Overview

URL45.95.169.117/
IP 45.95.169.117 (Croatia)
ASN#211619 MAXKO j.d.o.o.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-02 23:28:49 UTC
StatusLoading report..
IDS alerts1
Blocklist alert33
urlquery alerts No alerts detected
Tags None

Domain Summary (10)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
45.95.169.117 (22) 0 2020-05-18 01:40:41 UTC 2022-07-23 21:57:51 UTC 45.95.169.117 Unknown ranking
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-02 04:09:02 UTC 35.241.9.150
fonts.gstatic.com (2) 0 2014-04-02 10:51:04 UTC 2023-02-02 07:34:01 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-02 04:10:44 UTC 52.42.252.225
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-02-02 04:09:26 UTC 34.120.237.76
fonts.googleapis.com (4) 8877 2012-05-23 12:41:44 UTC 2023-02-02 08:36:04 UTC 142.250.74.106
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2023-02-02 04:09:15 UTC 95.101.11.115
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-02 04:10:44 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-02 04:09:20 UTC 34.117.237.239
ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2023-02-02 04:09:06 UTC 142.250.74.131

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-02-02 23:29:07 UTC 1  45.95.169.117 Client IP ET PHISHING Possible Phish - Mirrored Website Comment Observed 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-02-02 2 45.95.169.117/ Malware
2023-02-02 2 45.95.169.117/js/popper.min.js Malware
2023-02-02 2 45.95.169.117/js/bootstrap.min.js Malware
2023-02-02 2 45.95.169.117/js/particles-code.js Malware
2023-02-02 2 45.95.169.117/js/typed.js Malware
2023-02-02 2 45.95.169.117/js/smoothscroll.js Malware
2023-02-02 2 45.95.169.117/js/jquery.min.js Malware
2023-02-02 2 45.95.169.117/js/scripts.js Malware
2023-02-02 2 45.95.169.117/js/video-bg.js Malware
2023-02-02 2 45.95.169.117/js/particles.js Malware
2023-02-02 2 45.95.169.117/img/header/curve-layer.svg Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed
2023-02-02 2 45.95.169.117 Sinkholed

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 45.95.169.117
Date UQ / IDS / BL URL IP
2023-02-02 23:28:49 +0000 0 - 1 - 33 45.95.169.117/ 45.95.169.117


Last 5 reports on ASN: MAXKO j.d.o.o.
Date UQ / IDS / BL URL IP
2023-03-29 17:54:20 +0000 0 - 0 - 2 googlossal.com/webby/QWEB.bin 83.137.158.50
2023-03-28 09:52:02 +0000 0 - 0 - 1 googlossal.com/tony/montana.bin 83.137.158.50
2023-03-27 12:27:30 +0000 0 - 4 - 1 92.52.217.50/__72210/csrss.exe 92.52.217.50
2023-03-27 11:22:47 +0000 0 - 4 - 1 92.52.217.50/__72210/csrss.exe 92.52.217.50
2023-03-27 10:48:53 +0000 0 - 4 - 1 92.52.217.50/__72210/csrss.exe 92.52.217.50


Last 1 reports on domain: 45.95.169.117
Date UQ / IDS / BL URL IP
2023-02-02 23:28:49 +0000 0 - 1 - 33 45.95.169.117/ 45.95.169.117


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-12 21:43:59 +0000 0 - 1 - 0 waldenid.com/ 69.49.229.66
2023-02-26 04:45:46 +0000 0 - 1 - 33 45.95.169.120/ 45.95.169.120
2023-02-23 08:26:27 +0000 0 - 1 - 11 crmunson.com/ 69.49.235.141
2023-02-18 08:27:37 +0000 0 - 1 - 11 crmunson.com/ 69.49.235.141
2022-10-15 18:15:37 +0000 0 - 0 - 11 themetaplugs.com/ 69.49.245.145

JavaScript

Executed Scripts (9)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (54)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
X-Powered-By: PHP/5.6.40
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (827), with CRLF line terminators
Size:   14885
Md5:    134a7863a599aa8c8a04f712579560bc
Sha1:   143a992dbee824010549adac1c7f3fa6a8615635
Sha256: 8c54338869dfc93e42a5c227a1db8d983ffeb5985d0aad3a3ff7231f59b77bcc

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
  IDS:
    - ET PHISHING Possible Phish - Mirrored Website Comment Observed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14036
Expires: Fri, 03 Feb 2023 03:22:34 GMT
Date: Thu, 02 Feb 2023 23:28:38 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4599
Expires: Fri, 03 Feb 2023 00:45:17 GMT
Date: Thu, 02 Feb 2023 23:28:38 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 22:43:32 GMT
age: 2706
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9289
Expires: Fri, 03 Feb 2023 02:03:27 GMT
Date: Thu, 02 Feb 2023 23:28:38 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: EbGrIQN672IqaDDcUmKXx7Vn/4Sul89//0sPen0k6iSH9U73fvbiHSvj9zamanAWnCEv+PFm2hs=
x-amz-request-id: MQTXZ9JF7GPDVMB5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 22:52:09 GMT
age: 2189
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 02 Feb 2023 23:28:38 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /css/icons-t/flaticon.css HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Sat, 15 Apr 2017 22:00:00 GMT
ETag: "1004-54d3badedb800"
Accept-Ranges: bytes
Content-Length: 4100
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   4100
Md5:    484c8ffd501c4c1817064b138fcf6cc6
Sha1:   83e79b54487f10ae9f3e5982625db94451fdc143
Sha256: 4986bb3bbd48afb14dd6bff2ac2fbfa54de9b53ea8c69e811916b256dba918c0

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /css/icons/flaticon.css HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Sun, 19 Jun 2016 22:00:00 GMT
ETag: "2c4b-535a8b5893800"
Accept-Ranges: bytes
Content-Length: 11339
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   11339
Md5:    b82b6f8f50ab8024a4982297abbacc9e
Sha1:   f7df3a094bcee41b4724917916da831606374116
Sha256: c769e6e4c86d94d767f7be2418ab85f4607de10adc79237b5c364630e64d20ba

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /css/bootstrap.offcanvas.min.css HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Fri, 30 Jun 2017 22:00:00 GMT
ETag: "720-5533489de3800"
Accept-Ranges: bytes
Content-Length: 1824
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1822), with CRLF line terminators
Size:   1824
Md5:    99d54bd3620ae387a381dcf95322937f
Sha1:   3ae23877c64450ae3b8c86c474c69185cdb30ec0
Sha256: 97ca541b0f33bd826c7df552b945ff08835d86ad2e46a0d43485c25322c4ae34

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /css/responsive.css HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Fri, 21 Dec 2018 23:00:00 GMT
ETag: "2b31-57d9034e8fc00"
Accept-Ranges: bytes
Content-Length: 11057
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  assembler source, ASCII text, with CRLF line terminators
Size:   11057
Md5:    d56b434ff5c4ea4fd8cb2f9c61a57224
Sha1:   eb027b39a1bd417031dbf78b7e879e4c9aeb7b00
Sha256: de3fb70e0bd1b702f5b2842a1b4d2bd3190bc4cdefc71b06cb4658bb0fd8276e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /css/technology-icon/flaticon.css HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Mon, 20 Jun 2016 22:00:00 GMT
ETag: "2c4b-535bcd3609800"
Accept-Ranges: bytes
Content-Length: 11339
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   11339
Md5:    b82b6f8f50ab8024a4982297abbacc9e
Sha1:   f7df3a094bcee41b4724917916da831606374116
Sha256: c769e6e4c86d94d767f7be2418ab85f4607de10adc79237b5c364630e64d20ba

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css/bootstrap.min.css HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Wed, 04 Jul 2018 22:00:00 GMT
ETag: "22688-570338d4f9800"
Accept-Ranges: bytes
Content-Length: 140936
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65319), with CRLF line terminators
Size:   140936
Md5:    e59aa29ac4a3d18d092f6ba813ae1997
Sha1:   c4141255658403c38e1306d2fe196575522d6cc3
Sha256: 9ef4fbe459177af5f4e9647cbe584514fd36c7386af6a1712d03ae4b42e45b24

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css/fontawesome-all.min.css HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Wed, 12 Dec 2018 23:00:00 GMT
ETag: "d1fd-57cdb28569c00"
Accept-Ranges: bytes
Content-Length: 53757
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (53568), with CRLF line terminators
Size:   53757
Md5:    a265b3bae0e5f9288d88c7af688719c0
Sha1:   c3e2ff42a07d744e39dd49d637edd3f8174a94e8
Sha256: 839e3134d9e3ae21952d3661d3ebf9ec6ad4e32822f55a6a8c80584fce4e8fe4

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/popper.min.js HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Tue, 15 Aug 2017 22:00:00 GMT
ETag: "4a36-556d1e6917800"
Accept-Ranges: bytes
Content-Length: 18998
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (18860), with CRLF line terminators
Size:   18998
Md5:    5f7af23794880b1acd7daedbbd8bcadc
Sha1:   878ce549fe305c1bfe58c1e0fb3e2e2a8653058f
Sha256: a4fdb686bb2241b8a29e194b0ec6db16f997bde526ae5b37b8ab3c48aaa7a747

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /js/bootstrap.min.js HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Wed, 04 Jul 2018 22:00:00 GMT
ETag: "c633-570338d4f9800"
Accept-Ranges: bytes
Content-Length: 50739
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (50452), with CRLF line terminators
Size:   50739
Md5:    628139f9a9db718b444a645948714eb1
Sha1:   20e03d4082c74fab27f4240c32e26bd06ba78b39
Sha256: 314c9ebed8f068a011db734de48f92b22edcb6702335451ec99ca37045ba3b4e

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /css/animate.css HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Sat, 03 Jun 2017 22:00:00 GMT
ETag: "1274f-5511564271800"
Accept-Ranges: bytes
Content-Length: 75599
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   75599
Md5:    1aaa8beecce19062646761f002462694
Sha1:   682ae6b92a88b8e1424f72070422772030f1030a
Sha256: 213e86422cd9a5571a335fcbfe6222340615bd912b3207f07b07f51865971bf2

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/particles-code.js HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Mon, 10 Sep 2018 22:00:00 GMT
ETag: "ae1e-5758b7a851800"
Accept-Ranges: bytes
Content-Length: 44574
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   44574
Md5:    200df641b711e5faf5e869662a7d8844
Sha1:   65991b50c88b801f2780bf0fbbdb1da586f335a2
Sha256: ae9daf28c920a0614c93a0af51c49962bcc11e14a247ab83581c29ed7a65bdba

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /js/typed.js HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Tue, 03 Oct 2017 22:00:00 GMT
ETag: "1e78-55aab9ccad800"
Accept-Ranges: bytes
Content-Length: 7800
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   7800
Md5:    e089649857b69ac2b37521462e262428
Sha1:   55794139d3df790d730cf9b5aa6a62c0170d1a9a
Sha256: 853e1dfe584400576605dd09695f7c4107102fdfd927ae45a807e75b9edab5f3

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /js/smoothscroll.js HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Thu, 24 Sep 2015 22:00:00 GMT
ETag: "11e3-520855a395800"
Accept-Ranges: bytes
Content-Length: 4579
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (4388), with CRLF line terminators
Size:   4579
Md5:    b4091c4fa052a58ce23de2984cdee89d
Sha1:   1775ef85d29d00e8bd8bc878e6204875ce83d124
Sha256: cf9486e595f73bfc1db92cb5927685d43d10604f31c1047398c9d772ad4b54ea

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /js/jquery.min.js HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Wed, 21 Jun 2017 22:00:00 GMT
ETag: "17b90-5527f7d4bd800"
Accept-Ranges: bytes
Content-Length: 97168
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32077), with CRLF line terminators
Size:   97168
Md5:    618538b4ab9639d444e962729a927f15
Sha1:   dacc1f76630a9708add066819b1aabf8dce01056
Sha256: 27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /js/scripts.js HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Thu, 27 Jun 2019 22:00:00 GMT
ETag: "f6c-58c55487fd800"
Accept-Ranges: bytes
Content-Length: 3948
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   3948
Md5:    1fb507733704f2b6337f05284142a041
Sha1:   ce23b4f7ab78768e0c0501e3b1571d94e2e02c09
Sha256: aa6b0dd14de43354e634468917ef0af3fd7a1bc589fa4b92344695151df446be

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /js/video-bg.js HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Sat, 03 Nov 2018 23:00:00 GMT
ETag: "770-579ca9c86fc00"
Accept-Ranges: bytes
Content-Length: 1904
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1904
Md5:    d9e65557d6cc476bb494832518a599d3
Sha1:   8ac156cc0059149dc265438a711078f08a18e06b
Sha256: b21a58c69df22afc6c25f6a7c3a0c194591a21aa2543cafdae8af4e9f1c8e399

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /js/particles.js HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Mon, 10 Sep 2018 22:00:00 GMT
ETag: "5ca-5758b7a851800"
Accept-Ranges: bytes
Content-Length: 1482
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1482
Md5:    7e0aa4773c02cd5aff4c0a6f8df9afab
Sha1:   cea34436d84cc4a204aee43bc28c628e3371a491
Sha256: a0b92c2f8288581f7f77ecbd03a0420724ec0021d4c3bd506aaaab65d9e6f868

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /media/fallback.jpg HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/css/main.css

search
                                         45.95.169.117
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Content-Length: 216
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   216
Md5:    cd38781c37313762f12af0ca0b4aff46
Sha1:   6cb7a9bb9bf685aadd6b0ff229334bc9880777c5
Sha256: 4ca0fe8521d8926edf81181e02d5a9f587f24d291022a6b23d2c73d9f464fbec

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /img/header/curve-layer.svg HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/css/main.css

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Wed, 26 Jun 2019 22:00:00 GMT
ETag: "226-58c412aa87800"
Accept-Ranges: bytes
Content-Length: 550
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   550
Md5:    1dac662fc921126048e1e9097c3a4be1
Sha1:   705520c148d9f470b8e9d2673f2161a1f6ee4181
Sha256: 86ad00eee13f07e717ff8bc887c9583bd8d8643fd82e0f8abe73e3fa9a12c209

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css/main.css HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 02 Feb 2023 23:28:38 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Last-Modified: Wed, 19 Dec 2018 23:00:00 GMT
ETag: "29467-57d67f93a3c00"
Accept-Ranges: bytes
Content-Length: 169063
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e3383a870b280d28b1d924543e6128af
Sha1:   0e9ccaf308e10ae68774fe0d32e10d063f379e7d
Sha256: 093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://45.95.169.117
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35904
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 07:32:21 GMT
expires: Mon, 29 Jan 2024 07:32:21 GMT
cache-control: public, max-age=31536000
age: 402978
last-modified: Mon, 18 Jul 2022 19:34:47 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 35904, version 1.0\012- data
Size:   35904
Md5:    c26b97e7f5bb7a34d190703522d75e16
Sha1:   69d9e5aea0544dbaf9b78c1b65139c03eceece8f
Sha256: 96217f1d27fb909f92b4a6b35a0d3d6775f2f0b4d136d27aee88547d3ed87357
                                        
                                            GET /s/heebo/v21/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://45.95.169.117
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 02:06:54 GMT
expires: Sat, 27 Jan 2024 02:06:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 20:35:20 GMT
age: 595305
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 27116, version 1.0\012- data
Size:   27116
Md5:    13c1ac7fc8f934e169620e81471a3a54
Sha1:   d111242b230c54204e9ec061537869f8ce20cb53
Sha256: b38977ea35fde92fe200fa14ac7cc55e2edce54b998ce9a08734ba1dd9053fed
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 23:07:19 GMT
age: 1280
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: 45.95.169.117
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://45.95.169.117/

search
                                         45.95.169.117
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Server: Apache/2.4.6 (CentOS) PHP/5.6.40
Content-Length: 209
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 23:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11850
Expires: Fri, 03 Feb 2023 02:46:09 GMT
Date: Thu, 02 Feb 2023 23:28:39 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DIVK6EDGLmAic1G+5imSlA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.42.252.225
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 0RNat7mhuSdmxbi8rajNU1IIvXg=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8859
Expires: Fri, 03 Feb 2023 01:56:20 GMT
Date: Thu, 02 Feb 2023 23:28:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8859
Expires: Fri, 03 Feb 2023 01:56:20 GMT
Date: Thu, 02 Feb 2023 23:28:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8859
Expires: Fri, 03 Feb 2023 01:56:20 GMT
Date: Thu, 02 Feb 2023 23:28:41 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fde7081-1c8d-41df-98c8-c063731c6202.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3385
x-amzn-requestid: 30717e1a-7a08-4b11-90e7-cd175aa667d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzrEo4oAMF1qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce4-3bc1302b4cf47fa2520e3033;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AnMRlC-rgJLk6OwzHDFeaGBuDfEuRj_n0S2o1o7QSTZqMwCIr-20-A==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:35 GMT
age: 6126
etag: "4bdaa7e9e8d6408b73ea457e7aabb26fa2a5c81c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3385
Md5:    703c7834618fd34f3d7ce5c82a51abc0
Sha1:   4bdaa7e9e8d6408b73ea457e7aabb26fa2a5c81c
Sha256: 1f467ce5825e3f8b8f841293d1ce945dc7a577abbe2cb8a2caa16ace165f4857
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vUJO-Pt9Hi1ndrCQQT1nNCGT7oDOYBpA8-EawHanESoZAsZv32dQdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 00:28:26 GMT
age: 82815
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10796
Md5:    3490571dd2de0a747987b9a0e18cccc8
Sha1:   18e9f8f160d3515f1cb31fc7538ac762a6cab344
Sha256: 1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F396748b7-25c0-4112-960c-9c86d5ad28f9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7451
x-amzn-requestid: a900a5b4-85cd-4817-8e70-2516eb33a0a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fox8IHMuIAMFdHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9c9e7-1122726b315a7c5623d1ff3f;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 02:09:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: g4SWGW5dWJsrj8vTbPEGdDa_xk-ABmtlKD_E-IWSfVfq-UmkllwNbw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 16:46:57 GMT
age: 24104
etag: "ec8541dd8ae32e1cf597d40cc1d9d04aefb46ba8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7451
Md5:    5fc553a8677d9c0bf4835a0c29a7345c
Sha1:   ec8541dd8ae32e1cf597d40cc1d9d04aefb46ba8
Sha256: e821faf86e44f2b9c9d5bd8cd3575c0a99acfc58774077034c413e345a7c0c0c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fff49ad64-ed0c-4270-8972-02b93a55c3b8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12514
x-amzn-requestid: e5e536fd-15ec-4a9f-a678-c24e6202d0f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fY_y3HRSoAMFxUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d379ab-5137ec566a8ccb4a3628e17a;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 07:13:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KvaWZ_Re1oRbOGg3MDxp5BKPCMAzYqCfVo4n3rf67ppjVO9Pmey4wg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:05:20 GMT
age: 5001
etag: "058dc594601de546ae391ffa47269b404fee0f02"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12514
Md5:    b67f1de5050f7e32226bb0b279e5f450
Sha1:   058dc594601de546ae391ffa47269b404fee0f02
Sha256: 268b5f2557e4f171f33641cc7923d6cd786cba6e056f6656c82113b49b70a3df
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13065
x-amzn-requestid: 20c6f462-0f1f-44d1-9b6b-6afbc4e79e8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpYpcELtIAMFvFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da07d5-44cd803c0feba28919b0a9ec;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 06:33:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T3PhGRcHX1X2hn8K_4587fXBrEyuY5Em-b9Jg41uH4uyQXeFoRBIYg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:55:01 GMT
age: 5620
etag: "4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13065
Md5:    cf80667db0c35c9c6139eca4ba5d12fd
Sha1:   4c4cfdc2463e8704a7bf8e1477c43b6adf7c7590
Sha256: d63e69f4b6ea16333d242bf33d4f02a4a6c96a739ca018d86afc5741d85b774d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e690e4c-e16d-49e9-ac12-24a092d6a60c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8543
x-amzn-requestid: 3dc0960e-97db-42c8-99ac-623a44e8bb3e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuv0wGJhIAMFaTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ceb-5ad3ef033a62559762db42b9;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EKWOeGruQEm9HuSlJMiEEw_gN1p37qTTIhYqaiQ6bFaCF65kUfmMtA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:55:01 GMT
age: 5620
etag: "be04ac3a50aa6f1b349a2410ad386d92de3222be"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8543
Md5:    a1d6fa4715c4e78250b2f72ddd2706f1
Sha1:   be04ac3a50aa6f1b349a2410ad386d92de3222be
Sha256: d1c3c1b7016428bf2a085b71ca0d1e215a64b3d31ff15b0ef8bf5a78f11d9ae5
                                        
                                            GET /css?family=Montserrat:300,400,600,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://45.95.169.117/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 23:28:39 GMT
date: Thu, 02 Feb 2023 23:28:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Pacifico HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://45.95.169.117/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 23:28:39 GMT
date: Thu, 02 Feb 2023 23:28:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Heebo:300,400,500,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://45.95.169.117/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 23:28:39 GMT
date: Thu, 02 Feb 2023 23:28:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css?family=Nunito:300,400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://45.95.169.117/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 23:28:38 GMT
date: Thu, 02 Feb 2023 23:28:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---