r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14591
Expires: Sat, 28 Jan 2023 10:36:35 GMT
Date: Sat, 28 Jan 2023 06:33:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20814
Expires: Sat, 28 Jan 2023 12:20:18 GMT
Date: Sat, 28 Jan 2023 06:33:24 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 05:43:03 GMT
content-type: application/json
age: 3021
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6655
Expires: Sat, 28 Jan 2023 08:24:19 GMT
Date: Sat, 28 Jan 2023 06:33:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: llYl2FdPHuKOBoCy/9UwCZiAqIn05y3z5eFjhsO7D1bdj7yM+N7EmBQJJ7Vh0MqfdxAVqTGKt70=
x-amz-request-id: 4MFQHP45M525Z0XG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 06:20:52 GMT
age: 752
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
relogin.media-people.workers.dev/
200 OK 87 kB URL HTTP/1.1 relogin.media-people.workers.dev/
IP
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (53769)
Hash f16f6ad4fc41e6bc2d7f06172b13159b
37dc863b291b610b03eae83326fc6b24a40e6293
049aadb5becb2e2c7e11a4acfe98d03e42487c3a68fe5cb67e48ea3c465989a3
Analyzer Verdict Alert openphish InterActiveCorp
phishtank Other
fortinet Phishing
GET / HTTP/1.1
Host: relogin.media-people.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:33:24 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OyO%2FtKSiqtLiYsLbmPOSiXS8B8XYCh%2FPuZYZcqsItO9b01kVmDa8336a57zhwsIZiwL%2B3A6DGHf0JRlHYOUK3IWLNAzQRbZahD%2BkIN02iSqqf4mlusmA%2F4qDrWs2bCItuD9JqCY78ye6iPoQ15oulFytDA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7907b243fe090b55-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 06:33:24 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 05:49:03 GMT
age: 2661
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18679
Expires: Sat, 28 Jan 2023 11:44:43 GMT
Date: Sat, 28 Jan 2023 06:33:24 GMT
Connection: keep-alive
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/otSDKStub.js
200 OK 5.6 kB URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/otSDKStub.js
IP
File type ASCII text, with very long lines (19050)
Hash 815851e7284d95a83400eb0a51cd163f
7b16987c178c0a3be959eeea0d7507b221e1b71a
e33870541b2c7ca2c354e2a91f646e8360fb5f4bbf03f89a44ffa061cb4a7e37
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/otSDKStub.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "00a0e454920af1eecb1445497be55007a432d84a42c03c2b65de11533a4b413f-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 6
x-timer: S1674887605.854107,VS0,VE0
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5629
X-Firefox-Spdy: h2
a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/redesign_fonts.css
200 OK 371 B URL HTTP/2 a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/redesign_fonts.css
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 4dece83989519fb606fbb3771338feb8
0849c392b4c5ad29a021fa3040e7f500ea1b52fc
550ceec1ef88e511c0c960115e948732bbee2b5c3e80caf26bc89acee2b8c18a
GET /chm6ly9ydw5csumxjubdh4em1xzwg/redesign_fonts.css HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "486089a72b0a760ef75dc6f4b735cbb6fbb2ab5e5f19cd90dd192920719cebf9-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.854346,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 371
X-Firefox-Spdy: h2
a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/font-1.2.css
200 OK 248 B URL HTTP/2 a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/font-1.2.css
IP
File type ASCII text, with very long lines (313), with CRLF line terminators
Hash 03288d748e86129049d920e80f9315a1
4c452afd4d0e0ef2f9f2a87d08944d75abd04574
fba6155f5f0794bdfce466984aa75f8ce7b4e5277e993e57c365e59d278a6c7e
GET /chm6ly9ydw5csumxjubdh4em1xzwg/font-1.2.css HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "06668e7736fb39ec3ce3ba74042524dfbe7cc6d3add97c03f2a4a5985340f009-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.854252,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 248
X-Firefox-Spdy: h2
a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/base_external.css
200 OK 4.8 kB URL HTTP/2 a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/base_external.css
IP
File type ASCII text, with very long lines (30269)
Hash 6838bad696e1a1638f22c9f51fd62729
d0884a578a41c76f0d04aa4bcc314921cbc82b55
d5767a7337819bed4d48e43e99bf92ff5014ffc97d0363aec8bcb4e2f00f30a1
GET /chm6ly9ydw5csumxjubdh4em1xzwg/base_external.css HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "173ef1b4813064ded48afa2aa2cbbea024eed9c4d393a40578c035b90362b524-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.855079,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4817
X-Firefox-Spdy: h2
a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/theme.css
200 OK 6.5 kB URL HTTP/2 a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/theme.css
IP
File type ASCII text, with very long lines (545), with CRLF line terminators
Hash 97c65b53349689dd7ae3810a82495f1b
b2f454c6e407c958a038959a683112943d58f768
3d45e92277ebb922ba42f15922c32c25b277e0d8211dcb137787faf7eb498048
GET /chm6ly9ydw5csumxjubdh4em1xzwg/theme.css HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/css; charset=utf-8
etag: "df295986b73f5bdbbbb45cc3fa78a43b116bf5d4117d17ff1471a0770de89d6c-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.855263,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6514
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/jquery-3.5.1.min.js
200 OK 28 kB URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/jquery-3.5.1.min.js
IP
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 477b9302bbc35f1705730a242b34f497
8f8dd8d8cc2380efd1f26d826ccd369e9041a4c9
03af89e667b9bff883f3c35a5ffdea515ba35e8907564608da27b3818cfd5c76
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/jquery-3.5.1.min.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "b9cf792daa968d7a06449227ae703eefca8874c6760e918ecb3de59514bd08dd-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.855394,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27960
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/moment.min.js
200 OK 6.0 kB URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/moment.min.js
IP
File type ASCII text, with very long lines (17967), with CRLF line terminators
Hash b6534d5a61b423e3dc1a0ef30a5cd7a0
36caf0c28e8548a079169532bb925d18205d6841
5fae9d54e1bc9d4301720c2e03792a330385c60fe452e15909563e8282ebeab4
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/moment.min.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "5574f2d89349968c81cea5fb015d51650ecc6539088d45b780906e64d9afeeea-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.855628,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5955
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/polyfill.js
200 OK 250 B URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/polyfill.js
IP
File type ASCII text, with very long lines (409)
Hash e473ee7414c91c09bed8bfd2f82eb629
5252238f601f5eba4dc311751d07665bbf9a24d4
828bfbfb98d3e30c58d9118ecde58e84a5ee324e4d6881e5598a234d990bed46
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/polyfill.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "0c26f9577f9cf260eb52c22f77b9dc4986f711e158a3e8963ff45847685ba4b9-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.855749,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 250
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/jquery-migrate-3.3.1.min.js
200 OK 3.6 kB URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/jquery-migrate-3.3.1.min.js
IP
File type ASCII text, with very long lines (10878), with CRLF line terminators
Hash 145701bb4b20490a4d2ffbf8a07b82ef
ae0a713a6be37aa16fe9b85099599823ba76dbde
2fd43a83c86ef2fbe97d16763a6783eccdb6640b8f8c77205ad4eaca4ff90b9e
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/jquery-migrate-3.3.1.min.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "ed5def0860e4697ece4a0419bc95d221d57f444a0a2265a32805080589b296f6-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.855518,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3567
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/consent.js
200 OK 1.5 kB URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/consent.js
IP
File type ASCII text, with very long lines (4417)
Hash 628143e6fdf01a166442428d9be7abe4
d91b40972cab1ad7372536aae97ce6e815fede94
dedaf631f07459e4d236d07fed795b0e05c5bbf25f660b64c769ba3c88286fa5
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/consent.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "414a608bc4ea6bbd7d2193b0017e9709be599b2d9e6ff73c5cd7edbb7ce31ef2-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.861773,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1514
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/loggerv2.js
200 OK 1.3 kB URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/loggerv2.js
IP
File type ASCII text, with CRLF line terminators
Hash c9ebe9538ed13395692c7d425c68399b
0daa905e11f39d6f4dadd9e9b81c0099a707fe08
367385b974cefbabda767c9b387131fc0efbbdc4cd45f0d00890bd2888de3f35
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/loggerv2.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "ad23c9b437a34dce86ceb0804e814e0f7df6b1e4ae9bccd6c6e28c64f65c61c5-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.861801,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1334
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/-login-form.js
404 Not Found 853 B URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/-login-form.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6f80dbe9b507b0e79b513862e182b2e2
46525b3dc58226874e7c4c4d910351e2f7b862b0
05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/-login-form.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.861761,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 853
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/menu.js
200 OK 788 B URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/menu.js
IP
File type ASCII text, with very long lines (2637)
Hash 475630914c704467d6a55f96ae384adc
9cb0d0efdbfa2231c4c69daa5bc95fac4633afc4
214c00f1c603a08d28e52e0a08a85aafab6b233fa1b256b0b4d07f46eeca0c7a
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/menu.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "b68cb152ca715d188f77153bc3c086bb3b6556aff46a00ee81e395fb74282073-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.861825,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 788
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/url-search-params-polyfill.js
200 OK 1.2 kB URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/url-search-params-polyfill.js
IP
File type ASCII text, with very long lines (3029)
Hash 302de11bb692d71cafc7bce110c6da9c
9cd3d503034b9f5fecd9a751a6919ce5d850c59f
82a2144f16e68904ddbd7fe804e903e673a861344b20d85b8f2adecd3a036ad7
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/url-search-params-polyfill.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "5e7c1ff44e0609d909877d1adc66c4ee0234b7e20b0461baed82ed5af44c3076-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.861851,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1234
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/peoplemedia.js
200 OK 17 kB URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/peoplemedia.js
IP
File type ASCII text, with very long lines (31987)
Hash 318497a5919eda9773c98161eb874e44
60611e13879cccde0a4296c392eefd481dd30625
12b516691932b42f96840a5426ffd8c031d165c29330b0677666a267679c69e3
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/peoplemedia.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "90091d71f6330d05d6542ceb368f299f28a902e9426bbf2311395b4301de4b88-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.861840,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17201
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/stacktrace-min-0.3.js
200 OK 1.6 kB URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/stacktrace-min-0.3.js
IP
File type C source, ASCII text, with very long lines (4342), with no line terminators
Hash 5ecd6f92fced795422c2bf598e9056eb
73c4f4417e5db37b046e80f44f6f66e65f6f868d
37a966c5518b954b3c8323f83fa2a17b7e3f431b7d58d54ad787707c0afcb279
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/stacktrace-min-0.3.js HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600
content-encoding: br
content-type: text/javascript; charset=utf-8
etag: "0485880e8e2b423cb5dec18c82b31c6a24512109a2b5d10457483aeddd622111-br"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.861792,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1557
X-Firefox-Spdy: h2
a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:400
404 Not Found 853 B URL HTTP/2 a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:400
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6f80dbe9b507b0e79b513862e182b2e2
46525b3dc58226874e7c4c4d910351e2f7b862b0
05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3
GET /chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:400 HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.940348,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 853
X-Firefox-Spdy: h2
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/js?id=UA-1817027-45
404 Not Found 853 B URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/js?id=UA-1817027-45
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6f80dbe9b507b0e79b513862e182b2e2
46525b3dc58226874e7c4c4d910351e2f7b862b0
05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/js?id=UA-1817027-45 HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.940485,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 853
X-Firefox-Spdy: h2
a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:700italic
404 Not Found 853 B URL HTTP/2 a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:700italic
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6f80dbe9b507b0e79b513862e182b2e2
46525b3dc58226874e7c4c4d910351e2f7b862b0
05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3
GET /chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:700italic HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.940624,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 853
X-Firefox-Spdy: h2
a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:700
404 Not Found 853 B URL HTTP/2 a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:700
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6f80dbe9b507b0e79b513862e182b2e2
46525b3dc58226874e7c4c4d910351e2f7b862b0
05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3
GET /chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:700 HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.940503,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 853
X-Firefox-Spdy: h2
a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:400italic
404 Not Found 853 B URL HTTP/2 a05addef396f14.web.app/chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:400italic
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6f80dbe9b507b0e79b513862e182b2e2
46525b3dc58226874e7c4c4d910351e2f7b862b0
05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3
GET /chm6ly9ydw5csumxjubdh4em1xzwg/css?family=PT+Sans:400italic HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: max-age=3600
content-encoding: gzip
content-type: text/html; charset=utf-8
etag: "05cbc6f94d7a69ce2e29646eab13be2c884e61ba93e3094df5028866876d18b3"
last-modified: Sun, 21 Nov 2021 11:50:44 GMT
strict-transport-security: max-age=31556926; includeSubDomains; preload
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674887605.940655,VS0,VE3
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 853
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4int/CgqZOssWAEQ
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4int/CgqZOssWAEQ
IP
Hash be28118d022354b9b456804fdfecb05d
f0c57766e7b32b773c9297edce807cc2c95cb9ef
c83cc79487ae4ad124faec97db7ffaaab46c41fc999278ecff865f7e0fd3ac43
POST /s/gts1d4int/CgqZOssWAEQ HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 06:33:24 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/otSDKStub.js/consent//.json
301 Moved Permanently 109 B URL HTTP/2 a05addef396f14.web.app/xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/otSDKStub.js/consent//.json
IP
File type HTML document, ASCII text
Hash 7f50f5677a609da03618e9ac7bbacf4e
53d910d66d4f7afa71a7ea71982c2e4727646756
ff1eb0c2e6e824fc0a6be2f2020702236a89f81df2bca763d270139296eb9e6b
GET /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/otSDKStub.js/consent//.json HTTP/1.1
Host: a05addef396f14.web.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://relogin.media-people.workers.dev
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
location: /xj3ytu5azbvazrwznbqmh5jso2cxdiohq1nc9hb2wucg5n/otSDKStub.js/consent/.json
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
accept-ranges: bytes
date: Sat, 28 Jan 2023 06:33:24 GMT
x-served-by: cache-bma1678-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1674887605.940896,VS0,VE42
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 109
X-Firefox-Spdy: h2
relogin.media-people.workers.dev/favicon.ico
200 OK 87 kB URL HTTP/1.1 relogin.media-people.workers.dev/favicon.ico
IP
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (53769)
Hash f16f6ad4fc41e6bc2d7f06172b13159b
37dc863b291b610b03eae83326fc6b24a40e6293
049aadb5becb2e2c7e11a4acfe98d03e42487c3a68fe5cb67e48ea3c465989a3
Analyzer Verdict Alert openphish InterActiveCorp
phishtank Other
GET /favicon.ico HTTP/1.1
Host: relogin.media-people.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:33:25 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SI2%2BgdY8eAIeqmvOeZtOE%2Bs%2BUI1gXKqVpNFMayo6YIBwGcmrOO9UrDyXjyG%2B8JMpoK3w46B5yP3vNIyBcpngqONyY4RWwhBgxMYQankjmHa06VsuRLekfeif6USCwQUbjgU9fVFo2yioGuUUUuXcMiZyuw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7907b24c097d0b55-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: w7glOExOKDJ0crSnpHt63Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7c221FrSZuhe94C24z9uDzsA/zU=
pmi.peoplemedia.com/pmicontent/scripts/lottie_5.7.12.min.js
200 OK 67 kB URL HTTP/1.1 pmi.peoplemedia.com/pmicontent/scripts/lottie_5.7.12.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65097), with CRLF line terminators
Hash 2a76ee4d68b084dcd42120521d5df803
c89e80ecb17c9c9ad89c55a290706b1493ba4451
285a699cd87f633fbea091a56f3dd0faa2b97fb6b28261fb84491dcd40c96927
GET /pmicontent/scripts/lottie_5.7.12.min.js HTTP/1.1
Host: pmi.peoplemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Tue, 06 Dec 2022 16:14:23 GMT
Accept-Ranges: bytes
ETag: "8059afcd8d9d91:0"
X-FRAME-OPTIONS: SAMEORIGIN
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 66695
Date: Sat, 28 Jan 2023 06:33:25 GMT
Connection: keep-alive
relogin.media-people.workers.dev/content/animations/purple/Loader.json
200 OK 87 kB URL HTTP/1.1 relogin.media-people.workers.dev/content/animations/purple/Loader.json
IP
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (53769)
Hash f16f6ad4fc41e6bc2d7f06172b13159b
37dc863b291b610b03eae83326fc6b24a40e6293
049aadb5becb2e2c7e11a4acfe98d03e42487c3a68fe5cb67e48ea3c465989a3
Analyzer Verdict Alert openphish InterActiveCorp
phishtank Other
fortinet Phishing
GET /content/animations/purple/Loader.json HTTP/1.1
Host: relogin.media-people.workers.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://relogin.media-people.workers.dev/
HTTP/1.1 200 OK
Date: Sat, 28 Jan 2023 06:33:25 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PIrhAmlPS8KwxlR%2F1FOhwZwP5d8Azf2gBiuAJ1eiX0ypMSgi5QpXmRFOosg0B0AxxCh8xGnJs%2BC5nCnx2cMcG09o4g94MQzc0O5jWz3JtSu1hvjkL%2BoNKOXGutZmnoak99hnQfNsPJE9DWEysp8lIb333g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7907b24e8ae00b55-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3871
Expires: Sat, 28 Jan 2023 07:37:57 GMT
Date: Sat, 28 Jan 2023 06:33:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3871
Expires: Sat, 28 Jan 2023 07:37:57 GMT
Date: Sat, 28 Jan 2023 06:33:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3871
Expires: Sat, 28 Jan 2023 07:37:57 GMT
Date: Sat, 28 Jan 2023 06:33:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 113924cc-a196-4dbd-91d9-68c213265afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fobF-ZoAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61302-6b24941a642b22cf21e47dc0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2P09wOtKPDHjxxAuzcLFMQJwmGN1zNJcH9LA6IJpeaGiaPVRF4y-TA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 05:20:03 GMT
age: 4403
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea24bcba583bd8bd139559448a343e68
b9d37c2b14f890d41983a59f352e8f7caa9c94bb
e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7585
x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_vkE5roAMF0Hw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1WE1zQwrCGVy8HLT9_BFkAr6rQE_ROyttMOByR32KeT0w2Hd_ylvYQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 22:16:00 GMT
age: 29846
etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cadb8fa-5527-46cd-92dd-6316ac84a7d5.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cadb8fa-5527-46cd-92dd-6316ac84a7d5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57b73886cbbb719eda5f733c018eedfb
b84ed40973f8a0d3c10529e34f9466746cfdaf0c
4ba11c23e0bbd2aed53b04ad0b3d22161af1971ddcfb75ae55734de9a49af207
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cadb8fa-5527-46cd-92dd-6316ac84a7d5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7028
x-amzn-requestid: c1743fed-205a-431b-8648-474facde6d09
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CwFtboAMF9rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-5b94864c707c42fc36fbc63a;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 35sWCIsACAhQvXkJvBn0LGf2m9OTklgDprONw5CDUoXD97TUpJ9j5Q==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:55:35 GMT
age: 31071
etag: "b84ed40973f8a0d3c10529e34f9466746cfdaf0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7df68b7-44d9-4227-aedc-8e03fd23edd9.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7df68b7-44d9-4227-aedc-8e03fd23edd9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01d78e0bafdf4cbe227afc503124bc55
e2d21a694342773ccbace4742c4b047e7ce92e1c
3e9027f35134d811a50144a9b70c6de2dc97cbade941a5364717b403bcaf3eb1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7df68b7-44d9-4227-aedc-8e03fd23edd9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4641
x-amzn-requestid: b2e2ba60-21e7-4304-a354-2b49b8162cf2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_T5FJGoAMFwlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445b2-4b292f801433239340edab33;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: irkZKPRcil7YVMxVJXNkIn18zBSt2JWyxo9ZFMfz6aZer4_lnqG8oA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:38 GMT
age: 31008
etag: "e2d21a694342773ccbace4742c4b047e7ce92e1c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4afa01d2ffe17f8378e4c0b5afd4608
f5c7e2137efa07a207427a6b6fe1df541f85ea25
84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13375
x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CxF6BoAMFyGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yEFlWGi3J14JLA0l2h02VlIqV8opHesKP6GOvfoP5Tp0m7dOYDxIGA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:59:32 GMT
age: 30834
etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 195316042e7f798eeeb7993fecb3a383
4aeca24ad4702f87feaf9674ea0c1ff6d71826a3
b7e0a61060455241fce844d2c91eca500d409804361063ddb61053cbc9c7b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33ce0741-fcf6-4205-8b3a-016953553eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13376
x-amzn-requestid: 64d0092e-1f1a-4183-a4a6-805e0bf37d32
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-DvHIyoAMF6fA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b1-6387770232ddca74531bce91;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jqb6G21QeTDiI0HWT9Fd87D-HkAOiesyfN9vr7vMxrOUADBxV-_Fug==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:55:42 GMT
age: 31064
etag: "4aeca24ad4702f87feaf9674ea0c1ff6d71826a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
104.21.71.190
23.33.119.27
34.160.144.191
188.114.96.1