Report - dailycornet.com/?p=11&cpage=20

Report Overview

URL

dailycornet.com/?p=11&cpage=20
IP

50.63.7.237

ASN

#26496 AS-26496-GO-DADDY-COM-LLC
Submitted

2022-11-28T16:49:16Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

2

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org (7)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2366	6203	23.36.77.32
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5843	34.160.144.191
www.dailycornet.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	367	36316	50.63.7.237
www.google-analytics.com (2)	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1127	18038	142.250.74.174
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	54.149.83.187
www.webificer.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	293	841	50.63.7.237
ocsp.digicert.com (2)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682	1594	93.184.220.29
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2374	34.102.187.140
dailycornet.com (17)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	6457	123993	50.63.7.237
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	229	34.117.237.239
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3246	60494	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-28	medium	dailycornet.com/wp-content/plugins/wpaudio-mp3-player/sm2/soundmanager2-nodebug-jsmin.js?ver=2.9.2	Malware
2022-11-28	medium	dailycornet.com/wp-content/plugins/wpaudio-mp3-player/wpaudio.js	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

HTTP Transactions (41)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

150792cfc458af013998f4ef6bdf5f74

d5179b2dcb11d06f82606bf6eb6648319998d63e

72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8101
Expires: Mon, 28 Nov 2022 19:04:06 GMT
Date: Mon, 28 Nov 2022 16:49:05 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

9408cc0694fcbea57966c3a3ba906092

fddcee1fdcf3209298e41a4b1b5560357fa165f0

6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5038
Cache-Control: max-age=155174
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:49:05 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:55:19 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

71f9c681a82440fd55e76c780a20e55d

3147768cfbcdd06e0c6e69684292e68e99917a80

5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10301
Expires: Mon, 28 Nov 2022 19:40:46 GMT
Date: Mon, 28 Nov 2022 16:49:05 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

34.102.187.140:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

d130218d0e2841f39c99610fe1a2ab90

29fbe1e177ee55c7a61ae0a206afff271cf5f945

6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 16:17:48 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1877
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

9ebddc2b260d081ebbefee47c037cb28

492bad62a7ca6a74738921ef5ae6f0be5edebf39

74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: w+93YNLgddg1s/nzIXjr64d6jJQc95JgxOMzBfkYtp/R2VxGMWYzLHje9KSfbDv6MiWT3JqDzKU=
x-amz-request-id: HSAR3Y9KCYXK8G2Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 16:42:08 GMT
age: 417
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

dailycornet.com/?p=11&cpage=20

50.63.7.237

200 OK

6204

URL HTTP/1.1

dailycornet.com/?p=11&cpage=20
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3108), with CRLF, LF line terminators

Size

6204
Hash

549268eb83387c2f7339209c9e69a87f

da08e70481806d98c19c7f9a885d71f48da1f831

71d44d36fb34ec1b89bda318fc17a22320a363ab9346f491d3dadd429e8ed2a6

HTTP Headers

                                        GET /?p=11&cpage=20 HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:05 GMT
Server: Apache
X-Pingback: http://dailycornet.com/xmlrpc.php
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6204
Keep-Alive: timeout=5
Content-Type: text/html; charset=UTF-8

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 16:49:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

dailycornet.com/wp-content/themes/news-magazine-theme-640/style.css

50.63.7.237

200 OK

5638

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/style.css
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

ASCII text, with very long lines (393), with CRLF line terminators

Size

5638
Hash

f195d9cf92464b3489e8a7bee933b45a

ee535616ab0b2206020b4e2465ffc8c2ea9e49fd

0a1ad2d5525da0c248d82e91016aab20a09f28357e5b26d338965bd94e78c256

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/style.css HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:05 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 07 Nov 2021 11:23:21 GMT
ETag: "cc409d5-7246-5d0311a8d5c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5638
Keep-Alive: timeout=5
Content-Type: text/css

dailycornet.com/wp-content/themes/news-magazine-theme-640/pagenavi-css.css

50.63.7.237

200 OK

417

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/pagenavi-css.css
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

ASCII text, with CRLF line terminators

Size

417
Hash

9d42b10f41bce1e966cf127f46fe523a

bbc21a167ee50889bc3a2e34c670d396b47c01a9

308b37fd79dc4e596c92ce4a9a7d01e556b353232a7d930845901f24e8d2b880

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/pagenavi-css.css HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:05 GMT
Server: Apache
Last-Modified: Sun, 07 Nov 2021 11:23:23 GMT
ETag: "cc409a8-619-5d0311aabe0c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 417
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/css

dailycornet.com/wp-content/plugins/wpaudio-mp3-player/sm2/soundmanager2-nodebug-jsmin.js?ver=2.9.2

50.63.7.237

200 OK

7625

URL HTTP/1.1

dailycornet.com/wp-content/plugins/wpaudio-mp3-player/sm2/soundmanager2-nodebug-jsmin.js?ver=2.9.2
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

ASCII text, with very long lines (25686)

Size

7625
Hash

d73a613335a728e0871e4aa18e416f47

ef9485c0f2e61e717bfc44d7991d3a76e21af4ed

14d2bc487de3c914ee56a3886da44587bb95a3c0a64826b4740a66dd49c40d90

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

                                        GET /wp-content/plugins/wpaudio-mp3-player/sm2/soundmanager2-nodebug-jsmin.js?ver=2.9.2 HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:05 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 07 Nov 2021 11:23:20 GMT
ETag: "cc40865-65a5-5d0311a7e1a00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7625
Keep-Alive: timeout=5
Content-Type: application/javascript

dailycornet.com/wp-content/plugins/wpaudio-mp3-player/wpaudio.js

50.63.7.237

200 OK

2218

URL HTTP/1.1

dailycornet.com/wp-content/plugins/wpaudio-mp3-player/wpaudio.js
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

ASCII text, with very long lines (614)

Size

2218
Hash

487f50949abd984e013ed1d9bd5c1b04

2862d53833c8f7b7858b083b54b5c136acb6d0af

6aa13b887bb4697665fd165c55b51fe61eb657351de4e56d257088935dd3c3cc

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

                                        GET /wp-content/plugins/wpaudio-mp3-player/wpaudio.js HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:05 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 07 Nov 2021 11:23:21 GMT
ETag: "cc40848-19cc-5d0311a8d5c40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2218
Keep-Alive: timeout=5
Content-Type: application/javascript

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

34.102.187.140:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 16:08:55 GMT
cache-control: public,max-age=3600
age: 2410
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

dailycornet.com/wp-includes/js/jquery/jquery.js?ver=1.3.2

50.63.7.237

200 OK

19758

URL HTTP/1.1

dailycornet.com/wp-includes/js/jquery/jquery.js?ver=1.3.2
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

ASCII text, with very long lines (39660)

Size

19758
Hash

15b8b2cc397fff64a67e881969fe4d82

a644925117769f9881259005043e5eee65df9a20

ddb022c5a91911b6e15cdb6bf657e6519e73df02bfa9cb463c11d8db71629041

HTTP Headers

                                        GET /wp-includes/js/jquery/jquery.js?ver=1.3.2 HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:05 GMT
Server: Apache
Last-Modified: Sun, 07 Nov 2021 11:23:06 GMT
ETag: "cc4150e-dfbc-5d03119a87a80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19758
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript

ocsp.digicert.com/

93.184.220.29

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

7ab2ef968cb6a3078f4b9cb2dda813d4

e669116047ca058a2c1b2999ff0ea8682719162c

6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4937
Cache-Control: max-age=150006
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 16:49:06 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:29:12 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/fsplash728.jpg

50.63.7.237

200 OK

12275

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/fsplash728.jpg
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 728x90, components 3\012- data

Size

12275
Hash

81dffb4dd3f71bcfba8cf141299460b6

3d975743cc8490965275f53e1bbfb7600f18233c

4ad34ec59ac8ccea86e1d736e1777491070f2d0cdaf911da230760a37b6323a9

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/images/fsplash728.jpg HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Last-Modified: Sun, 07 Nov 2021 11:23:25 GMT
ETag: "cc40b0e-2ff3-5d0311aca6540"
Accept-Ranges: bytes
Content-Length: 12275
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg

dailycornet.com/wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/Spider_Man_icon.jpg&h=50&w=50&zc=1&q=95

50.63.7.237

200 OK

1894

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/Spider_Man_icon.jpg&h=50&w=50&zc=1&q=95
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 50x50, components 3\012- data

Size

1894
Hash

3f8749b079c2b5c226ddfd31bf2b5b33

540a3c2833397171a87a7ee6be0a2a1341751cde

a39706b556226f11cc28c3396bb0c7e00988505ec6551d85d327e2cac9da910f

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/Spider_Man_icon.jpg&h=50&w=50&zc=1&q=95 HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Cache-Control: max-age=9999, must-revalidate
Expires: Mon, 28 Nov 2022 19:35:45GMT
Last-Modified: Mon, 28 Nov 2022 16:49:06 GMT
Content-Length: 1894
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg; charset=binary

dailycornet.com/wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/mask-150x150.jpg&h=50&w=50&zc=1&q=95

50.63.7.237

200 OK

1430

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/mask-150x150.jpg&h=50&w=50&zc=1&q=95
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 50x50, components 3\012- data

Size

1430
Hash

f16f6085a20b6669577a95de94a71f63

eeb33e0f11cbe4bb505a3fd3129b7a392f5fda1a

20c10bce1f31527a1f2708f002aafcfc5d525d86d168cd647fd857eed6678d29

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/mask-150x150.jpg&h=50&w=50&zc=1&q=95 HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Cache-Control: max-age=9999, must-revalidate
Expires: Mon, 28 Nov 2022 19:35:45GMT
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 28 Nov 2022 16:49:06 GMT
Content-Length: 1430
Vary: Accept-Encoding
Keep-Alive: timeout=5
Content-Type: image/jpeg; charset=binary

dailycornet.com/wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/youtube-thumb-150x150.jpg&h=50&w=50&zc=1&q=95

50.63.7.237

200 OK

1458

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/youtube-thumb-150x150.jpg&h=50&w=50&zc=1&q=95
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 50x50, components 3\012- data

Size

1458
Hash

adfa15e4ac05eaf5f47f6da93370faba

97157566a0a0d8997a270ddbcbb3899f522f0dbf

54904e6f106488ff5173215dbd2f41f84ab9085393feeea5659cc4f400e7ae36

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/youtube-thumb-150x150.jpg&h=50&w=50&zc=1&q=95 HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Cache-Control: max-age=9999, must-revalidate
Expires: Mon, 28 Nov 2022 19:35:45GMT
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 28 Nov 2022 16:49:06 GMT
Content-Length: 1458
Vary: Accept-Encoding
Keep-Alive: timeout=5
Content-Type: image/jpeg; charset=binary

dailycornet.com/wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/notsogreatthumb-150x125.jpg&h=50&w=50&zc=1&q=95

50.63.7.237

200 OK

1599

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/notsogreatthumb-150x125.jpg&h=50&w=50&zc=1&q=95
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80", baseline, precision 8, 50x50, components 3\012- data

Size

1599
Hash

f62dd2f2f488c12acc3f06f2c7f247d1

207e1d833b031988aea36c4e45b05144a5f288a2

8d594e5f1df221d9a560d3584d5557765f3ac8231020c7d634a6e8a85aff7fcc

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/cropper.php?src=/wp-content/uploads/2010/05/notsogreatthumb-150x125.jpg&h=50&w=50&zc=1&q=95 HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Cache-Control: max-age=9999, must-revalidate
Expires: Mon, 28 Nov 2022 19:35:45GMT
Last-Modified: Mon, 28 Nov 2022 16:49:06 GMT
Content-Length: 1599
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg; charset=binary

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/bgds.jpg

50.63.7.237

200 OK

11283

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/bgds.jpg
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2009:08:31 12:01:42], progressive, precision 8, 16x76, components 3\012- data

Size

11283
Hash

d3c0f173ed1a29041affb16bae0ed787

894a6a22ef288cd8c26c14fbb2bc29a7ad41a55b

ad6d2d60f1029a0393f37cb5bad67501c4985ed042ac97bf5d5fc7258fb43281

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/images/bgds.jpg HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/wp-content/themes/news-magazine-theme-640/style.css

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Last-Modified: Sun, 07 Nov 2021 11:23:25 GMT
ETag: "cc40ae7-2c13-5d0311aca6540"
Accept-Ranges: bytes
Content-Length: 11283
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg

www.dailycornet.com/wp-content/themes/news-magazine-theme-640/images/daily-cornet-banner.jpg

50.63.7.237

200 OK

36020

URL HTTP/1.1

www.dailycornet.com/wp-content/themes/news-magazine-theme-640/images/daily-cornet-banner.jpg
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 800x172, components 3\012- data

Size

36020
Hash

89439b50fef78d3213531400cfe0e9f4

44a7cf866629ea4d41b0734ede465b687d27b2d2

849f3ee34eebfbe07ba337435259f635f1233c5792aa53f995fbe8d9e66ecf5b

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/images/daily-cornet-banner.jpg HTTP/1.1
Host: www.dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 07 Nov 2021 11:23:25 GMT
ETag: "cc40b01-8cb4-5d0311aca6540"
Accept-Ranges: bytes
Content-Length: 36020
Keep-Alive: timeout=5
Content-Type: image/jpeg

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/stripebg.gif

50.63.7.237

200 OK

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/stripebg.gif
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

GIF image data, version 89a, 20 x 2\012- data

Size

54
Hash

f088eabf6fcbccbff1c91de1fdd171ae

d28115888986b4c90089764cd2ddcea7703400c2

4a4d4e667bf34dbc7dd71bcfbe8c9a6f7158d76da9b4a0a948652987b5a3a01e

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/images/stripebg.gif HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/wp-content/themes/news-magazine-theme-640/style.css

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Last-Modified: Sun, 07 Nov 2021 11:23:23 GMT
ETag: "cc40be7-36-5d0311aabe0c0"
Accept-Ranges: bytes
Content-Length: 54
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/gif

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/liline.gif

50.63.7.237

200 OK

109

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/liline.gif
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

GIF image data, version 89a, 145 x 3\012- data

Size

109
Hash

0de3b6097195859d1fe7e445b20e099c

8e1ea82cb4db72045f7f15d14fb78c3b12a1ce9a

d236462526df31ae37af1fa6bb9de31a600bdab90a34f964381e819d42a1c3fc

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/images/liline.gif HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/wp-content/themes/news-magazine-theme-640/style.css

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Last-Modified: Sun, 07 Nov 2021 11:23:24 GMT
ETag: "cc40b34-6d-5d0311abb2300"
Accept-Ranges: bytes
Content-Length: 109
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/gif

dailycornet.com/wp-content/plugins/wpaudio-mp3-player/wpa_pause.gif

50.63.7.237

200 OK

350

URL HTTP/1.1

dailycornet.com/wp-content/plugins/wpaudio-mp3-player/wpa_pause.gif
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

GIF image data, version 89a, 16 x 14\012- data

Size

350
Hash

8ae26c1375598d4c2359fe25b687236e

e604e449fb21f13fac79a663ce9a3cbf32203bf8

7829806706455006ba0284bb77ca6aa6a430a50b63b164f969373d2954ef99a0

HTTP Headers

                                        GET /wp-content/plugins/wpaudio-mp3-player/wpa_pause.gif HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Last-Modified: Sun, 07 Nov 2021 11:23:20 GMT
ETag: "cc4083b-15e-5d0311a7e1a00"
Accept-Ranges: bytes
Content-Length: 350
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/gif

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/bg.gif

50.63.7.237

200 OK

46242

URL HTTP/1.1

dailycornet.com/wp-content/themes/news-magazine-theme-640/images/bg.gif
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

GIF image data, version 89a, 1265 x 661\012- data

Size

46242
Hash

14408a8e42e01be5b4a5805688ffc14b

277412940a4c3b1a8fa5dffe39d5c44c5fb72328

9e7522de3deae288d2ae8dd1e35c0c63da90fad217d794dac7735cdd5586dce5

HTTP Headers

                                        GET /wp-content/themes/news-magazine-theme-640/images/bg.gif HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/wp-content/themes/news-magazine-theme-640/style.css

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Last-Modified: Sun, 07 Nov 2021 11:23:25 GMT
ETag: "cc40ae0-b4a2-5d0311aca6540"
Accept-Ranges: bytes
Content-Length: 46242
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/gif

www.google-analytics.com/ga.js

142.250.74.174

200 OK

17168

URL HTTP/1.1

www.google-analytics.com/ga.js
IP

142.250.74.174:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (1305)

Size

17168
Hash

01d5892e6e243b52998310c2925b9f3a

58180151b6a6ee4af73583a214b68efb9e8844d4

7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d

HTTP Headers

                                        GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/

                                        HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Mon, 28 Nov 2022 15:05:59 GMT
Expires: Mon, 28 Nov 2022 17:05:59 GMT
Cache-Control: public, max-age=7200
Age: 6187
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript

www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=685932019&utmhn=dailycornet.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Open%20Letter%20to%20Gatsby%C2%A0%7C%C2%A0The%20Daily%20Cornet&utmhid=1154579135&utmr=-&utmp=%2F%3Fp%3D11%26cpage%3D20&utmht=1669654145756&utmac=UA-16473513-1&utmcc=__utma%3D218541580.1252061421.1669654146.1669654146.1669654146.1%3B%2B__utmz%3D218541580.1669654146.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=244732880&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~

142.250.74.174

200 OK

URL HTTP/1.1

www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=685932019&utmhn=dailycornet.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Open%20Letter%20to%20Gatsby%C2%A0%7C%C2%A0The%20Daily%20Cornet&utmhid=1154579135&utmr=-&utmp=%2F%3Fp%3D11%26cpage%3D20&utmht=1669654145756&utmac=UA-16473513-1&utmcc=__utma%3D218541580.1252061421.1669654146.1669654146.1669654146.1%3B%2B__utmz%3D218541580.1669654146.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=244732880&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
IP

142.250.74.174:0
ASN

#15169 GOOGLE

Magic

GIF image data, version 89a, 1 x 1\012- data

Size

35
Hash

28d6814f309ea289f847c69cf91194c6

0f4e929dd5bb2564f7ab9c76338e04e292a42ace

8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015

HTTP Headers

                                        GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=685932019&utmhn=dailycornet.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Open%20Letter%20to%20Gatsby%C2%A0%7C%C2%A0The%20Daily%20Cornet&utmhid=1154579135&utmr=-&utmp=%2F%3Fp%3D11%26cpage%3D20&utmht=1669654145756&utmac=UA-16473513-1&utmcc=__utma%3D218541580.1252061421.1669654146.1669654146.1669654146.1%3B%2B__utmz%3D218541580.1669654146.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=244732880&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/

                                        HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Mon, 28 Nov 2022 16:49:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35

push.services.mozilla.com/

54.149.83.187

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

54.149.83.187:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: X8e3IR+uN5V08p2Go6hUvA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Irxl8JH+svQOBN6jkPMEi26mrGY=

dailycornet.com/favicon.ico

50.63.7.237

302 Found

208

URL HTTP/1.1

dailycornet.com/favicon.ico
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

208
Hash

31e9cfa8274c1b35ee4bc5b871c88ce1

ace76cb759257298d6bfa3ea669ed360ef0d4805

9ea0f6da0a31e985d89051a9c6aa25855b5aa41da0a3d8b05424cf2984bba4e7

HTTP Headers

                                        GET /favicon.ico HTTP/1.1
Host: dailycornet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dailycornet.com/?p=11&cpage=20

                                        HTTP/1.1 302 Found
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Location: http://www.webificer.com
Content-Length: 208
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

www.webificer.com/

50.63.7.237

200 OK

583

URL HTTP/1.1

www.webificer.com/
IP

50.63.7.237:0
ASN

#26496 AS-26496-GO-DADDY-COM-LLC

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

583
Hash

85f3de5e2cf3b233fafbf057f8bf9c10

237a469372c31eb57ca2ede4c64ac0826065aa2b

0f425d0738bfe4d525b4ece33e2886b96fe56609edffa03ac2b0599cb60d702c

HTTP Headers

                                        GET / HTTP/1.1
Host: www.webificer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://dailycornet.com/
Connection: keep-alive

                                        HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 16:49:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 583
Keep-Alive: timeout=5
Content-Type: text/html

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

8bb181e3f5ca898c6e31a8efc2e28291

eda3a91f8e2cbc5467da08ad85e6f6a30702b66c

0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6255
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:49:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

8bb181e3f5ca898c6e31a8efc2e28291

eda3a91f8e2cbc5467da08ad85e6f6a30702b66c

0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6255
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:49:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

8bb181e3f5ca898c6e31a8efc2e28291

eda3a91f8e2cbc5467da08ad85e6f6a30702b66c

0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6255
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:49:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

8bb181e3f5ca898c6e31a8efc2e28291

eda3a91f8e2cbc5467da08ad85e6f6a30702b66c

0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6255
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:49:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

8bb181e3f5ca898c6e31a8efc2e28291

eda3a91f8e2cbc5467da08ad85e6f6a30702b66c

0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6255
Expires: Mon, 28 Nov 2022 18:33:22 GMT
Date: Mon, 28 Nov 2022 16:49:07 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78e81d9-dbc4-4911-9711-219f64026531.jpeg

34.120.237.76

200 OK

10944

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78e81d9-dbc4-4911-9711-219f64026531.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

10944
Hash

5e586c141835f4ac8819c55dcb811b4d

a23fd98701ac35cd8740d1f7a832118c770e20c8

4296f391f755a649897a2211f9072c69a0510e43a313674908bb0a771b12650e

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78e81d9-dbc4-4911-9711-219f64026531.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 10944
x-amzn-requestid: 8f48c27c-bbec-46f5-9c08-1cc804b9aff7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIbJ_FyvIAMFhrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63800bd9-2ffa8521241a5e5b0afc0935;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 00:27:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4YiBUU3kS0VrcVOwKXUHgIRygLLeXGp1TjBYDi6WwWWm6WMKktzfHg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:55:16 GMT
age: 68031
etag: "a23fd98701ac35cd8740d1f7a832118c770e20c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9430

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

9430
Hash

1f434933b5bd6377d299ada22d1ae7ef

075531f525e625b117b2497f31139c9824d0e9c5

b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 67641
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8817

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8817
Hash

741ddfb19764ac9a77509e7e87cfbfb2

308c08784ce4a0757cbd112807555b83e17a1d56

e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 31bd21c7-1d75-4159-af51-52035da16da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-krGE6AIAMF2Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c1b13-32a7b9c6642592c70783a0cf;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 00:42:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I6egDH0h7D08HhaoQHQ0vgghBhPfje2lGIbnWD-t7p4txzHsFxmZfg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 10:31:22 GMT
age: 22665
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6376

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

6376
Hash

78b1389f425425d0450c94d900404dc4

53b12a8702f7c5b7cc697e2a24da824d9434be65

0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 67641
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10199

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

10199
Hash

2cd887044e91d7ed0f1a8d7119ff7dd0

ae8aa4ce6ddaccba771fe65446926b60fc5628da

bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:42:14 GMT
age: 68813
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8387

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8387
Hash

4e97baa4851785eac92c719abf481c64

c32a57038d3cdbc514c9081c9938eca6a04fb481

adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: e4ce369f-7654-4c1a-94c2-70c913eb1a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFL0tEcqIAMFXHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec01d-37bd969f4cdfe220096b8c1f;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:51:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __2hrJIdzCKzhuJ_YfbSSfz-WwyIqnPugk7P6SuYSjn6b2wwm0otCw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 12:39:59 GMT
age: 14948
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (11)

#1 JS:Script (size: 6604)

#2 JS:Script (size: 154)

#3 JS:Script (size: 434)

#4 JS:Script (size: 184)

#5 JS:Script (size: 46274)

#6 JS:Script (size: 26021)

#7 JS:Script (size: 57276)

#8 JS:Script (size: 29)

#9 JS:Script (size: 418)

#10 JS:Script (size: 175)

#1 JS:Write (size: 63)

HTTP Transactions (41)

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN