r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash eb76c0b3adf4098ad8a9d1e38250758f
99610ddb2b4ec6d04250ac244f966951695d4f00
01ed8c191c175471aee23cbc196d558e5bf5209f166806fc97db08eb06544bab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01ED8C191C175471AEE23CBC196D558E5BF5209F166806FC97DB08EB06544BAB"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17102
Expires: Mon, 21 Nov 2022 01:56:01 GMT
Date: Sun, 20 Nov 2022 21:10:59 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1cee7787feebac18f9eca273e56e3741
3a7dac544172921e24c2a1701beef5079b21d01b
79ff4a450c749d64e116c00ca3b00d40e968906c5c3881d6eeb2dc6374a4c858
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "79FF4A450C749D64E116C00CA3B00D40E968906C5C3881D6EEB2DC6374A4C858"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16752
Expires: Mon, 21 Nov 2022 01:50:12 GMT
Date: Sun, 20 Nov 2022 21:11:00 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 20 Nov 2022 21:11:00 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Hydy9Z7cpd3TnC0LlXzKqSYylEiweXfRHEvLx7mtQSnaEhLCwqmS4EEox3GwaOi5dCb8Zi7yqn4=
x-amz-request-id: 8E32PX93Z556E5EZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 20 Nov 2022 20:41:51 GMT
age: 1749
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 2061bb5a62c7dbe5a39e49a98bf7d214
812ff4923fc0fa69fa7db7c362d5af728e297099
6f0c1ecd37ba47802a386c487e3c2eb1794a06e8b9f56e016326686e3d80ef92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4514
Cache-Control: max-age=138938
Content-Type: application/ocsp-response
Date: Sun, 20 Nov 2022 21:11:00 GMT
Etag: "637a01fc-1d7"
Expires: Tue, 22 Nov 2022 11:46:38 GMT
Last-Modified: Sun, 20 Nov 2022 10:31:24 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 2061bb5a62c7dbe5a39e49a98bf7d214
812ff4923fc0fa69fa7db7c362d5af728e297099
6f0c1ecd37ba47802a386c487e3c2eb1794a06e8b9f56e016326686e3d80ef92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2798
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 20 Nov 2022 21:11:00 GMT
Last-Modified: Sun, 20 Nov 2022 20:24:22 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 20 Nov 2022 20:45:17 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1543
alt-svc: clear
X-Firefox-Spdy: h2
www.lw-sdc.com/
31.131.20.36200 OK 12 kB IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (17727)
Hash ad50523887596b122a75feedb81d6561
e5694560fa2e53820c7163da03628b825973d428
2ea734b659e983bc490af3e9e5c0966d6431153b2f09ed5306022cd570f01840
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
link: <http://www.lw-sdc.com/index.php?rest_route=/>; rel="https://api.w.org/"
transfer-encoding: chunked
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-includes/blocks/navigation/style.min.css?ver=6.1.1
31.131.20.36200 OK 2.6 kB URL HTTP/1.1 www.lw-sdc.com/wp-includes/blocks/navigation/style.min.css?ver=6.1.1
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type ASCII text, with very long lines (15342), with no line terminators
Hash 0ebbf2bcc44cd90609df448e13be1f1f
46a6d2d1b6b60ccf6e42028cc6c78e36c00d48fd
4710730d1519011b4899da865e25c1e5ee484affccdfb1af8d3e4e95887701e3
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/blocks/navigation/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 08:49:38 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2631
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-content/plugins/email-encoder-bundle/core/includes/assets/css/style.css?ver=220425-95731
31.131.20.36200 OK 232 B URL HTTP/1.1 www.lw-sdc.com/wp-content/plugins/email-encoder-bundle/core/includes/assets/css/style.css?ver=220425-95731
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
Hash 61870ca34b0a298771aea7f4cc8da1b7
d993fb2539fc6bd23c9713b356a0ebb95bb4c826
f189ba6d7d50b638c024d6c5603495e13399145d93da24b3caa05f5c2e6cf706
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/email-encoder-bundle/core/includes/assets/css/style.css?ver=220425-95731 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: text/css
last-modified: Mon, 25 Apr 2022 09:57:31 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 232
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-includes/blocks/navigation/view-modal.min.js?ver=45f05135277abf0b0408
31.131.20.36200 OK 2.9 kB URL HTTP/1.1 www.lw-sdc.com/wp-includes/blocks/navigation/view-modal.min.js?ver=45f05135277abf0b0408
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type Unicode text, UTF-8 text, with very long lines (7775), with no line terminators
Hash 125a2a5276e5cb30a3b4c0760650c508
59781fd623590f2b999cbea3b97334989ebe34b6
5cd3c25e63a0efca8739dba7fc99864d924a539f35e6365f8ad86be89cf87e46
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/blocks/navigation/view-modal.min.js?ver=45f05135277abf0b0408 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 08:49:38 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2914
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-content/plugins/email-encoder-bundle/core/includes/assets/js/custom.js?ver=220425-95731
31.131.20.36200 OK 859 B URL HTTP/1.1 www.lw-sdc.com/wp-content/plugins/email-encoder-bundle/core/includes/assets/js/custom.js?ver=220425-95731
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
Hash 960cc3175f9da1147da909e532e86861
1174ebc56c1cc3fc4529a6916f15ed32d60221b8
1d8dd93f468e40b35738213e85222986850e8d87322be0fb501e0cebf28970e8
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/email-encoder-bundle/core/includes/assets/js/custom.js?ver=220425-95731 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: application/javascript
last-modified: Mon, 25 Apr 2022 09:57:31 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 859
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-content/themes/twentytwentytwo/style.css?ver=1.1
31.131.20.36200 OK 2.1 kB URL HTTP/1.1 www.lw-sdc.com/wp-content/themes/twentytwentytwo/style.css?ver=1.1
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type Unicode text, UTF-8 text, with very long lines (948)
Hash f5b20e62e8193fb0a71147036bc480e0
456d93ec6686d3468c4113d6930ec76b7b4b1f3a
167bc117e9a3e9c64d265c34bbdf98882574a8156fd6f0f872221c4d4fc91b15
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/twentytwentytwo/style.css?ver=1.1 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: text/css
last-modified: Tue, 22 Feb 2022 02:45:04 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2085
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
31.131.20.36200 OK 4.5 kB URL HTTP/1.1 www.lw-sdc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type ASCII text, with very long lines (11126)
Hash b58921fb05a6cd3dcd6a9e5dc711d101
c147159c1a060cf4d4efb5f9e1fd5622f602c372
a2060d15016d5ea84f62e0404eb7a6e8d22177f5d26a8c2b9130146715986d5e
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 14:36:06 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 4461
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
31.131.20.36200 OK 35 kB URL HTTP/1.1 www.lw-sdc.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type ASCII text, with very long lines (65447)
Hash 90306bc85d896abd8d83613f1fd48736
b27aa18d1006f02b05e9b7167b4f993be483f131
75640bc7f516c65f9905c4e6d804cab87371b64e2117a4c92f61eba9dba7c842
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 08:49:38 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 34867
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-includes/blocks/navigation/view.min.js?ver=c24330f635f5cb9d5e0e
31.131.20.36200 OK 430 B URL HTTP/1.1 www.lw-sdc.com/wp-includes/blocks/navigation/view.min.js?ver=c24330f635f5cb9d5e0e
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type ASCII text, with very long lines (1144), with no line terminators
Hash b418a58114136c8ab3811e1ec84ce8a2
76702e475303f55ec72bb1bc254cd8795e76c5dc
ac5f59cd75f5dcc72848e8efffff47e2da7c214e8d44e08ef259089fd650a932
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/blocks/navigation/view.min.js?ver=c24330f635f5cb9d5e0e HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 08:49:38 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 430
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
31.131.20.36200 OK 5.7 kB URL HTTP/1.1 www.lw-sdc.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type ASCII text, with very long lines (15660)
Hash fc4f45913ef699f322a778ca95a0a7ee
9627510494f10f5cec255cb56926684d56f7cb78
cf358090a21171182854417b6fef077bc31a2123fa2953c1c06ec970b3253b9c
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 21:01:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 5712
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-content/plugins/email-encoder-bundle/core/includes/assets/js/encoder-form.js?ver=220425-95731
31.131.20.36200 OK 758 B URL HTTP/1.1 www.lw-sdc.com/wp-content/plugins/email-encoder-bundle/core/includes/assets/js/encoder-form.js?ver=220425-95731
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type HTML document, ASCII text
Hash c7d36ca906accbfe7dd702cf0c609a6b
e54b0b2bd388f4b65a415506ee7b310ed21174a4
01468c9727c4c2c669393ceb9d058e7a7ae0abb9701ef716ec07d646ddfe59eb
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/plugins/email-encoder-bundle/core/includes/assets/js/encoder-form.js?ver=220425-95731 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: application/javascript
last-modified: Mon, 25 Apr 2022 09:57:31 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 758
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-content/themes/twentytwentytwo/assets/fonts/SourceSerif4Variable-Roman.ttf.woff2
31.131.20.36200 OK 428 kB URL HTTP/1.1 www.lw-sdc.com/wp-content/themes/twentytwentytwo/assets/fonts/SourceSerif4Variable-Roman.ttf.woff2
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type Web Open Font Format (Version 2), TrueType, length 428448, version 4.262\012- data
Size 428 kB (428448 bytes)
Hash 378b83a85cfb1cb0f11ab503b0df456e
b622e44324ea8789789e812cae242e1f483e9811
bb8c4212414ce2a7887636e1c6eb1fd3ab46e4391226fd39653a2c2abbb17697
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/themes/twentytwentytwo/assets/fonts/SourceSerif4Variable-Roman.ttf.woff2 HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: font/woff2
last-modified: Wed, 10 Nov 2021 19:24:00 GMT
accept-ranges: bytes
content-length: 428448
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7552fbb7401dd8bdb12ad6931fcef351
4dd952c62477d46aff6e6d79153da02a6f884d9a
1f799f831c9251ca8dc5cf94d3fff7091b6696ce15a8d2fd21db9f1dcf7df983
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5213
Cache-Control: max-age=106520
Content-Type: application/ocsp-response
Date: Sun, 20 Nov 2022 21:11:00 GMT
Etag: "6379809f-1d7"
Expires: Tue, 22 Nov 2022 02:46:20 GMT
Last-Modified: Sun, 20 Nov 2022 01:19:27 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
www.lw-sdc.com/wp-content/uploads/2022/04/android-chrome-192x192-3-150x150.png
31.131.20.36200 OK 14 kB URL HTTP/1.1 www.lw-sdc.com/wp-content/uploads/2022/04/android-chrome-192x192-3-150x150.png
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash b224e1a162eff19b051f601b910203b0
fd52c006358f3f083e88814f557d58ef00f06764
a9394934c68c78e17b8fd8643d71fd1442fd4e024bfaa87fed86dd51d230ab09
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/04/android-chrome-192x192-3-150x150.png HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: image/png
last-modified: Sun, 24 Apr 2022 08:44:05 GMT
accept-ranges: bytes
content-length: 13893
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif
192.229.221.25200 OK 2.9 kB URL HTTP/2 www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif
IP 192.229.221.25:0
File type GIF image data, version 89a, 160 x 47\012- data
Hash 314100d067c021df619c635b810fc591
93b38f3c307e06ac7815ca4c29629b0de231a4c8
238ffe6f51ad7bc454ba82ce61ef91f8c2f9b615187dce0255a3a964821df394
GET /en_US/GB/i/btn/btn_donateCC_LG.gif HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.lw-sdc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/gif
date: Sun, 20 Nov 2022 21:11:00 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "5d5637ba-b2a"
expires: Sun, 20 Nov 2022 22:11:00 GMT
last-modified: Fri, 16 Aug 2019 04:57:30 GMT
paypal-debug-id: 84f84e6033241
server: ECAcc (ska/F77F)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: HIT
x-content-type-options: nosniff
content-length: 2858
X-Firefox-Spdy: h2
www.lw-sdc.com/wp-content/uploads/2022/04/skimmer-1-1024x393.png
31.131.20.36200 OK 114 kB URL HTTP/1.1 www.lw-sdc.com/wp-content/uploads/2022/04/skimmer-1-1024x393.png
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type PNG image data, 1024 x 393, 8-bit/color RGBA, non-interlaced\012- data
Size 114 kB (114393 bytes)
Hash fbcd4c204b769a5f671720f9b7a49835
f3fe2230572505c4ba3e29766f719c99fd6700a1
b9335c833d5cd7ed34836ff7dfc0e6efac5d1881d87860015a005728be16e6f6
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/04/skimmer-1-1024x393.png HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: image/png
last-modified: Sun, 24 Apr 2022 09:51:37 GMT
accept-ranges: bytes
content-length: 114393
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-content/uploads/2022/04/telnet-1024x409.png
31.131.20.36200 OK 152 kB URL HTTP/1.1 www.lw-sdc.com/wp-content/uploads/2022/04/telnet-1024x409.png
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type PNG image data, 1024 x 409, 8-bit/color RGBA, non-interlaced\012- data
Size 152 kB (151576 bytes)
Hash 410c49cd58b6066daff408cd55026fa3
ef7049bd4e1548a3a9257609a1efe61944b7bd8a
bad461d78974b040ffa547fb63ebfb980a6536793badcf70b8ecea318f12fb95
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/04/telnet-1024x409.png HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: image/png
last-modified: Sun, 24 Apr 2022 17:38:08 GMT
accept-ranges: bytes
content-length: 151576
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-content/uploads/2022/04/spider-1024x393.png
31.131.20.36200 OK 136 kB URL HTTP/1.1 www.lw-sdc.com/wp-content/uploads/2022/04/spider-1024x393.png
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type PNG image data, 1024 x 393, 8-bit/color RGBA, non-interlaced\012- data
Size 136 kB (136250 bytes)
Hash 46ce9bd90f5bf5f3175dbd7d4afe3841
8b45a1acaeebf384b7b7d31acae48fa98c5c54dd
1dc0034d08878d844a65ca6d9ffc4e1f6ba71c70886de89f19ad664222f60b69
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/04/spider-1024x393.png HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: image/png
last-modified: Sun, 24 Apr 2022 17:43:41 GMT
accept-ranges: bytes
content-length: 136250
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.lw-sdc.com/wp-content/uploads/2022/04/android-chrome-192x192-3.png
31.131.20.36200 OK 7.5 kB URL HTTP/1.1 www.lw-sdc.com/wp-content/uploads/2022/04/android-chrome-192x192-3.png
IP 31.131.20.36:0
ASN #56851 PE Skurykhin Mukola Volodumurovuch
File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Hash dfe89f408e4eb216e165afbbf731019b
06abdeb672584100cfc9d95949d601d0bea0b5d1
f4d509f107fb74854401c3806f1eaa8cda6794ba4d6f8b81f2a4a8ac4aec4b2d
Analyzer Verdict Alert quad9 Sinkholed
GET /wp-content/uploads/2022/04/android-chrome-192x192-3.png HTTP/1.1
Host: www.lw-sdc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.lw-sdc.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Sun, 27 Nov 2022 21:11:00 GMT
content-type: image/png
last-modified: Sun, 24 Apr 2022 08:44:05 GMT
accept-ranges: bytes
content-length: 7493
date: Sun, 20 Nov 2022 21:11:00 GMT
server: LiteSpeed
www.paypal.com/en_GB/i/scr/pixel.gif
151.101.193.21301 Moved Permanently 0 B URL HTTP/2 www.paypal.com/en_GB/i/scr/pixel.gif
IP 151.101.193.21:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en_GB/i/scr/pixel.gif HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.lw-sdc.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
cache-control: max-age=0, no-cache, no-store, must-revalidate
location: https://www.paypalobjects.com/en_GB/i/scr/pixel.gif
paypal-debug-id: f490887781b29
set-cookie: ts=vreXpYrS%3D1763673060%26vteXpYrS%3D1668980460%26vr%3D96e156041840a1f3c912aa6eff8d42b4%26vt%3D96e156041840a1f3c912aa6eff8d42b3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Wed, 19 Nov 2025 21:11:00 GMT; HttpOnly; Secure
ts_c=vr%3D96e156041840a1f3c912aa6eff8d42b4%26vt%3D96e156041840a1f3c912aa6eff8d42b3; Path=/; Domain=paypal.com; Expires=Wed, 19 Nov 2025 21:11:00 GMT; Secure
traceparent: 00-0000000000000000000f490887781b29-66bc0760898183d4-01
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Sun, 20 Nov 2022 21:11:00 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4032-HHN, cache-bma1650-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1668978661.777205,VS0,VE176
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
content-length: 0
X-Firefox-Spdy: h2
www.paypalobjects.com/en_GB/i/scr/pixel.gif
192.229.221.25200 OK 43 B URL HTTP/2 www.paypalobjects.com/en_GB/i/scr/pixel.gif
IP 192.229.221.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /en_GB/i/scr/pixel.gif HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.lw-sdc.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: image/gif
date: Sun, 20 Nov 2022 21:11:00 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "5d5637b7-2b"
expires: Sun, 20 Nov 2022 22:11:00 GMT
last-modified: Fri, 16 Aug 2019 04:57:27 GMT
paypal-debug-id: 92821af15b0b5
server: ECAcc (ska/F6D5)
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: HIT
x-content-type-options: nosniff
content-length: 43
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 20 Nov 2022 20:25:04 GMT
cache-control: public,max-age=3600
age: 2757
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 27138f8625c320bd1434ccd92263b641
6a8f18728c9f324c1c631ffc85901d84ec4d0e0c
02338368cfa2325e8463bd169cb0ad4df2967ca4260b75bc665cd0836e90e9f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4604
Cache-Control: max-age=133956
Content-Type: application/ocsp-response
Date: Sun, 20 Nov 2022 21:11:01 GMT
Etag: "6379ee2d-1d7"
Expires: Tue, 22 Nov 2022 10:23:37 GMT
Last-Modified: Sun, 20 Nov 2022 09:06:53 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
54.148.242.254101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.148.242.254:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hVUriw8PgAIPmzSFMdEgxg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NQMxUiVRusbPzzpYNbS+ogO8gXM=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 798ef0955be535268547903e74dacfcd
782823486f9ded693609cade264d1950e816f7d0
75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3287
Expires: Sun, 20 Nov 2022 22:05:50 GMT
Date: Sun, 20 Nov 2022 21:11:03 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 798ef0955be535268547903e74dacfcd
782823486f9ded693609cade264d1950e816f7d0
75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3287
Expires: Sun, 20 Nov 2022 22:05:50 GMT
Date: Sun, 20 Nov 2022 21:11:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: iGM_HV13dzz5eOswbOJfjj14jlFW4jy2YsW7eJumS_TM5TxxG8VMwQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 20 Nov 2022 03:36:47 GMT
age: 63256
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19c1a99-6290-4f30-afcf-c426abf8c229.png
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19c1a99-6290-4f30-afcf-c426abf8c229.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 907cdf495815b066cbeaccd9c862c544
6082de99b599bc3c9ce14e2641a2bf60f9f187d8
fbccb495391bba54b463e8c4eaf3207af00b098c4b5f816011d240257aa56f6c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19c1a99-6290-4f30-afcf-c426abf8c229.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11562
x-amzn-requestid: f01b0409-b43d-4d9c-92c0-0023c5e49d58
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3jV_GDmIAMFvqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794c26-69366c73760dcd5b72634f73;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:35:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pvgyUJPVgG_PrCetQXIXLgxyEBar2nMFywc6HracpnEsn2tiCw_Pfg==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 21:42:03 GMT
age: 84540
etag: "6082de99b599bc3c9ce14e2641a2bf60f9f187d8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b47e52f-9db3-4562-a907-fad72a31cf1f.jpeg
34.120.237.76200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b47e52f-9db3-4562-a907-fad72a31cf1f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e33cec1fb25538471758ee73cffc0c88
351f0afdd289e84c829401b80645c8803b47bc39
d826e4a0f0f53e95864b1e40d6bf13d2e82ad5806f988b7d54bb97e21b45da8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b47e52f-9db3-4562-a907-fad72a31cf1f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6744
x-amzn-requestid: 489adc2f-8725-4361-ae81-542f845b43f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3i5BFzmIAMFXEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794b6c-4200af255e86aad05e3e95f8;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:32:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: IEkibE17YLbyAKc32r0cdG9f46d-qA9Tr_JN_iA1XAnWikKEgHvywQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 22:35:16 GMT
etag: "351f0afdd289e84c829401b80645c8803b47bc39"
content-type: image/jpeg
age: 81347
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2640ea-cb67-4da2-9989-09bf608bd138.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2640ea-cb67-4da2-9989-09bf608bd138.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2dcdeb5df10dd86dbc155dbefc4fd72b
b0a20213cdedc7fa472dbdad4e1152152009433e
ba98ae058e591f010056de61cdc58e09b5a2742be08421e0ba57ac2a0de36422
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2640ea-cb67-4da2-9989-09bf608bd138.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11915
x-amzn-requestid: 93e2bad9-148f-4b10-9c07-8ab77bcaafcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3jW6F0BoAMFU3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794c2c-19e415980648396973718d73;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:35:40 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3vxezxpU1re737vRthcDcV3hDb1NAhhZrslBYjIHE7hdtD40FslmzA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 22:35:16 GMT
age: 81347
etag: "b0a20213cdedc7fa472dbdad4e1152152009433e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F032a7640-4af2-49ea-b184-de5b0ed996a4.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F032a7640-4af2-49ea-b184-de5b0ed996a4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 79ccaf63b8e37223509518f540b26f54
fd48bd3737d35bc53a0ec4593c8769ea9fe1cc71
950ae082472515d39c9e3440cee399376e99840651ff04c4d2581951e44163de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F032a7640-4af2-49ea-b184-de5b0ed996a4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9653
x-amzn-requestid: 06932e2b-59fa-4e05-aad3-65d7e2045e13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3i5fHJEoAMF8Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794b6f-0062640e7868cf664bcf26d2;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:32:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6eFgEWflu3zqDd4J838DeZiPxNafliBVrce95D_29-oviwINWR2bkw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 21:41:44 GMT
etag: "fd48bd3737d35bc53a0ec4593c8769ea9fe1cc71"
content-type: image/jpeg
age: 84559
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84f65b21-5dd5-42d9-9985-0823fc534495.webp
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84f65b21-5dd5-42d9-9985-0823fc534495.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25aa851caa96376b563f0322e8621292
71a917b184ec9ad1bb370724f4e4c707468e865e
7ffbeca58e1a4cc8f26f1a832376ae97d17c973efef9a1f4bebb44536da5ae1c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84f65b21-5dd5-42d9-9985-0823fc534495.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4292
x-amzn-requestid: 5b50eebe-81f9-43fa-b259-eb9be43ff3be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3i0SH1uoAMFdUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794b4e-7322c4461f94c93c29542312;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:31:58 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pcLZxnbI_hWCZstg2gZwNR3-v6d4Y1szI-Kg_RMXsgneiIRXBZHWkA==
via: 1.1 3c22982dfb94f708939a6ef528c5e55c.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 22:19:52 GMT
etag: "71a917b184ec9ad1bb370724f4e4c707468e865e"
content-type: image/jpeg
age: 82271
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2