 06:42:33 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
i4.cdn-image.com/__media__/pics/28905/arrrow.png
200 OK 283 B URL GET HTTP/1.1 i4.cdn-image.com/__media__/pics/28905/arrrow.png
IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type PNG image data, 17 x 27, 8-bit colormap, non-interlaced\012- data
Hash 80d42c82a6c37da90210fd60a2f36128
554ba7c84d2a27ecf3b1f29d03e62101936b54d8
a1626e2d9160a0890a0a8d6e3af9e7095d68a24f9fb5ac8a166000c9a2581e10
GET /__media__/pics/28905/arrrow.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 06:42:33 GMT
Content-Type: image/png
Content-Length: 283
Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT
Connection: keep-alive
ETag: "61d45d4b-11b"
Expires: Mon, 18 Dec 2023 06:42:33 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.d_ncs.d_ancs.d_bncs&h=http%3A%2F%2Fscoff.world%2F&o=1701672158902&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28&
200 OK 43 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.d_ncs.d_ancs.d_bncs&h=http%3A%2F%2Fscoff.world%2F&o=1701672158902&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28&
IP
ASN #61157 PlusServer GmbH
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6f81c41597d3f5a336f458822cc0c32a
8cd77a54b38f1fb376b45af2eaab8f5982523b8d
5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc
GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.d_ncs.d_ancs.d_bncs&h=http%3A%2F%2Fscoff.world%2F&o=1701672158902&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28& HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:33 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Mon, 04 Dec 2023 06:42:33 GMT
Content-Length: 43
Content-Type: image/gif
a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=cv&h=http%3A%2F%2Fscoff.world%2F&o=1701672158904&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28&
200 OK 43 B URL GET HTTP/1.1 a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=cv&h=http%3A%2F%2Fscoff.world%2F&o=1701672158904&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28&
IP
ASN #61157 PlusServer GmbH
Certificate IssuerLet's Encrypt
Subjecta.delivery.consentmanager.net
Fingerprint44:49:A8:C0:AF:F7:D9:6E:D0:B5:35:77:3B:05:89:CC:80:9A:8D:50
ValidityWed, 15 Nov 2023 00:31:04 GMT - Tue, 13 Feb 2024 00:31:03 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6f81c41597d3f5a336f458822cc0c32a
8cd77a54b38f1fb376b45af2eaab8f5982523b8d
5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc
GET /delivery/info/?id=68884&did=1&cfdid=1&t=cv&h=http%3A%2F%2Fscoff.world%2F&o=1701672158904&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=16&dv=28& HTTP/1.1
Host: a.delivery.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 06:42:33 GMT
Cache-Control: no-store, no-cache, must-revalidate
Edge-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Dec 1994 16:00:00 GMT
Pragma: no-cache
Access-Control-Allow-Origin: *
X-XSS-Protection: 0
Last-Modified: Mon, 04 Dec 2023 06:42:33 GMT
Content-Length: 43
Content-Type: image/gif
cdn.consentmanager.net/delivery/js/cmp_en.min.js
200 OK 106 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/js/cmp_en.min.js
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
File type gzip compressed data, from Unix\012- data
Size 106 kB (106110 bytes)
Hash 2b43cfb3e68df31261a4ff159c5afcd1
c683c1cc8ba110a6b1ab82d54998266b1da7bbae
07e5cbe1ae2cbce9ffa31a45ce8ac303355856483121bd93d98ec31d461729f2
GET /delivery/js/cmp_en.min.js HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 06:42:32 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 28 Nov 2023 20:41:16 GMT
etag: W/"647c2-60b3c70a3f300"
cache-control: max-age=86400
expires: Wed, 29 Nov 2023 20:44:33 GMT
edge-control: max-age=86400
x-77-nzt: EwwBuUwJFAH3Uv0AAAgBuUwKCQFhCAHUZjgJAWE
x-77-nzt-ray: af58563018874d77d8746d651dc4253a
x-77-cache: HIT
content-encoding: gzip
server: CDN77-Turbo
x-accel-expires: @1701693702
x-accel-date: 1701607302
x-cache-lb: MISS, HIT
x-age-lb: 64850
x-77-pop: stockholmSE
x-77-age: 64850
X-Firefox-Spdy: h2
i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
200 OK 17 kB URL GET HTTP/1.1 i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type Web Open Font Format, TrueType, length 17264, version 2.1\012- data
Hash a43b107861b42ce1335e41e43d4e4d00
99bdb1cec4a68ebe29249c46fefefb6880d009e5
a6542dc92d71eb412bac89d8fb06c70f15be74a64b1b4ef1633288b78f4f2ff2
GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://scoff.world
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 06:42:33 GMT
Content-Type: application/font-woff
Content-Length: 17264
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
Connection: keep-alive
ETag: "600809b7-4370"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
i4.cdn-image.com/__media__/pics/29590/bg1.png
200 OK 18 kB URL GET HTTP/1.1 i4.cdn-image.com/__media__/pics/29590/bg1.png
IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type PNG image data, 1730 x 988, 4-bit colormap, non-interlaced\012- data
Hash 825ccd29ac102fcadaf92b2343d5917b
24472e766cfac5b82a73b219796556a0a3702bd6
0878fb2875c0ad852de8fb3e8f443afdf3064890f1443b3feccc274382f913cd
GET /__media__/pics/29590/bg1.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 06:42:33 GMT
Content-Type: image/png
Content-Length: 17986
Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT
Connection: keep-alive
ETag: "6380b223-4642"
Expires: Mon, 18 Dec 2023 06:42:33 GMT
Cache-Control: max-age=1209600, public
Accept-Ranges: bytes
scoff.world/favicon.ico
404 Not Found 10 B IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type ASCII text, with no line terminators
Hash 6608dd3e21ca3beabd4bdfa625a0b221
e926d0f8694a4bc4013308afaca7af51e4c9fd9f
c75eb01138771bfb2a5517aeae882356733782767c4560cc9601c34d2591ca75
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.world Domain
GET /favicon.ico HTTP/1.1
Host: scoff.world
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Cookie: __cmpcc=1; __cmpconsentx68884=CP2QuEAP2QuEAAfN0BENAdEgAAAAAAAAAAigAAAAAAAA; __cmpcccx68884=aBP2RpC0AAADgAXACCAF4BxIEHAVEAqWAAA
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Mon, 04 Dec 2023 06:42:33 GMT
Server: Apache
Content-Length: 10
Keep-Alive: timeout=5, max=62
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
cdn.consentmanager.net/delivery/recall/logos/68884
301 Moved Permanently 4.2 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/recall/logos/68884
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /delivery/recall/logos/68884 HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Mon, 04 Dec 2023 06:42:33 GMT
content-type: text/javascript; charset=utf-8
expires: Mon, 04 Dec 2023 20:13:10 GMT
cache-control: public, max-age=86400
edge-control: public, max-age=86400
location: /delivery/whitelabel/cmplogo.svg
x-77-nzt: EwwBuUwJFAH3dJMAAAwBuUwKAQH3DgAAAAwB1GY4nAH3AQAAAA
x-77-nzt-ray: af58563018874d77d9746d656bcd9e15
x-accel-expires: @1701720790
x-accel-date: 1701634405
x-77-cache: HIT
x-77-age: 37763
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 14, 37748
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8yNjQxNS54XzI4LnYucC50XzI2NDE1Lnh0XzI4.js
200 OK 72 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8yNjQxNS54XzI4LnYucC50XzI2NDE1Lnh0XzI4.js
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
File type ASCII text, with very long lines (41766)
Hash d0732cd1f0607b6e2f7a2c18a710a6ef
934edc1b6f5c9d4094e194101f65e66c9267a1f9
4ecff1763453af22e6967580f78dccff4022ee97b7b38e128c9fb10ac7ccc808
GET /delivery/customdata/bV8xLndfNjg4ODQucl9HRFBSLmxfZW4uZF8yNjQxNS54XzI4LnYucC50XzI2NDE1Lnh0XzI4.js HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 06:42:33 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
x-xss-protection: 0
expires: Mon, 04 Dec 2023 06:49:45 GMT
cache-control: public, max-age=1800
edge-control: public, max-age=1800
last-modified: Mon, 04 Dec 2023 06:19:45 GMT
x-77-nzt: EwwBuUwJFAH3GgUAAAwBuUwKCQH3PgAAAAwB1GY4nAH3AAAAAA
x-77-nzt-ray: af58563018874d77d9746d654dadab10
x-accel-expires: @1701672585
x-accel-date: 1701670847
x-77-cache: HIT
x-77-age: 1368
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 62, 1306
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
cdn.consentmanager.net/delivery/whitelabel/cmplogo.svg
200 OK 4.2 kB URL GET HTTP/2 cdn.consentmanager.net/delivery/whitelabel/cmplogo.svg
IP
ASN #60068 Datacamp Limited
Certificate IssuerLet's Encrypt
Subject1376624012.rsc.cdn77.org
Fingerprint40:27:9C:9D:30:35:40:79:7E:8D:6A:C2:06:C0:6F:B7:C6:8E:6A:2F
ValidityMon, 13 Nov 2023 17:00:32 GMT - Sun, 11 Feb 2024 17:00:31 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (4425), with no line terminators
Hash 46d40c431f8e14f71ab8f2f31eee942b
4f2140ab124f17c65f4a1d7998301b4747d1f87b
042c930c16842f0c1a14d5c16d23429d075c1ebdd16cad3ddd6f0d94ab0ae0ae
GET /delivery/whitelabel/cmplogo.svg HTTP/1.1
Host: cdn.consentmanager.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://scoff.world/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 06:42:33 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Wed, 03 May 2023 16:01:17 GMT
etag: W/"104c-5facc2a822d40"
cache-control: max-age=31536000
expires: Wed, 27 Nov 2024 20:12:57 GMT
x-77-nzt: EwwBuUwJFAH3AysHAAwBuUwKCQH3CAAAAAwBJRPCKAH3BQAAAA
x-77-nzt-ray: af58563018874d77d9746d6557138b18
x-accel-expires: @1732738377
x-accel-date: 1701202390
x-77-cache: HIT
x-77-age: 469776
content-encoding: gzip
server: CDN77-Turbo
x-cache-lb: HIT, HIT
x-age-lb: 8, 469763
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
200 OK 17 kB URL GET HTTP/1.1 i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
IP
ASN #40034 CONFLUENCE-NETWORK-INC
File type Web Open Font Format, TrueType, length 17312, version 2.1\012- data
Hash bebe201d813feaad85a3e66607d0da3a
28b049502afa8e9db5340c1a92400591b39870e8
58bb75322beb862803b0d156e1a1d01fb1e7fde82ee93c929b08bf5aea9fc55b
GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://scoff.world
DNT: 1
Connection: keep-alive
Referer: http://scoff.world/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 06:42:33 GMT
Content-Type: application/font-woff
Content-Length: 17312
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
Connection: keep-alive
ETag: "600809b7-43a0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
208.91.197.44
185.76.9.21
87.230.98.74