Overview

URLserver.appsfavs.top/a87ff6-20140206-e7d5839d550667dc5757e3e3f6fb8695/?a=1&lang=en&v=5&sdk=8.1.0&framework=9&ytube=1&otube=1&wifi=yes&package=com.learnforfree.braille.alphabet&mcc=262&mnc=3&install=b8cf9f01-51f4-498b-8191-f83590a9e3c3
IP 5.189.157.246 (Germany)
ASN#51167 Contabo GmbH
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-14 17:54:44 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (9)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2023-01-13 17:12:05 UTC 23.33.119.27
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-13 17:21:06 UTC 34.160.144.191
code.jquery.com (3) 634 2012-05-21 17:28:02 UTC 2023-01-13 17:12:12 UTC 69.16.175.10
server.appsfavs.top (18) 0 2023-01-13 17:25:23 UTC 2023-01-13 17:25:23 UTC 5.189.157.246 Unknown ranking
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-13 17:12:37 UTC 35.241.9.150
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-13 17:12:29 UTC 34.117.237.239
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2023-01-13 19:54:06 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-13 17:41:06 UTC 34.216.206.159
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-01-13 17:34:52 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-01-14 17:54:33 UTC 2 Client IP Internal IP ET DNS Query to a *.top domain - Likely Hostile 
2023-01-14 17:54:33 UTC 2 Client IP  5.189.157.246 ET INFO HTTP Request to a *.top domain 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 5.189.157.246
Date UQ / IDS / BL URL IP
2023-01-27 12:00:50 +0000 0 - 2 - 0 server.appsfavs.top/20131031-z-learnfinnish-m (...) 5.189.157.246
2023-01-15 12:24:30 +0000 0 - 29 - 0 travelapps.rise.pw/73278a-20150720-42c2e41507 (...) 5.189.157.246
2023-01-14 17:54:44 +0000 0 - 2 - 0 server.appsfavs.top/a87ff6-20140206-e7d5839d5 (...) 5.189.157.246
2023-01-08 14:33:25 +0000 0 - 9 - 0 anteos.rise.pw/bd4c9a-20150507-32a16c0cdee51b (...) 5.189.157.246


Last 5 reports on ASN: Contabo GmbH
Date UQ / IDS / BL URL IP
2023-03-31 18:16:14 +0000 0 - 0 - 2 zitrolley.com/online/a1b2c3/0e01b9ace412633e8 (...) 62.171.188.237
2023-03-31 18:16:01 +0000 0 - 0 - 4 edm-secure.info/a1b2c3/f6f90c2c44c76006f701cb (...) 194.163.164.7
2023-03-31 17:55:50 +0000 0 - 0 - 4 edm-secure.com/a1b2c3/0870bdaa467c9d976bee6f0 (...) 194.163.164.7
2023-03-31 17:44:30 +0000 0 - 0 - 4 my-netbank.cba.com.au.edm-secure.com/a1b2c3/b (...) 194.163.164.7
2023-03-31 17:34:47 +0000 0 - 0 - 2 zitrolley.com/online/a1b2c3/0e01b9ace412633e8 (...) 62.171.188.237


Last 2 reports on domain: appsfavs.top
Date UQ / IDS / BL URL IP
2023-01-27 12:00:50 +0000 0 - 2 - 0 server.appsfavs.top/20131031-z-learnfinnish-m (...) 5.189.157.246
2023-01-14 17:54:44 +0000 0 - 2 - 0 server.appsfavs.top/a87ff6-20140206-e7d5839d5 (...) 5.189.157.246


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-26 03:45:41 +0000 14 - 3 - 29 onlinequranteaching.com/public/0rRmg7t11rQcoT (...) 167.86.83.89
2023-03-25 00:36:49 +0000 14 - 3 - 32 onlinequranteaching.com/public/byx3mblHRGCU9S (...) 167.86.83.89
2023-03-24 06:36:52 +0000 9 - 3 - 4 mail.deliverylifesupport.com/public/S969bltSp (...) 85.187.128.43
2023-03-24 06:36:14 +0000 9 - 3 - 4 mail.deliverylifesupport.com/public/lWrNz6K6F (...) 85.187.128.43
2023-03-24 06:35:49 +0000 9 - 3 - 4 mail.deliverylifesupport.com/public/IA1EezVkF (...) 85.187.128.43

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (38)


Request Response
                                        
                                            GET /a87ff6-20140206-e7d5839d550667dc5757e3e3f6fb8695/?a=1&lang=en&v=5&sdk=8.1.0&framework=9&ytube=1&otube=1&wifi=yes&package=com.learnforfree.braille.alphabet&mcc=262&mnc=3&install=b8cf9f01-51f4-498b-8191-f83590a9e3c3 HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         5.189.157.246
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: http://server.appsfavs.top


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (523), with CRLF, CR, LF line terminators
Size:   9592
Md5:    79361514a10ab9486912aa2e1a424a9a
Sha1:   6d6583cbc371d3b61e747a8fe6200b58709d4bde
Sha256: 6804997b8c0ffd2ca9f88920ede94c476be6c56119c9d95c9f8b8f8889689ea8

Alerts:
  IDS:
    - ET INFO HTTP Request to a *.top domain
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17265
Expires: Sat, 14 Jan 2023 22:42:18 GMT
Date: Sat, 14 Jan 2023 17:54:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "619281D3B9753BC6D2845786DA75E8566687362769517AACF90F953FFBB8407C"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15428
Expires: Sat, 14 Jan 2023 22:11:41 GMT
Date: Sat, 14 Jan 2023 17:54:33 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c
Upgrade-Insecure-Requests: 1

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:33 GMT
Content-Length: 1823
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (523), with CRLF, CR, LF line terminators
Size:   1823
Md5:    65fb56a5525badf0963b227a2424a412
Sha1:   e4f82ef199893923aa8a2695a08cdaf2fb1d849f
Sha256: 4c07d725b97c11c3a80335128bc3d3dece3b27e156b4d249df942dee41e0857c
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 14 Jan 2023 17:48:55 GMT
age: 338
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "761AAB02513E7A0EC55EA59109E88B39CBD4E17DF0CD2035AA37A4693F22D1F3"
Last-Modified: Thu, 12 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4386
Expires: Sat, 14 Jan 2023 19:07:39 GMT
Date: Sat, 14 Jan 2023 17:54:33 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: +xSPueH8pbGnldrX7g+oRoVWKG1sVpgp3NRAKgIRpbhWKr3cjhyiiLXLndG7RbYVT6/iUsitdqg=
x-amz-request-id: 09BQK3PJWGEB37D3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 14 Jan 2023 16:55:01 GMT
age: 3572
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 14 Jan 2023 17:54:33 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /mobile/1.1.1/jquery.mobile-1.1.1.min.css HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/

search
                                         69.16.175.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 14 Jan 2023 17:54:34 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 9697
Last-Modified: Wed, 16 Feb 2022 10:50:39 GMT
Accept-Ranges: bytes
Server: nginx
ETag: W/"620cd6ff-1020d"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1673718874.dop218.sk1.t,1673718874.cds205.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (65429)
Size:   9697
Md5:    5016b7d8840778dc305a23c8d2f704cf
Sha1:   aa9253539e4049a7b10e1509df72b4cd06282c94
Sha256: 6ac3cf27a09fd648999c257973543719971b0cae3dc344dd1773140024381ab1
                                        
                                            GET /include/css/style.css HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Last-Modified: Wed, 30 Dec 2020 02:44:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5febe998-16be"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF, CR line terminators
Size:   1520
Md5:    17e5baed0e371ce843a9c6963821801c
Sha1:   f7ac25e48e8905b43490daa4625c94d54b9816ab
Sha256: f883b65d88929f2a5020618a23a5ec1f76e359d988e4e11ec1bc061317b09045
                                        
                                            GET /jquery-1.7.1.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/

search
                                         69.16.175.10
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Sat, 14 Jan 2023 17:54:34 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 33120
Last-Modified: Wed, 16 Feb 2022 10:50:39 GMT
Accept-Ranges: bytes
Server: nginx
ETag: W/"620cd6ff-16eac"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1673718874.dop215.sk1.t,1673718874.cds232.sk1.c


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Size:   33120
Md5:    903ae6e43494ee2a480cd0941d6aac1b
Sha1:   1fa6c4476fe13579665d185679a1de6222493285
Sha256: 47a7741a70906d7b19c538fc65dfdcefed1cb79336d9be52016c660f434ca72e
                                        
                                            GET /mobile/1.1.1/jquery.mobile-1.1.1.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/

search
                                         69.16.175.10
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Sat, 14 Jan 2023 17:54:34 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 27998
Last-Modified: Wed, 16 Feb 2022 10:50:39 GMT
Accept-Ranges: bytes
Server: nginx
ETag: W/"620cd6ff-16c19"
Cache-Control: max-age=315360000, public
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-HW: 1673718874.dop205.sk1.t,1673718874.cds244.sk1.c


--- Additional Info ---
Magic:  ASCII text, with very long lines (598)
Size:   27998
Md5:    7cc791be2306ee24c47d79f7611c4228
Sha1:   ac57549fc00b650af063a52420e10f61c220f86b
Sha256: 2a9fdb6032a1834f20401860e75a498a9739d9d99df2538dcc78b1e5d7406e1e
                                        
                                            GET /comments/js/comments.js HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Last-Modified: Wed, 30 Dec 2020 02:28:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5febe5e3-1b9e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (3455), with CRLF, CR line terminators
Size:   2404
Md5:    b2ed11d424226510c3128f415b4b9407
Sha1:   a0b7046b970eaede0601606c9deb0272efc6a1a0
Sha256: cc0ade8cd4290235b8e59abc0dea1478435d61de6905f72d1ec9380a4409e6e6
                                        
                                            GET /include/css/monocolor-palettes/teresa_dark.min.css HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Last-Modified: Wed, 30 Dec 2020 02:44:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5febe99b-2b1e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (10728), with CRLF, CR line terminators
Size:   2137
Md5:    48610925b05df161fa365ba78a4f4d17
Sha1:   4ba0d27770967593077bf50a374a43c397ea44a5
Sha256: ccc39e99e1671bd956728a6bd31a97613f6af363284927962e122a047c34c804
                                        
                                            GET /include/thumbsup/styles.css HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Last-Modified: Wed, 30 Dec 2020 02:52:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5febeb50-211a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF, CR line terminators
Size:   1567
Md5:    a7c6d7f8d1ee6e32af78a9de742f8ddc
Sha1:   d9455c78524dc83418ad60c6e69fe9c152c9d500
Sha256: 54a1195d0fe31b3fee843aa96ef1e5a4a5a046f66404ae52ef037530e320ead0
                                        
                                            GET /include/js/script.js HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Last-Modified: Tue, 27 Sep 2022 11:44:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6332e202-29c5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1683
Md5:    808a2d945009a3a2fef579777e868296
Sha1:   75763ce16edb8f09e45ddda7014cca91b14e16d8
Sha256: 8d97750625c901c5349753bcb1573fbb7525c49e33ea22cc374daeeb74c1c8b9
                                        
                                            GET /comments/css/page.css HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Last-Modified: Wed, 30 Dec 2020 02:28:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"5febe5e2-e8f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (907), with CRLF, CR line terminators
Size:   1157
Md5:    75c2ccb7cbc2b3f1d158ed06a2e4077d
Sha1:   674c6edc1a4f8ee554eb10dc0c8a6ae9b85478b8
Sha256: f1342875a4d810ff83801683ed5e41e2c0809e88e9ee15f4ae858e3a73f5891d
                                        
                                            GET /user-media/PRIVATE/appsfavs/cliparts/langs/eye-e52bf6c459d0.png HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 1657
Last-Modified: Fri, 09 Dec 2022 11:25:11 GMT
Connection: keep-alive
ETag: "63931b17-679"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size:   1657
Md5:    fd0fa176d5b0e7ca06632be89e83ca7e
Sha1:   3121a39e102e6af5ed4cdf1be321c244121523e1
Sha256: 2bdcaae60a05a4dfa200adba60855da7ebcf7a7642a1906952eca1e1b3f94d0d
                                        
                                            GET /user-media/icons/teresa_smallicons/ico_home.png HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 5190
Last-Modified: Wed, 30 Dec 2020 08:06:36 GMT
Connection: keep-alive
ETag: "5fec350c-1446"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   5190
Md5:    9adea5bc70dfe345be8d4e7d9421cb30
Sha1:   764b20f1f19b4acba25c32ecaa6f805e0ae49541
Sha256: 6ac926ed08ad4157d80927e9df3eeecaf5c46efd0b81b676bba944f831649739
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 1406
Last-Modified: Fri, 01 Jan 2021 14:17:02 GMT
Connection: keep-alive
ETag: "5fef2ede-57e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16\012- data
Size:   1406
Md5:    011201ab56695ce86ea2f190bce2670b
Sha1:   bb8fad6accf293e619360935047c23f00da3c769
Sha256: a9bc1ab7f7c0c6bc5d097050968993474e32346cffa537be1e0335a19645f12e
                                        
                                            GET /include/css/monocolor-palettes/images/ajax-loader.gif HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/include/css/monocolor-palettes/teresa_dark.min.css
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 7825
Last-Modified: Wed, 30 Dec 2020 02:44:44 GMT
Connection: keep-alive
ETag: "5febe99c-1e91"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 46 x 46\012- data
Size:   7825
Md5:    08a3028fda91d443f4d5e93307c96fcd
Sha1:   afb5a8d515ec7b2c4e5d8bfccb490fb5b60311c3
Sha256: 6ad159790587aeed2e2598356ea659fe327c99976f7243899b011695b9ad526f
                                        
                                            GET /include/graph/icons/ajax-loader.gif HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 1849
Last-Modified: Wed, 30 Dec 2020 02:44:50 GMT
Connection: keep-alive
ETag: "5febe9a2-739"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16\012- data
Size:   1849
Md5:    9b5fbe9c4d2adee23643da3e936ccd7e
Sha1:   323ecc2bf566c0de48ca10b3caf3859fbdced621
Sha256: 067d225c327e9aa635d7a61013d15ad311b3918bcfc880e8bf64da3fde5907af
                                        
                                            POST /process.php?p=displayHome HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Origin: http://server.appsfavs.top
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c
Content-Length: 0

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 560
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- exported SGML document, ASCII text, with CRLF, CR line terminators
Size:   560
Md5:    21c93f1a8a1c7c8904eb3d7c308a8d96
Sha1:   241d36029a19a0b0a821ded73c267ec850e049ad
Sha256: 05cacd9aeb3c99882b6a45ca6f40caa207e9def9e386949dc3ae2770e37cb510
                                        
                                            GET /user-media/icons/teresa_smallicons/ico_share.png HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 4589
Last-Modified: Wed, 30 Dec 2020 08:06:21 GMT
Connection: keep-alive
ETag: "5fec34fd-11ed"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   4589
Md5:    c176c08e12b9ee107b83640fc45591c3
Sha1:   cfe30277f2a9f39b7ee2edbf70445a6997ae064f
Sha256: 06736a8ece48d09e58147926b66894cc82926b2be2aa764d46917fb589cf9a80
                                        
                                            GET /user-media/icons/teresa_smallicons/ico_star.png HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 3960
Last-Modified: Wed, 30 Dec 2020 08:06:20 GMT
Connection: keep-alive
ETag: "5fec34fc-f78"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   3960
Md5:    4d0da74c782df156f2bdaafc1fa3d69b
Sha1:   95d31663ef8428e78a42cccc83b05ead06f4d300
Sha256: 2ef3cf30565445b3dc57aecd7efae96b9ec4181cf10d010d34d2285f18b580af
                                        
                                            GET /user-media/icons/teresa_smallicons/ico_news.png HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 4367
Last-Modified: Wed, 30 Dec 2020 08:06:28 GMT
Connection: keep-alive
ETag: "5fec3504-110f"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   4367
Md5:    8635cb652b71bb6f5ba337a22338c806
Sha1:   9e4981587d2bee77aa3c014700b8ae45cef73ec1
Sha256: 1661f98558f508609ce3518b1e0cc3aea5a9eeff1b3d6dec04ab63818958b9bf
                                        
                                            GET /user-media/icons/teresa_smallicons/ico_search.png HTTP/1.1 
Host: server.appsfavs.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://server.appsfavs.top/
Cookie: PHPSESSID=36kausi31u1emqeo6si9v9mh4c

search
                                         5.189.157.246
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 14 Jan 2023 17:54:34 GMT
Content-Length: 4421
Last-Modified: Wed, 30 Dec 2020 08:06:21 GMT
Connection: keep-alive
ETag: "5fec34fd-1145"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   4421
Md5:    f57ccbf84605b04261226d980f2ebb2e
Sha1:   b02a17771bfb64f00e994f29d339b6cfd6b5ffc0
Sha256: 298b89769261610214903334b010d2a1bc57667e6e31582cf98a2f7be4cf13a5
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 14 Jan 2023 17:33:45 GMT
age: 1249
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2960
Cache-Control: 'max-age=158059'
Date: Sat, 14 Jan 2023 17:54:34 GMT
Last-Modified: Sat, 14 Jan 2023 17:05:14 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ziljikcXvHDBz7ofWyUmcA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.216.206.159
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9PzuHYFfTiBaC1EuyjOQim8OaPc=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5479
Expires: Sat, 14 Jan 2023 19:25:55 GMT
Date: Sat, 14 Jan 2023 17:54:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5479
Expires: Sat, 14 Jan 2023 19:25:55 GMT
Date: Sat, 14 Jan 2023 17:54:36 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9154
x-amzn-requestid: fbb1140d-7ec2-4f86-8761-5d04601af70e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAkCEN2IAMFuMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7ae6-4baebf1104f9cf2a0ee8a538;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jlRcVyQppaQaPPMKaqadtaEHfdOYXXXbnfrr44l_2E2qaOoh_O0Mog==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 04:21:52 GMT
age: 48764
etag: "f52d98d9a0d1d343a539689ea14acf99e148cf8c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9154
Md5:    b1378f107c1996ade14a8fe7fd728072
Sha1:   f52d98d9a0d1d343a539689ea14acf99e148cf8c
Sha256: 4be994757ec7ec42929590169de199e927889261334e258903a0929a1055047d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9539
x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: epfDqEAZIAMFudQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 05:58:29 GMT
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
age: 42967
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9539
Md5:    a23d61d610c7b55d943fcb2636a01b65
Sha1:   82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
Sha256: 28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8181
x-amzn-requestid: 7ada8fbd-58e6-4433-a532-b4a4ef93ac9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0paH-OIAMFg5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3c-582529522dbb67ee728484f8;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AHjOmYxva5avyA3gt9DvYLas_B2ACimer5QRQOi919HDtSjnKq22lw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:36:45 GMT
age: 73071
etag: "dade37148c9b9a941f93a8535d8ddc5de3952623"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8181
Md5:    d24ea1f095f492934a1f1c63f5d8590c
Sha1:   dade37148c9b9a941f93a8535d8ddc5de3952623
Sha256: 2d8e3f90eb347eb3479a6c5d20a1c2ca6a0560f335a6c6800948db2640e4c878
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7447
x-amzn-requestid: dd3543b7-4e6b-4605-acea-a21d39af02ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qSFjAIAMF7HQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce41-56e2ccc63669032d70cba0ba;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AYaeawnEmwHkyx3h-yliVx-ARcRB3W5kbtFH5tARnL3YMD6e4WYAQw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:01 GMT
age: 72335
etag: "ded76de1dd453e40dbf6eaa8607cf19fac7f71a4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7447
Md5:    2363dbe7bb6a459853d8d19cab50e70b
Sha1:   ded76de1dd453e40dbf6eaa8607cf19fac7f71a4
Sha256: f96da6354cec52143768014c36ba2b298224a58b0bf38bd2aa5f3bfce69d8670
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b0d4bc-9eea-491e-9fed-be68e71088e5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9135
x-amzn-requestid: 2c5e9de0-9244-43ac-b7c4-712cbcf7038c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAnoG6roAMFzgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7afd-7fb640b30bab63bc1979a173;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:14:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RnAGo4OuBl5UjyOlUOJqu2nlFLHTOe0ETxokWtbI4frbpkNVnIBSew==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 01:41:40 GMT
age: 58376
etag: "c65c58476b66cbb6269ba1d8412d270a0a003ae3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9135
Md5:    64ba27a2f0a3bc61bd325f1fb317b755
Sha1:   c65c58476b66cbb6269ba1d8412d270a0a003ae3
Sha256: 5f7f03752f8a7c8c08d92512ae93b193ea37f59354503c3129d33fd2910f87e0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4eac26ee-70ec-4eca-8e10-c7a79b5575b3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4936
x-amzn-requestid: f1808de3-5712-4a65-8394-c1624668cdb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0pZFbIIAMFnvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3b-48c4b0cd36319a2634c0c5f0;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rudCuuUXfxE8aRq8-FFIwHE4tqeSWxYrd8uilWI-8DZSY9A-8EiLQQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:06 GMT
age: 72330
etag: "5e8df480a1650606937ee493660177bf09c49c14"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4936
Md5:    f4f04f55a9d261ddda8128b0bb721446
Sha1:   5e8df480a1650606937ee493660177bf09c49c14
Sha256: 3a357fbbd9f41d384a06e151a0daff50b345520d4816e70cc1b2c694949ce79f