Overview

URL printcopy099332receipt.ga/xrf
IP141.8.224.221
ASNAS40034 Confluence Networks Inc
Location Switzerland
Report completed2019-04-19 07:13:05 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-04-19 2 printcopy099332receipt.ga/xrf Phishing
2019-04-19 2 ww8.printcopy099332receipt.ga/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 141.8.224.221

Date UQ / IDS / BL URL IP
2019-06-21 17:20:59 +0200
0 - 1 - 0 wrhenymifoxx.gq/b9172e/fuji_tiara_manual.pdf 141.8.224.221
2019-06-10 20:43:16 +0200
0 - 0 - 2 serviceupdate-quotamail.ml/ztt 141.8.224.221
2019-06-10 20:36:58 +0200
0 - 1 - 2 rsikckakuk.ml/IlOysTgNjFrGtHtEAwVo/index.php 141.8.224.221
2019-06-10 20:26:39 +0200
0 - 0 - 2 sombreelkontre.gq/ztt 141.8.224.221
2019-06-10 19:25:21 +0200
0 - 0 - 2 moduloseguranca.ml/recadastramento/computador (...) 141.8.224.221
2019-06-10 19:25:20 +0200
0 - 1 - 2 moduloseguranca.ml/confirmar/index.html.php 141.8.224.221
2019-06-10 19:25:06 +0200
0 - 1 - 2 douglasxxlake.cf/ 141.8.224.221
2019-06-10 19:07:13 +0200
0 - 1 - 0 eghwiu.gq/ 141.8.224.221
2019-06-10 18:51:09 +0200
0 - 1 - 2 exclusively.ga/ 141.8.224.221
2019-06-10 18:33:57 +0200
0 - 0 - 1 paypal.com-resolve-update.cf/webapps/90f2a/home 141.8.224.221

Last 10 reports on ASN: AS40034 Confluence Networks Inc

Date UQ / IDS / BL URL IP
2019-07-01 08:58:42 +0200
0 - 0 - 0 mattressgurgaon.com 204.11.58.87
2019-07-01 07:55:50 +0200
0 - 0 - 0 track.getinterstellar.com/conversion.js 204.11.56.48
2019-07-01 04:49:35 +0200
0 - 0 - 0 iyfnzgb.com 208.91.196.46
2019-07-01 02:58:03 +0200
0 - 0 - 0 primecollegeofengineering.com/ATP-Wimbledon-2 (...) 199.79.62.243
2019-06-30 23:45:41 +0200
0 - 0 - 2 youtuber.com 162.215.252.78
2019-06-30 23:43:13 +0200
0 - 0 - 0 primecollegeofengineering.com/Jamaica-vs-Pana (...) 199.79.62.243
2019-06-30 21:32:20 +0200
0 - 0 - 0 url550.com 204.11.56.48
2019-06-30 21:20:00 +0200
0 - 0 - 0 primecollegeofengineering.com/4k-Espana-Alema (...) 199.79.62.243
2019-06-30 21:03:21 +0200
0 - 0 - 0 primecollegeofengineering.com/Spagna-U21-_Ger (...) 199.79.62.243
2019-06-30 15:56:36 +0200
0 - 0 - 0 iyfnzgb.com 208.91.196.46

Last 5 reports on domain: printcopy099332receipt.ga

Date UQ / IDS / BL URL IP
2019-05-31 16:35:10 +0200
0 - 1 - 2 printcopy099332receipt.ga/hbb 141.8.224.221
2019-03-30 07:50:29 +0100
0 - 0 - 2 printcopy099332receipt.ga/IlOysTgNjFrGtHtEAwVo 141.8.224.221
2019-03-30 06:02:45 +0100
0 - 0 - 2 printcopy099332receipt.ga/IlOysTgNjFrGtHtEAwV (...) 141.8.224.221
2019-03-29 22:47:50 +0100
0 - 0 - 2 printcopy099332receipt.ga/tnb 141.8.224.221
2019-03-29 22:47:35 +0100
0 - 0 - 2 printcopy099332receipt.ga/index.html 141.8.224.221


JavaScript

Executed Scripts (18)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (26)


Request Response
                                        
                                            GET /xrf HTTP/1.1 
Host: printcopy099332receipt.ga
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         141.8.224.221
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 19 Apr 2019 05:12:32 GMT
Server: Apache
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKrfIMFkSaoTSqKmC+BrghK0CpDHc0MuVzmMHin8LIORhpXbped+iYhSnZurWnEO0zcKcVIrzp026LVc5pMB9bUCAwEAAQ==_k/h5YazbVpwXopwfeBDhYDXuFOxQI7p+99T36kDHiZf3qA3bSPOYUH4uQWGaICf3s3hrNqhwB4CMcLeyal/PBg==
Content-Length: 1771
Keep-Alive: timeout=5, max=117
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text
Size:   1771
Md5:    1fb2bd7a8b0de099dfd0349650a9e950
Sha1:   ccdb2517d12096e7d311e40e65bbc5684385a69f
Sha256: ed2e16941dd79e204854780543bba5d726b99f7b2b0cf308671a2b159014138f

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /?ga=0q%2FZJQmd8uwZkqT2Nk72AWmSOvJyRJ9UnjJNeaUI60VQ1%2BcqFFX1cY0IRgoLPSl44kbr3qIX9nm48G1L0Vuig38KeTIELBXoAmIlIH0twmbc22wNwGC45%2BCy8wkAzhpYRXYjf8L45ZZ2QQhuhN4PFnWDuY9T%2F9f946lnD%2BV%2Bo34b3kxo9ZhhHPUXWaylVfhe&gerf=vlctc7NQep4Vn1bmESrqqJkh1x847kD7JDUBQEi21WM%3D&guro=EYRzHpjdqjGwaVXsnYpsS%2FQzKFk1h67KeeGvhI7LmFN8HlQ7mDFAKG8M6gzRqxRCHoDAr6a6QMTZ5ziuj8nOnA%3D%3D& HTTP/1.1 
Host: printcopy099332receipt.ga
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://printcopy099332receipt.ga/xrf
Cookie: isframesetenabled=1

                                         
                                         141.8.224.221
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 19 Apr 2019 05:12:33 GMT
Server: Apache
Expires: Mon, 22 Jul 2002 11:12:01 GMT
Cache-Control: private, no-cache
Pragma: no-cache
Content-Length: 770
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   770
Md5:    1d0adfbe377dd2b23aa1074f721a7f0f
Sha1:   fb4afd292e43952222b8a5cfa7621a9a98d1b43e
Sha256: 5a3254b95589bbd0df31a2ef3bfb7ac8d74cab84c692b4de00a9ddbb4477c0b3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: printcopy099332receipt.ga
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: isframesetenabled=1

                                         
                                         141.8.224.221
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 19 Apr 2019 05:12:34 GMT
Server: Apache
Content-Length: 10
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   10
Md5:    6608dd3e21ca3beabd4bdfa625a0b221
Sha1:   e926d0f8694a4bc4013308afaca7af51e4c9fd9f
Sha256: c75eb01138771bfb2a5517aeae882356733782767c4560cc9601c34d2591ca75
                                        
                                            GET / HTTP/1.1 
Host: ww8.printcopy099332receipt.ga
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://printcopy099332receipt.ga/?ga=0q%2FZJQmd8uwZkqT2Nk72AWmSOvJyRJ9UnjJNeaUI60VQ1%2BcqFFX1cY0IRgoLPSl44kbr3qIX9nm48G1L0Vuig38KeTIELBXoAmIlIH0twmbc22wNwGC45%2BCy8wkAzhpYRXYjf8L45ZZ2QQhuhN4PFnWDuY9T%2F9f946lnD%2BV%2Bo34b3kxo9ZhhHPUXWaylVfhe&gerf=vlctc7NQep4Vn1bmESrqqJkh1x847kD7JDUBQEi21WM%3D&guro=EYRzHpjdqjGwaVXsnYpsS%2FQzKFk1h67KeeGvhI7LmFN8HlQ7mDFAKG8M6gzRqxRCHoDAr6a6QMTZ5ziuj8nOnA%3D%3D&

                                         
                                         68.178.213.99
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 19 Apr 2019 05:12:34 GMT
Server: Apache
Set-Cookie: COOKIE=10.22.16.235.1555650754580935; path=/ referrer=http://printcopy099332receipt.ga/?ga=0q%2FZJQmd8uwZkqT2Nk72AWmSOvJyRJ9UnjJNeaUI60VQ1%2BcqFFX1cY0IRgoLPSl44kbr3qIX9nm48G1L0Vuig38KeTIELBXoAmIlIH0twmbc22wNwGC45%2BCy8wkAzhpYRXYjf8L45ZZ2QQhuhN4PFnWDuY9T%2F9f946lnD%2BV%2Bo34b3kxo9ZhhHPUXWaylVfhe&gerf=vlctc7NQep4Vn1bmESrqqJkh1x847kD7JDUBQEi21WM%3D&guro=EYRzHpjdqjGwaVXsnYpsS%2FQzKFk1h67KeeGvhI7LmFN8HlQ7mDFAKG8M6gzRqxRCHoDAr6a6QMTZ5ziuj8nOnA%3D%3D&; path=/ t=bdb81b60626111e993a7fa163e152ae4; path=/ referrer=http://printcopy099332receipt.ga/?ga=0q%2FZJQmd8uwZkqT2Nk72AWmSOvJyRJ9UnjJNeaUI60VQ1%2BcqFFX1cY0IRgoLPSl44kbr3qIX9nm48G1L0Vuig38KeTIELBXoAmIlIH0twmbc22wNwGC45%2BCy8wkAzhpYRXYjf8L45ZZ2QQhuhN4PFnWDuY9T%2F9f946lnD%2BV%2Bo34b3kxo9ZhhHPUXWaylVfhe&gerf=vlctc7NQep4Vn1bmESrqqJkh1x847kD7JDUBQEi21WM%3D&guro=EYRzHpjdqjGwaVXsnYpsS%2FQzKFk1h67KeeGvhI7LmFN8HlQ7mDFAKG8M6gzRqxRCHoDAr6a6QMTZ5ziuj8nOnA%3D%3D&; path=/ caf_last_page_url=http://ww8.printcopy099332receipt.ga/; path=/ caf_remotehost=10.22.16.235; path=/ caf_referrer=http://printcopy099332receipt.ga/?ga=0q%2FZJQmd8uwZkqT2Nk72AWmSOvJyRJ9UnjJNeaUI60VQ1%2BcqFFX1cY0IRgoLPSl44kbr3qIX9nm48G1L0Vuig38KeTIELBXoAmIlIH0twmbc22wNwGC45%2BCy8wkAzhpYRXYjf8L45ZZ2QQhuhN4PFnWDuY9T%2F9f946lnD%2BV%2Bo34b3kxo9ZhhHPUXWaylVfhe&gerf=vlctc7NQep4Vn1bmESrqqJkh1x847kD7JDUBQEi21WM%3D&guro=EYRzHpjdqjGwaVXsnYpsS%2FQzKFk1h67KeeGvhI7LmFN8HlQ7mDFAKG8M6gzRqxRCHoDAr6a6QMTZ5ziuj8nOnA%3D%3D&; path=/ caf_ipaddr=77.40.129.123; path=/ caf_geolocation=Norway; path=/ visitorxprintcopy099332receipt.ga=1 Template--printcopy099332receipt.ga=Simple2C; path=/ FeedProvider--printcopy099332receipt.ga=Google; path=/
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ==_UKRO/FI7w57vTWvpIGCZOMBLIWlP5RWohpoMdupwvk/ntLUWGD84QY00BfQsMVo9zGtX/da1IBF7ENVd1o2lbQ==
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cartoon: lander-03-prod
Content-Length: 5493
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5493
Md5:    0136a2823171ff1633f5c4bae11d599d
Sha1:   ac8a87e63ed06950fecee7ca25f00162f5b39ca6
Sha256: ed4555d0905875a5689aaa500c98adbcd2b700084864e342c04e214da55895d9

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.209.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Apr 2019 05:12:34 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f42c1064699f11b73fd06386a32d50e9
Sha1:   bb5c1bf255ed720047a5c32e19ddd0ae2e9ffd65
Sha256: 5f82ead1c7c1fcfa9f9aeaadc7aa851621177b05c2bc190dadc9f75c60045e56
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.209.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Apr 2019 05:12:34 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=109518
Date: Fri, 19 Apr 2019 05:12:35 GMT
Etag: "5cb837ef-1d7"
Expires: Sat, 20 Apr 2019 11:37:53 GMT
Last-Modified: Thu, 18 Apr 2019 08:40:15 GMT
Server: ECS (lcy/1D24)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    7ddfede9479e99568a19dab08bdf981d
Sha1:   685e8a5ce28cbff566c854b35470d31042e3c7c5
Sha256: c0b2eabc4a6b1118b2a225d647b796b53b9f8d283252edf9edab9f4569fe4989
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=162992
Date: Fri, 19 Apr 2019 05:12:35 GMT
Etag: "5cb916b5-1d7"
Expires: Sun, 21 Apr 2019 02:29:07 GMT
Last-Modified: Fri, 19 Apr 2019 00:30:45 GMT
Server: ECS (lcy/1D1F)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f6fc5ec570d0d3a1de351ab0b5b69a5a
Sha1:   83b4f2e3b7c1e1f04e6ed94eb5546dea44bc552f
Sha256: 26db60f51a51b8959e232f881f0b95ca9d9fa8a9a31b0288edeacd877dc206cf
                                        
                                            POST / HTTP/1.1 
Host: s.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.52.27.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.14.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=536442, public, no-transform, must-revalidate
Last-Modified: Thu, 18 Apr 2019 10:10:12 +00:00
Expires: Thu, 25 Apr 2019 10:10:12 +00:00
Date: Fri, 19 Apr 2019 05:12:35 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    4b72b60a5fdd5f79afa111aed8323440
Sha1:   b6205a53f26b29dbd0745051fc6794bdb1ed67ad
Sha256: b8ea32aca9be48045020c08bba01f71a1e309d78c761b94b2d21ce9a900c3143
                                        
                                            GET /recaptcha/api.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         216.58.207.228
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Expires: Fri, 19 Apr 2019 05:12:35 GMT
Date: Fri, 19 Apr 2019 05:12:35 GMT
Cache-Control: private, max-age=300
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   463
Md5:    025b300f279daa6e385eb3b7a7caaf35
Sha1:   40177fa213cd4a151bd2a2288206b45733b86835
Sha256: e45cb04f15b410ac2ca30ed6dcdb59127e6fd8e03e1ee836c4adb752fbcf2f51
                                        
                                            GET /scripts/nmads_caf_20170727.js HTTP/1.1 
Host: d24cze5sab2jwg.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         143.204.51.181
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 1568
Connection: keep-alive
Date: Wed, 03 Oct 2018 14:35:19 GMT
Last-Modified: Thu, 20 Sep 2018 18:12:29 GMT
Etag: "adf1c9b6c49f96778479bc88bd15a515"
Accept-Ranges: bytes
Server: AmazonS3
Age: 41841
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 5-8U8FMR4yw9g-Vlfd-YKMn_sofBN1psD8gvMkAvQOWJtgXLKMvZIg==


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   1568
Md5:    adf1c9b6c49f96778479bc88bd15a515
Sha1:   d2c8848e4dd7d47ff1a6b8ce8444a550055269e3
Sha256: 15e49655b52776dac5eb6a9e3ced19338b7e1a7137db37b54b03b6677f8abf91
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         216.58.207.228
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Date: Fri, 19 Apr 2019 05:12:35 GMT
Expires: Fri, 19 Apr 2019 05:12:35 GMT
Cache-Control: private, max-age=3600
Etag: "12833429590554586097"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   56640
Md5:    30b63e6b3c863f80559157a9dd002871
Sha1:   ba812d7d70471d59eecc192c162a9500d0b2ea1d
Sha256: 4c577ce958fa1945341029e742de46230a754d16dc42b03875c6ea3202466a0a
                                        
                                            GET /scripts/frontend.js HTTP/1.1 
Host: d24cze5sab2jwg.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         143.204.51.181
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 3808
Connection: keep-alive
Date: Wed, 03 Oct 2018 14:35:19 GMT
Last-Modified: Thu, 20 Sep 2018 18:12:29 GMT
Etag: "0963e7d1630d93b9749f94e1a670222c"
Accept-Ranges: bytes
Server: AmazonS3
Age: 44209
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36655.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 7-6Kp1GbW1ukPJl_XusN9hqSF34fa3n-wJfVp_x4QrmUtTzRtqLp6g==


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   3808
Md5:    0963e7d1630d93b9749f94e1a670222c
Sha1:   36b249ecdd5bc2e23dba55f3f1d85d2bd4fc8981
Sha256: c8ae9019aaf595676d41ad16932bef3e1c31e5418adfafb43abb3d8399d425c5
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.209.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Apr 2019 05:12:35 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f590f8bfcaa2d69191f9fb94835815a1
Sha1:   19631cc39277e53ff40066f6dafbeb7c983a3d4b
Sha256: f325c83956294bf1f652e65ebe2c37f7cfef336773bc4f9970c9cd01aa8bf09b
                                        
                                            GET /scripts/cookies.js HTTP/1.1 
Host: d24cze5sab2jwg.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         143.204.51.181
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 2606
Connection: keep-alive
Date: Wed, 03 Oct 2018 14:35:19 GMT
Last-Modified: Thu, 20 Sep 2018 18:12:29 GMT
Etag: "1759740abb448046353292a9304c3d47"
Accept-Ranges: bytes
Server: AmazonS3
Age: 44209
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fbb.cloudfront.net (CloudFront)
X-Amz-Cf-Id: GpmCwkV2uSpJ7veWID1t_rI-AI4fy4VDv5Dp0Wr4K1qAdLLVbsXVSA==


--- Additional Info ---
Magic:  ASCII English text
Size:   2606
Md5:    1759740abb448046353292a9304c3d47
Sha1:   d722e0a78d695c55cf0d72bb35d18ef947b19e03
Sha256: 959ba69a168af591be9576b8222501fcc2c8b521abb4918fa6f4b5e275fba7b0
                                        
                                            GET /scripts/nm_ga_bottom.js HTTP/1.1 
Host: d24cze5sab2jwg.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         143.204.51.181
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 395
Connection: keep-alive
Last-Modified: Thu, 20 Sep 2018 18:12:30 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 18 Apr 2019 16:55:47 GMT
Etag: "1b73190474553d00cdf09a21d3e01b23"
Age: 44209
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a3.cloudfront.net (CloudFront)
X-Amz-Cf-Id: yKoDsGBHTsaBjqjLyG4GD8CmaQwjgwoziFT4olHRs_iabllrZPFVZg==


--- Additional Info ---
Magic:  ASCII text
Size:   395
Md5:    1b73190474553d00cdf09a21d3e01b23
Sha1:   9ab005a28ccc70549bbceb07afe5b95ce87643ae
Sha256: d9b75b983115220e79e3b3bcdd6e5c29ea7f0c3df6a82acbd405baed54bd616f
                                        
                                            GET /scripts/nm_ga_top_20170727.js HTTP/1.1 
Host: d24cze5sab2jwg.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         143.204.51.181
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 848
Connection: keep-alive
Last-Modified: Thu, 20 Sep 2018 18:12:29 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 18 Apr 2019 16:55:47 GMT
Etag: "aa6050e3599af6a665217a0913ed2a9d"
Age: 44209
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Id: jRmFYoiVYwkBqyPY98bslQ_XE2xOnpTkky4puCv7N-F3F8mf7g412w==


--- Additional Info ---
Magic:  ASCII C++ program text
Size:   848
Md5:    aa6050e3599af6a665217a0913ed2a9d
Sha1:   05fbb364d393f55ab194af4cf41f6e995fd1d34f
Sha256: 728f68a2acba52654d4dcda32b558e5a100de53b1d63953a75539f765fa2d180
                                        
                                            GET /recaptcha/api2/v1554100419869/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         172.217.21.131
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 93196
Date: Tue, 02 Apr 2019 21:40:46 GMT
Expires: Wed, 01 Apr 2020 21:40:46 GMT
Last-Modified: Mon, 01 Apr 2019 21:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 1409510
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   93196
Md5:    6734f6a682abe4934887dc298028dc8f
Sha1:   ca6818d33e11b8bbb53db17681edf63e8b2a1fc5
Sha256: 1fc2448574bf4379090eae103122909c647e8f9c832504d48b01925f5d595877
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: printcopy099332receipt.ga
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: isframesetenabled=1

                                         
                                         141.8.224.221
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 19 Apr 2019 05:12:37 GMT
Server: Apache
Content-Length: 10
Keep-Alive: timeout=5, max=124
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   10
Md5:    6608dd3e21ca3beabd4bdfa625a0b221
Sha1:   e926d0f8694a4bc4013308afaca7af51e4c9fd9f
Sha256: c75eb01138771bfb2a5517aeae882356733782767c4560cc9601c34d2591ca75
                                        
                                            GET /styles/template/Simple2C_CAF.css HTTP/1.1 
Host: d24cze5sab2jwg.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         143.204.51.181
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Length: 6841
Connection: keep-alive
Last-Modified: Thu, 03 Jan 2019 19:20:35 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 18 Apr 2019 20:55:29 GMT
Etag: "44221811bf07aa74a54df70102a178d5"
Age: 29831
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Id: rEmna-q3V9J78aZYL_YHyVZJiUwf3iCbvrv4uZd_xb-WXM_m9kHppw==


--- Additional Info ---
Magic:  ASCII C program text, with very long lines, with CRLF line terminators
Size:   6841
Md5:    44221811bf07aa74a54df70102a178d5
Sha1:   6f1419cd721746e707ee91753c8275be8e58cac5
Sha256: 061bf4cffc54f899a03104eb7c6be44b0718968a046f068bf1add290ba4d44f0
                                        
                                            GET /smartname/images/favicon.ico HTTP/1.1 
Host: d24cze5sab2jwg.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         143.204.51.181
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Content-Length: 3638
Connection: keep-alive
Last-Modified: Thu, 20 Sep 2018 18:12:38 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Thu, 18 Apr 2019 18:34:17 GMT
Etag: "5907e2fe1cdde2e5258fa3d42bdccaa3"
Age: 38303
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36655.cloudfront.net (CloudFront)
X-Amz-Cf-Id: eolIqj2qYzHUiqMlKSgvGp7SA75kdFHgQ-J8KWQv6iIPatpBPVoJrA==


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 16x16, 256-colors
Size:   3638
Md5:    5907e2fe1cdde2e5258fa3d42bdccaa3
Sha1:   6dfe4b2079cfb5c664cb000948eabdf255bca292
Sha256: 7dc0ebf8083e053fae7b3c156ffce03024db01741cb47314018c61cf4f314d8b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.209.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 19 Apr 2019 05:12:39 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f9ead54c0eb44c7c2df51cab68d24e1c
Sha1:   c3af512f5f99896741a275f97c13a145f1e3b74d
Sha256: 59ab834b79ca4e8d076dad9e4a7744d42d181a91d77ea19470502063d54e93d0
                                        
                                            GET /css?family=Lato:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://d24cze5sab2jwg.cloudfront.net/styles/template/Simple2C_CAF.css

                                         
                                         172.217.21.170
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 19 Apr 2019 05:12:39 GMT
Date: Fri, 19 Apr 2019 05:12:39 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   219
Md5:    d52e8b5452fcbc2af031a26c8ed68e53
Sha1:   dfb9b818ab5ac1cba65443050f6ec82c3751c908
Sha256: 9d21cfe29855ab23db6e3ac5a9f7e638ff11d19ad42615cd62fab4e52d5fcbff
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 19 Apr 2019 04:53:21 GMT
Expires: Fri, 19 Apr 2019 06:53:21 GMT
Last-Modified: Tue, 19 Feb 2019 19:44:11 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17168
Cache-Control: public, max-age=7200
Age: 1158


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=428689053&utmhn=ww8.printcopy099332receipt.ga&utmcs=UTF-8&utmsr=1176x885&utmvp=1176x754&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=printcopy099332receipt.ga&utmhid=1808968245&utmr=http%3A%2F%2Fprintcopy099332receipt.ga%2F%3Fga%3D0q%252FZJQmd8uwZkqT2Nk72AWmSOvJyRJ9UnjJNeaUI60VQ1%252BcqFFX1cY0IRgoLPSl44kbr3qIX9nm48G1L0Vuig38KeTIELBXoAmIlIH0twmbc22wNwGC45%252BCy8wkAzhpYRXYjf8L45ZZ2QQhuhN4PFnWDuY9T%252F9f946lnD%252BV%252Bo34b3kxo9ZhhHPUXWaylVfhe%26gerf%3Dvlctc7NQep4Vn1bmESrqqJkh1x847kD7JDUBQEi21WM%253D%26guro%3DEYRzHpjdqjGwaVXsnYpsS%252FQzKFk1h67KeeGvhI7LmFN8HlQ7mDFAKG8M6gzRqxRCHoDAr6a6QMTZ5ziuj8nOnA%253D%253D%26&utmp=%2F&utmht=1555650759631&utmac=UA-2201473-4&utmcc=__utma%3D205602709.1693241436.1555650760.1555650760.1555650760.1%3B%2B__utmz%3D205602709.1555650760.1.1.utmcsr%3Dprintcopy099332receipt.ga%7Cutmccn%3D(referral)%7Cutmcmd%3Dreferral%7Cutmcct%3D%2F%3B&utmjid=1255093365&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ww8.printcopy099332receipt.ga/

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 19 Apr 2019 05:12:39 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /s/lato/v15/S6uyw4BMUTPHjx4wWA.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Lato:400,700
Origin: http://ww8.printcopy099332receipt.ga

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 28660
Date: Mon, 25 Mar 2019 20:26:34 GMT
Expires: Tue, 24 Mar 2020 20:26:34 GMT
Last-Modified: Mon, 25 Mar 2019 20:11:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 2105165
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   28660
Md5:    b8ee546acd6cc0c49f42ad3d48ef244f
Sha1:   7d8bff4143a36aa9cc1c2801f60fa0e99969e3f6
Sha256: 04050bae4cc3b9ccd20d3c7f57f5b1ba249d4a54d6eff75a1e4df504362e8c00