r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16803ffa29e10ee999c43eb4e4acfe92
a5ede865a388fa440f20994b43c417d403e9a493
08de8f6abb622e84d2cb6e88dee8fc7c408147ac43da9c24d4cde510ed36b53a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08DE8F6ABB622E84D2CB6E88DEE8FC7C408147AC43DA9C24D4CDE510ED36B53A"
Last-Modified: Mon, 02 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19132
Expires: Wed, 04 Jan 2023 19:48:53 GMT
Date: Wed, 04 Jan 2023 14:30:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ce8af3d72e7e9af609039abee59c8b87
8e1b16591fbc632df35f15e23da55ee86af31bc3
52edddbda4a3a3b778f61a491b21e6ea439e9d8024189e636b1f37b2dd7226fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52EDDDBDA4A3A3B778F61A491B21E6EA439E9D8024189E636B1F37B2DD7226FC"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7093
Expires: Wed, 04 Jan 2023 16:28:14 GMT
Date: Wed, 04 Jan 2023 14:30:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 04 Jan 2023 13:36:23 GMT
content-type: application/json
age: 3218
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash da484f5e9c6805745e063b236fb81473
ae454bf4a7ae0e96935afc81ee0f89c049097b15
068d0da23acbe7f6b600c4e7dbe9c81d3ad78c8afd122255bbf3550e8a290686
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "068D0DA23ACBE7F6B600C4E7DBE9C81D3AD78C8AFD122255BBF3550E8A290686"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15590
Expires: Wed, 04 Jan 2023 18:49:51 GMT
Date: Wed, 04 Jan 2023 14:30:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: HhyTfLib6+7zdmMCM5Pr7gQ4/t+hflYc4YR/YBSItqhnfmBxD+6loqEczG2PfVjj/8TJAKfkyg0birTXno4jBQ==
x-amz-request-id: BVVVF8WATCVNN5YY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 04 Jan 2023 14:01:20 GMT
age: 1721
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 04 Jan 2023 14:30:01 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fb.zotech.biz/lander/fr-ambawithform/
200 OK 12 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (710)
Hash 1652a19c82f9990df8316d897885b881
14cc0db641296b3289a784f27ef075dc703d6690
530835d89d00c30d9bcb644df9aae16b9798a7d28e0228e40773bf0aa8378d26
Analyzer Verdict Alert fortinet Phishing
GET /lander/fr-ambawithform/ HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TKVarojOLZgpg5juEkeD%2BqTlE92nBYY9NqagFcPs%2F9pfF3Rezo6aWSakRSaSdk4jVyyIghKR5ixJQ3xuVlzjzejGl34IUctL6qIkPIzGUcwtK6OLD8FBl1Yyxq12TYb0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7844ab6f9e83b4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash d900ca08873ee57d40616d39a44cc0aa
7ab3ac8b1504b7b914a6e94c979b8390bb492f6a
1eea479cc0abe04a0846f41031207f9511f12ffef017a6109d4efb6f5523465b
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fb.zotech.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 14:30:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3082870
expires: Mon, 25 Dec 2023 14:30:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1xzFRU%2F9kux7u02yVdLoZD%2B4ncUjJpw%2FuWw2KOOlNV%2BCPv5IqNPJ3fnn1HSAyunPjC9xLUZzyd8VUvyMqrQ5p317aubQpB5z7sqvCr4Ma9U0NH1bAr3gySfMUzfygJJzD1pXOreZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7844ab731eb10af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 04 Jan 2023 14:08:11 GMT
age: 1310
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
fb.zotech.biz/lander/fr-ambawithform/ouibounce.css
200 OK 862 B URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/ouibounce.css
IP
File type exported SGML document, ASCII text
Hash 31fedbf86397ff4beb9983852011edf0
5383ce0193b9d160725489f45e0c27b513d6b5b4
274c30fafd9acf8fe5088c97e23be5417e77b208e5fe66b0ddac3b3f59652cc5
GET /lander/fr-ambawithform/ouibounce.css HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:01 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: W/"6394c04c-f92"
Expires: Sat, 14 Jan 2023 14:30:01 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PQE9CD4y5YnsxQ0xX8Ug6ADiG4q8HjZtNibOLi1Wka9reLAF5nSOyq3ePak1jdQ6Ue%2FhTaRcNkT4KI434pIV7rskuRZpFudxQg0VBVa1jVS4oRLm8PEXM5okdhdkNruy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab72dab5b4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/style1.css
200 OK 2.8 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/style1.css
IP
Hash 7d5f1dc0edc121dac7972d4dc3777d4a
a7f1bd3b7bf2e57e23e25615c645c49dd5fb50e9
d31e87302895f86b7cdf4b6afa82054d72364f01e689efde711b40f1dc66ffe9
GET /lander/fr-ambawithform/style1.css HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:01 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: W/"6394c04c-36ae"
Expires: Sat, 14 Jan 2023 14:30:01 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GWULv8CseCz%2BuuH9Isv%2FOe8RKErKzUHOZZMl4SWEu60JXFvGl6K2%2F5hVzq%2FOK7edQ7NQMw5Zyhsy3er4%2B2JIgRPjG1hncy9nNyFPTFT%2BgdxeWoLOXxE8NknCG2P0r62O"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab72e8c61bfe-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/index.css
200 OK 4.2 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/index.css
IP
Hash 5999067423bbf6323b68d59fd8b53b87
e6943f895ed1eb56aec06d699e4ab99f7ace42bf
c41402252a3d650a7dd6cdc844c8f1d5db374839475601fa72357476eff18584
GET /lander/fr-ambawithform/index.css HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:01 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: W/"6394c04c-4b77"
Expires: Sat, 14 Jan 2023 14:30:01 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YYqd3LHh3LA3XYZXNb81Ta7sYMVK7zvk9Zb56NXdLejcsE5xd1cZ8926KWeIA5zkx7xvZrHEEvt5bHkrC9mZpItKO46ep5dbscfEGC9Hcb1t4e7pMx9NkYE%2BvRvViMNA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab72ec790b59-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/font-awesome.css
200 OK 4.1 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/font-awesome.css
IP
File type troff or preprocessor input, ASCII text
Hash 390ad65fb03cf92e36758b41cdf69921
2d2a7c0fcdea0741cc90bf0a437c875c6507522a
4024d4471ca013f41fa43f160958ab9f2f1592cb83e2d939d5739ff881de5c3c
GET /lander/fr-ambawithform/font-awesome.css HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:01 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: W/"6394c04c-5692"
Expires: Sat, 14 Jan 2023 14:30:01 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8oGt1G103fA6SPFoy8wRO0GTHfnRKJxUfAXXDm5asIGH%2FJ1krs%2B9dWGzdlWj4QJsuf3B12BIE7qtpo9vmfhKIVEzyRPGoriOE0C0mQnPg%2F8rwVoUP21dq8cUBwenXUcH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab72ee78b4eb-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/Dynaform/Dynaform.css
200 OK 425 B URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/Dynaform/Dynaform.css
IP
Hash 76379aa4bc30c71afac359f42e1c7472
ccbd0cc94ab5d7df579060ebb2e94003df204b94
699faefc9d462fa2c35ae0f17dbf79323cfd5190a3ce98d8f14211797af86a87
GET /lander/fr-ambawithform/Dynaform/Dynaform.css HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:01 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: W/"6394c04c-31f"
Expires: Sat, 14 Jan 2023 14:30:01 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mgq4LodjAZrdyiJl0R9jjYxh2RXIPFvF9fvne4NTVeHa%2BoQAIrPBgUpG1QhD1aA8RDZqGjvBUR1qFmwOKpp7UDtDBTrLlEv%2FbqwLw%2FGmpEKtrKrpMEyj0RrqpF6J6DlZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab730d530b39-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash fe74c226e54f2f382d278b594df930ae
4e4ebc661443f56b74d7c924ddae50bcb107f0af
511f11fe968867447f6d7e5862d8003e3a5fc18bdb62496ea09d140e9a11f53b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4576
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 14:30:02 GMT
Last-Modified: Wed, 04 Jan 2023 13:13:46 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
fb.zotech.biz/lander/fr-ambawithform/bootstrap.css
200 OK 22 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/bootstrap.css
IP
File type ASCII text, with very long lines (580)
Hash 173779c6121db103a356b85e958f64a4
b573445fa5b9e0793ee4676056d397935faeed0d
6135a7f21a87283b32603611ea625691d20225918458b31997d6a2b460cbe962
GET /lander/fr-ambawithform/bootstrap.css HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:02 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: W/"6394c04c-24e87"
Expires: Sat, 14 Jan 2023 14:30:01 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FmvYnEZMRDENivZG23XOVJsThS26FpVZqK25LNYfPrRsUjWq8XNnH5Z%2FumJoyL6pZ92cOLIOGBtTXWgtZjMJMDpt7MtECedmG%2B5pENTxLSL6wTxLSjl8Cut1u5WlbISS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab72d9fbb503-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/Dynaform/Dynaform.php
200 OK 14 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/Dynaform/Dynaform.php
IP
File type Unicode text, UTF-8 text, with very long lines (22512), with CRLF, LF line terminators
Hash 7b78333482613f817dfa5ebaeadf7ada
5c56166575d4803bb858b54f52960edde8be7d49
f4de3d6bb13d9ab2a571d50f43096eb38042c1b1419bc9ac9093398beeea6ddf
Analyzer Verdict Alert fortinet Phishing
GET /lander/fr-ambawithform/Dynaform/Dynaform.php HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:02 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yj5VU%2FB9qVaVLRK63K3D9RJfxixk8yzhzU%2Bg4WEIfycZkeTyfsY7XQo6mGyQ2DLbA2%2BL44RAuhSJheQSP%2B1U49bPIMTISICJ%2BbFoPb6fb4byaHr1eZDewI0doqU2ZmGZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7844ab755e23b4e8-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/Dynaform/intl-tel/css/intlTelInput.css
200 OK 3.7 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/Dynaform/intl-tel/css/intlTelInput.css
IP
File type ASCII text, with CRLF line terminators
Hash 3f06c693c4f4ef107600314162edaa77
fae971c9128de82e8a1d25ad3ce492a5804a29de
b77b4a55c91bb45ecc4dcbbdb17d122558985552a0c5b86d44b181d3b86cae99
GET /lander/fr-ambawithform/Dynaform/intl-tel/css/intlTelInput.css HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/Dynaform/Dynaform.css
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:02 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: W/"6394c04c-718a"
Expires: Sat, 14 Jan 2023 14:30:02 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vv0UylB2wqI6REAsV54lDjmBPs77DQaO7gbAvhxPzcdWBaKHSYaaP0VzLdymgFwSLHZKOW%2BZVnrmVlw958DkZlXBegjojErs%2BpzEoTrfIZeRp5GD%2FkNfDgqcv8B8vONz"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab75afc90b59-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RNiRU4B1sRhkaEW5eLmyfQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MbCQ8RF0Z5pAKoEaHIplLq0GiY8=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 240664db1d336b8747db478202c0bc46
731fa8829ca6f5e1d8e76cdf9b0a1944176a848b
e5e10ede23af4db654fd75f94c2dc416c819cdeaa7e1f453a22f3541591f7377
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E5E10EDE23AF4DB654FD75F94C2DC416C819CDEAA7E1F453A22F3541591F7377"
Last-Modified: Tue, 03 Jan 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=938
Expires: Wed, 04 Jan 2023 14:45:40 GMT
Date: Wed, 04 Jan 2023 14:30:02 GMT
Connection: keep-alive
wiki-tech.website/res/ip-api.php
200 OK 127 B URL HTTP/1.1 wiki-tech.website/res/ip-api.php
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 32c81163ffad5b28654399139c16125e
06d34b613080f49b4b8220cb461baae3a7b61b85
e98799c7f1ba79b327fca45e74913630e4d31a502ef7df5ca0151ddea408e21c
GET /res/ip-api.php HTTP/1.1
Host: wiki-tech.website
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://fb.zotech.biz
Connection: keep-alive
Referer: http://fb.zotech.biz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:02 GMT
Server: Apache/2.4.51 (Unix) OpenSSL/1.0.2k-fips
X-Powered-By: PHP/7.4.27
Access-Control-Allow-Origin: *
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 127
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
fb.zotech.biz/lander/fr-ambawithform/transaction_pic.jpg
200 OK 28 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/transaction_pic.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 492x500, components 3\012- data
Hash 308dcb049f06946096c1d150a2f6674d
9f3b0de3147ed1f8ff5c1c26e0928328615d52df
59cd8ed24097c518feed569e4d25c81b4d513c60fabb9bb67ad83240d7e99049
GET /lander/fr-ambawithform/transaction_pic.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:02 GMT
Content-Type: image/jpeg
Content-Length: 27498
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-6b6a"
Expires: Sat, 14 Jan 2023 14:30:02 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tobx1BxhqoHiFS9533I79TnS7A73MrcGCj3g9MKBGEktsxGTBb9BGrGv9w7ZjTRznViA7IAv%2Bdq3nhc0cDg0LPTEnJsAtVzjEaKm1NC3tAdkFprQmO%2FYOJaS4YO5xGdt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab78389fb503-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/step3_de.jpg
200 OK 24 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/step3_de.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 660x358, components 3\012- data
Hash d2fc7cf4d84cfff8f964e9b8ba63220c
db45a226b021f649966cab149c6c024b8a0d1f4f
189416cd8539a1e307c1a1b96715ca3401a205683feedb732033e63e86704020
GET /lander/fr-ambawithform/step3_de.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:02 GMT
Content-Type: image/jpeg
Content-Length: 23679
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-5c7f"
Expires: Sat, 14 Jan 2023 14:30:02 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S6oFujYj6iWVcLxhAahscEoZ54fe4VZdPuPbNIjGRXEQ%2B0w3KSYvYYXQ8F6jRfc0kRtnxesCC4boOM5yKDrgUukfxyAqAqDfkTV9m7MRLqPxiumQ6s6OUrVZ5ZQNxx8F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7839ddb4e8-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/side1.png
200 OK 35 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/side1.png
IP
File type PNG image data, 358 x 173, 8-bit colormap, non-interlaced\012- data
Hash 4029992f562b6f6ea0c36c62b9281530
8d0add25a5a222242220e44d7ef7159cdd6c1266
5adbed9d75481c04641b70a78519079b1aa08150757ee14f7c84327356e73b1f
GET /lander/fr-ambawithform/side1.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:02 GMT
Content-Type: image/png
Content-Length: 34888
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-8848"
Expires: Sat, 14 Jan 2023 14:30:02 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SHeb9v%2F24RiXv5uhUbZyOEmkldW6vZ2UTp48GsY30XUwZvLqlr9abNnY5QMmg9hsuQ1QRQWEw7ZOSBzmYKuDVP0CDNA2jkFsbEajKAobzZMFgZSsVpIzUkNXOZG%2FYBjC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab783a470b59-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/step2_de.jpg
200 OK 59 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/step2_de.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 660x358, components 3\012- data
Hash 69890ff5dd060c15a776f750bf4c6ac8
272f8d794c36a1c83a9c33e9035409399850b6cc
d0c6f6f53e2d522cb7a534f64482ab7d7d20a1ea936f295d0c81d093a9214270
GET /lander/fr-ambawithform/step2_de.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/jpeg
Content-Length: 59395
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-e803"
Expires: Sat, 14 Jan 2023 14:30:02 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aECKT0LD3lVirsJvEe%2BCOptH24RJxrscwEk0QveVgxxdM5dM%2FYrroCuKngWoppT9krteXlyCTPhj%2B0DcPdIrE%2BQmJgnIYD5X6J1gnr3CZxmlFttN6vLDGt8dKnT9ihVC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab783b3a0b39-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/side4.png
200 OK 26 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/side4.png
IP
File type PNG image data, 358 x 173, 8-bit colormap, non-interlaced\012- data
Hash 25b3cbdbacb2a877ba466e2a52e4e585
391d1afdcff45f870e2a94e93f830fd6e037eb71
1b7e0a2736aeb5f656f8b9cc2fda4b3eb2ea212d2f344dae9b7792136c9c5562
GET /lander/fr-ambawithform/side4.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/png
Content-Length: 25718
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-6476"
Expires: Sat, 14 Jan 2023 14:30:02 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L5HyygMizJ5hbJc6GiMNvaMPEef7Np%2FOuqIlrx28fOFyOn2W7%2BoZA71IhDBXYx92gYhnGdjOE%2FIuTXVzUqV0XCIMMsWz2VEWHT%2FMP%2FiWtPFfsv0c7io8Wi6%2FPe8fuhJA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7bed540b59-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/tisdale.jpg
200 OK 277 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/tisdale.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1200x627, components 3\012- data
Size 277 kB (277048 bytes)
Hash 387053d76b041c20b564183c7a10826b
458f1324dcac1a123f13f784c1ee5781133d0dd0
e8534f5335522037c03fe544db314033fe5f05d847c5356b8ebe7f3f79beb6f5
GET /lander/fr-ambawithform/tisdale.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/jpeg
Content-Length: 277048
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-43a38"
Expires: Sat, 14 Jan 2023 14:30:02 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e3lk1rnjfGE3MA6VTXmCwNOl%2FqY0rW0ZdOBlIiirpiIZfuWC316LMkgU4PJLLpnehs%2BWZ2B9S93i9FV%2Fa445o6ty7%2BcQcCNwpwquRpvG2YYLxPizGseUFDC0li3%2B%2B817"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab783d5bb4eb-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/cheque_be.jpg
200 OK 235 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/cheque_be.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x628, components 3\012- data
Size 235 kB (234610 bytes)
Hash d252f91a7d4d3bef6cb9edce1b0b7189
5e905a380befaec11e2ce59da67f46c6a32b1dd8
216e7dff1d983285961302d19ad3bd470b54cb06f88b81c0a44370d7350223ed
GET /lander/fr-ambawithform/cheque_be.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/jpeg
Content-Length: 234610
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-39472"
Expires: Sat, 14 Jan 2023 14:30:02 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k%2Fmnxvrk99cF3MmS1sZ8A%2B3KbBIT3WS2B4J7%2FNN3nfUXgo75jEUDLlwlC1kpy1XzuOMoVMdGoXYoDzBpuVB9Ig%2BxQRqC0e6rA2fGtLr0Sex%2B3b8Qz%2FeaUg1hkDfNNxWe"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab783e641bfe-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/side3.png
200 OK 39 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/side3.png
IP
File type PNG image data, 358 x 173, 8-bit colormap, non-interlaced\012- data
Hash 9c44768f96799099d709dab99c1946c8
297f7ae3f4a86edf29532770da959270f7703304
e5f99941f717ee56ec795c58e4c73d8f72d15494deb92d94894e2f0ea0f47b7e
GET /lander/fr-ambawithform/side3.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/png
Content-Length: 38902
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-97f6"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TGZyE3LLjPtXA9mnwsEkZ%2F83SmEJC%2BSli%2FSqGX3r7bl6qx6%2BdXxOSr6DB5N%2BJe7qlkOzbUNQLjUQ3x%2BPN%2BKx56wOc%2FyeQC6KtmbBBbaVSGyneSdZ37lEY2YxTluoCZ22"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7bde0bb4e8-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/side2.png
200 OK 35 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/side2.png
IP
File type PNG image data, 358 x 173, 8-bit colormap, non-interlaced\012- data
Hash 49dd30b2490501bfc3e1135f63c75af1
ca0f3574753e3fe15ab69584fa7382dee1ad2ec9
3dde975bef15653e64134deee5e1dd5220720f5ecb8fc26adc38f63b6cb57226
GET /lander/fr-ambawithform/side2.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/png
Content-Length: 35141
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-8945"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bpx9FxdZbyFg3cVaWidUcodYwRTv0J8JvSdLR1lqa1an6iAFrMW8SxvQ77xrhdg2mCiG9Vw6LVgyO9zZ0E5UEh2C0ztjY192C8OZZmWh9GaQVRXU36Tm4PGHfNlPVBN0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7bcd33b503-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/side5.png
200 OK 38 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/side5.png
IP
File type PNG image data, 358 x 173, 8-bit colormap, non-interlaced\012- data
Hash e34260258e02031fd24fd5f00e3a5750
45eff29c6e8b14a94a359e0a1fd3f19fdc83d287
494a3efdafd5407a5a88d922f5a4a72d71ac2f3ad8f3f9fe607f8cf89314dfa1
GET /lander/fr-ambawithform/side5.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/png
Content-Length: 37859
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-93e3"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=35LHjZ996DSPJeVn8Jdd%2Fmlzdl8QEn6p%2BpxNZ%2Br5TEPvJI3NREm0zfdoiulUYhAg%2BGBSUs6JF1u6cWqwspASuQZpTKkZg1jfNznhzGlv0LCZ36GeOeLOyMg04MP0C6Fi"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7d28eb0b39-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7982
Expires: Wed, 04 Jan 2023 16:43:05 GMT
Date: Wed, 04 Jan 2023 14:30:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7982
Expires: Wed, 04 Jan 2023 16:43:05 GMT
Date: Wed, 04 Jan 2023 14:30:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7982
Expires: Wed, 04 Jan 2023 16:43:05 GMT
Date: Wed, 04 Jan 2023 14:30:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7982
Expires: Wed, 04 Jan 2023 16:43:05 GMT
Date: Wed, 04 Jan 2023 14:30:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2058609f-3e52-4f28-a842-5212086abc4a.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2058609f-3e52-4f28-a842-5212086abc4a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1af17ee9c009bc1a3502b923ab29604
3244485383a814e2b08cb0092d36add06ddb5285
9a149cf74bee29a25bc76171ed2130d44ca31c5b4c29d15ad69211b39eba0d41
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2058609f-3e52-4f28-a842-5212086abc4a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5471
x-amzn-requestid: 0295eb37-7f63-4387-b63f-f44987ae20c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eIlMwErzIAMFZUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b34f1e-4346ed577fdd092f5efec8f3;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 21:39:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uZ83gsGXW1_SYeTf6Lk0tMJ7nq_gF8VPKyLfh0h-cAnuX4JFsdVBPg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:50:38 GMT
age: 59965
etag: "3244485383a814e2b08cb0092d36add06ddb5285"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V8_4JXT2EDqqzVxBjZK7SUVVS9Pez_EbpGP8BCMX0FrS2x2srUr2Ug==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 02:06:31 GMT
age: 44612
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 359f30e64bec00d0a01acd69a08b684d
ac965c8642c4d1e47713965060fa2fc8f19088b1
fff1b001462468cc953092a2312650c03f307e95c40e2c6bb7356e2a8b9b0283
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11877
x-amzn-requestid: 884b9243-6a8a-4434-9b2a-e5eff84d4e99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL33bFnDoAMFpoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b4a02f-3f7043ae29d21e010ddc1ff9;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:37:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WcUVY1LHWCEWWyJZEhS8M5tlXhx5WDnIr9RmxLMvqIilnREfwORJew==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 22:12:53 GMT
age: 58630
etag: "ac965c8642c4d1e47713965060fa2fc8f19088b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4e44f0c-2c29-4a01-ad6d-3e889e24f9b5.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4e44f0c-2c29-4a01-ad6d-3e889e24f9b5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f54c7cf6ce75213366d566d25502586
9c8148894f2cea06f77a45bc7d04935dfa4cfd54
6528e276f154d12d348d7e0e3306ec29918a5500b5005ebb2951cba64d215c72
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4e44f0c-2c29-4a01-ad6d-3e889e24f9b5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10055
x-amzn-requestid: 3db467d2-5896-48a3-a392-0d32fafffb66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d_ft5HsEoAMFXoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afacbf-4cf1a8e93485b52d4bbc774a;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 03:30:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FpAW7oAg8iBVPFKrh-B929kEviZvipKlPvMBt5EEfGK-SRT0Q7tkRg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 12:28:31 GMT
age: 7292
etag: "9c8148894f2cea06f77a45bc7d04935dfa4cfd54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8476606b-7383-49cb-8c93-76705bedbbb8.webp
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8476606b-7383-49cb-8c93-76705bedbbb8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0f7ef195ef59caf6b47f13ceae04987f
dbff30aac035b502e27a3a538dbdfd475d3fc1d4
b31c198d6b76827201a870da6f9fe9b28c2cffe0d3f7f3d8e0530223ea8fc9d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8476606b-7383-49cb-8c93-76705bedbbb8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8148
x-amzn-requestid: 7712cf7e-ea08-47da-876a-ba70c723b68b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL33cHXsIAMFhhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b4a02f-3c965abb517a33ce31cbdf4c;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:37:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oJ4e7NUOg62KQDiD04fLCiSoQgBO_AQGw6mrIYbqcgdrylEMwoDQUA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:50:17 GMT
age: 59986
etag: "dbff30aac035b502e27a3a538dbdfd475d3fc1d4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af78916e285d0f6c5c5a5ff33894e108
96df0d8c10c666811cfeb98187ca93e65480c2ff
7bcb20dc641e46d033dee76b3d92b701b31aecfbf88241a5a95dfdc1c5e95885
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5018
x-amzn-requestid: 7a68cfb1-dedd-4f08-8d99-4678c1087422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3HtFHkoAMFwYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49efd-7880e5f93c99cc794f9a03bb;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:32:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MvV5dXthUr0Qo499_5eG6Z_yW0gmflen3kRBrse7ngQjUgOVA0OMvg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:50:49 GMT
age: 59954
etag: "96df0d8c10c666811cfeb98187ca93e65480c2ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fb.zotech.biz/lander/fr-ambawithform/checkmark.png
200 OK 341 B URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/checkmark.png
IP
File type PNG image data, 30 x 29, 8-bit colormap, non-interlaced\012- data
Hash 429b3b38f974e48fecd8a07398fdaaff
0dfc5e7e9defb70aa9c12fa33b8ea448e5caefee
e9d04e4fbd1f7c6a052cccf0588ed2c6ea41af104c59c70baaa10d8e0f5715a8
GET /lander/fr-ambawithform/checkmark.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/png
Content-Length: 341
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-155"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lcYsmLv6y9q5J1%2Bjyxl7k5sjMEQuenXr2CrfEVqGjCyziCMH5spNR2V2wFP2d9yTEcEUVbB6ag5xBPFSavayRn%2Fe7Y0d%2FHtaQj4FxRhv6sxsYxCFhoZbpuGKUoXdXNMu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7f6e0e1bfe-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/side6.png
200 OK 35 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/side6.png
IP
File type PNG image data, 358 x 173, 8-bit colormap, non-interlaced\012- data
Hash b141754a7af79e85b95c129efa623e13
20232bc0ceedccbc432c3ab3177e5b24fccceb6c
54e408290bafacaad2eaf0b17ec04ecf29ae7333a69784730a1af7d749b3c4a9
GET /lander/fr-ambawithform/side6.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/png
Content-Length: 34979
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-88a3"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z7wv3ORcVgDXvFPgXDbbzHCgNT4Bp%2FvbmZl14juNgww9w%2BjqouF9y7cNAboYxhRmanwRtPl0tLTth70jiZguBvWfkxnY%2Bin4T9EmoetN2%2BIPsPqLKQHMLGRfTb9OrD%2FX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7d2e690b59-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/kylian1.jpg
200 OK 40 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/kylian1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x450, components 3\012- data
Hash 41cc3d4a39264a8a9871facc57aa5f8a
5b249de098b20f84b9ed28a141ac4edbb1c476b6
508d9cbf1680bc3e1f398d0be60bf8a74a40be6365ceeaaabe5bf3e0998ee36e
GET /lander/fr-ambawithform/kylian1.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/jpeg
Content-Length: 40250
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-9d3a"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hqeKKiQb319Smp7W5dVz5ZTnUQxLODe0HRavSIG0bsjof05JIvE1IAUoOP4iGdUJKeY5%2FJIAf0jp6NZiKP1wlqqkm6Fm3UkCk%2BnqFNLnfJD8OaylfDg6%2By4aA%2Flck9eI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab80af601bfe-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/s3.jpg
200 OK 91 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/s3.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2018 (Windows), datetime=2018:07:27 16:42:24], progressive, precision 8, 749x329, components 3\012- data
Hash b6ee6a0214bc74a184e9a25ddb59134b
97c9ef5b41778154fd01baf2d6999964d06ef42b
22d0cf39229e9768c529651a007a807990761a96524028eb24227c69350bc37c
GET /lander/fr-ambawithform/s3.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/jpeg
Content-Length: 91417
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-16519"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NpQA2nCILBchB3FbG94NNKb6JIQ1zL1D31cGDNc4K6N1kSpfPan5qOh3xY5vUHEOW%2F9LeAAS%2BIbVQY7YPYFD2cH2Q5vgJwG5rP6GqxbR2sgqflyP53%2BkkyxqnweiT67t"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7f9bea0b39-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/side7.png
200 OK 31 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/side7.png
IP
File type PNG image data, 358 x 173, 8-bit colormap, non-interlaced\012- data
Hash 042b661bcfa7930bbf6470659f506e19
e607ca7c52aa904d24d6a66728b68be0a7dbc35e
b8ff47c69f9495e6ea65471b668c7d0145a9b2122aa780087cd59ca4ef8644b5
GET /lander/fr-ambawithform/side7.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:03 GMT
Content-Type: image/png
Content-Length: 31140
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-79a4"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t18xdXN6IWMJ00CQqEpik5JsVMom2I1CSFJZkBUbdnKuGAwy8oJgJawPvaBHVdE8ckUlJoOcNGH0EPkuS2dOgEPQRCKG4hm4igTVLmQS5kxXgWTkHuBg6XiccKJukfaY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7f4ebab4eb-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/s1.jpg
200 OK 62 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/s1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 900x357, components 3\012- data
Hash 9bc35c3be2884da3685f976edb0e8c4d
0a1f05a52e6a7024b59ba6ae2429642f942f1155
735b4b98829a1b4b120b6d457def62d92cbb1325394a54ff528172d4b4912e5a
GET /lander/fr-ambawithform/s1.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:04 GMT
Content-Type: image/jpeg
Content-Length: 62471
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-f407"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=os4B43qp5XLMz%2F9jdCIYDZq3Sdk5xtnwtlE1ci0t08Cp2ZsfwBE%2BO5%2BlBpU%2BpaUfIjruibqj8sqF1xpzIGL7zOJemZqJ5waQsA6zTxMqXozlJZ6y2dtuIqnTgGm1h7yv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7f6ac4b4e8-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/logo2_thqhfq.jpg
200 OK 7.7 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/logo2_thqhfq.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 246x119, components 3\012- data
Hash 0144d1874992f261789924507103ca78
ac253be4883bfbb5b12848e8cfd1065a76e6fe74
d1ac02b7bbd942eee32d551b5b6129ca2c62298c57b504b0252f123f51148ca3
GET /lander/fr-ambawithform/logo2_thqhfq.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:04 GMT
Content-Type: image/jpeg
Content-Length: 7714
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-1e22"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uxJeWb21kW8D5nav5vdGXJQCgXqMYr9UjU%2BY6fFR1IoDes734Cxiq1CpFdgxIUHDfuU71T2QEsza6QID16FVdUxHgn7qeZ3t7MOZ5sHX2YkalvKAFDryhqZ8%2BVKSgoI%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab81e8a01bfe-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/s2.jpg
200 OK 152 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/s2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 749x405, components 3\012- data
Size 152 kB (151651 bytes)
Hash 9a6dc3ce1c2b8279b37842b87f0bd039
d5159e427d13847883044cf1f046a9cf2ab06ee7
a02c86d015fe07811b3c247c1fc8934a1ab62ad74817084ce9dc5ba340907eca
GET /lander/fr-ambawithform/s2.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:04 GMT
Content-Type: image/jpeg
Content-Length: 151651
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-25063"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RN9m3IqrHmq%2FrNt9QXWU%2FUAFZUY960AecQQhpadIuOYnPyzMG2xvhTsBySfxdTacEEX57CsEcDIdsT6kwqjtneSOBU9w7I3HZWuzS7dF1SSB7XDx0yoIV0flTsbfvPgu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab7f7972b503-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/copy%20logo.png
200 OK 47 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/copy%20logo.png
IP
File type PNG image data, 766 x 134, 8-bit/color RGB, non-interlaced\012- data
Hash 6154a506c22b081a0fdab21b7e1f1b85
60425a6aafd39d07051f44f9c69034f4c4f632e8
ba07228e675fef9d2606297a0970adebb4bb4c681c255d3d72199f2a9c63997e
GET /lander/fr-ambawithform/copy%20logo.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:04 GMT
Content-Type: image/png
Content-Length: 46865
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-b711"
Expires: Sat, 14 Jan 2023 14:30:03 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wKlWBlwRVWWIjz75%2BJSJkd%2FGwtpFGpcBvqBgt2JhapsCncAy73AyVucaksYgmr%2BkgvSTO9kpAcpR9LcoU7RpMFA818PKboaOXzXsIgWsRXLqAcdedKFE8w9N5b3TSQyf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab80b9fd0b59-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/kylian3.jpg
200 OK 19 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/kylian3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x270, components 3\012- data
Hash e10333eb95557144d6f0f0476e20b682
8c67330932eb7ee67262133530ecc8d04da86457
44476074363b1c368b8a6c2189efe16ae2bc3aecf27baf5d1d4835a483479875
GET /lander/fr-ambawithform/kylian3.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:04 GMT
Content-Type: image/jpeg
Content-Length: 18668
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-48ec"
Expires: Sat, 14 Jan 2023 14:30:04 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YuqzhC8Jg5Slg7%2B2P7ucdDmPXrA9EtmP7OzLS7fdoV3pD6ykioHyuGAFDoeDRvsOZI8ediiyXM%2FYxa34dfPgyQj0mqR1%2FLfUIpik3e7PCIgIIe5PGI2VIAyTcv4Df8m8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab8308a0b4e8-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/Dynaform/intl-tel/img/flags.png
200 OK 66 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/Dynaform/intl-tel/img/flags.png
IP
File type PNG image data, 5630 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash ae33acae404631e997ef8d91dae08ccd
19fae9a6aa4bb419eba378b0d0573906dc1be38a
38025784bedeb5e4cae496b131c85cabbd95ae0b1c0a3c9d9cb474d7262db04b
GET /lander/fr-ambawithform/Dynaform/intl-tel/img/flags.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/Dynaform/intl-tel/css/intlTelInput.css
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:04 GMT
Content-Type: image/png
Content-Length: 65960
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-101a8"
Expires: Sat, 14 Jan 2023 14:30:04 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6iJn3vIwy0klVWK%2BuMOk7xSCOMnWeEHJ16ZQH9Z4%2BcWqnbNMhb6ULlcO%2Fk7nabBMdKl3Onl%2F8lG0DnPoaGFaJfeQcwfngXdDVpwOIs3hMjqMJv1VdIgkomPxt74wLK7v"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab832a211bfe-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/dreamcar.jpg
200 OK 164 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/dreamcar.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 502x564, components 3\012- data
Size 164 kB (163566 bytes)
Hash 13507df0c748249a74c7686355454717
b91df9adef7c124a5fac79fc27bd5b58cb18f6aa
a3525ffd53596d03588ff1bceb57b5571395e10dae94c39a9cb1db4dcaf3d31b
GET /lander/fr-ambawithform/dreamcar.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:04 GMT
Content-Type: image/jpeg
Content-Length: 163566
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-27eee"
Expires: Sat, 14 Jan 2023 14:30:04 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5I4XQZ8rUE8Xh4tOtv0bddQrk1pMgCh5kXSW78JrvWw0KkpPJYca4VPVeWMuannAKznOYKZzeOSJLln2g0giHjvL3cQ6SQNrUYfmWp%2BpF6sTNMQ32RM8YK9cr9Iaxa48"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab820e7e0b39-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/muskbranson.jpg
200 OK 164 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/muskbranson.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 800x500, components 3\012- data
Size 164 kB (163491 bytes)
Hash f00b7fb077488817066b5c224cb06c10
33fa7e90d4b8b046160f44092a236e1d998be8f8
50b0010a63d5ede70e4e7c8e005892248e19117182e7634f89c956bbc23ac69b
GET /lander/fr-ambawithform/muskbranson.jpg HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:04 GMT
Content-Type: image/jpeg
Content-Length: 163491
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-27ea3"
Expires: Sat, 14 Jan 2023 14:30:04 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e7oz310CckbamBRlxZsfhWNeBpA6%2BYGndYQJE8ow8S6tEGTVTKlCy2%2F77FUluYTwgdlgEtE0oxpFtuAWF24AZPzUjbb0Oo9DXw4am3LR%2FAbuwCOcyhTySJxB6PkQJvXr"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab82fc60b4eb-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/Dynaform/loading.gif
200 OK 185 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/Dynaform/loading.gif
IP
File type GIF image data, version 89a, 256 x 256\012- data
Size 185 kB (184974 bytes)
Hash 3e8039242e517ee7edc05a4e226e0b80
006378f96cbda355fa2cda2e3373fb42fa19970d
47103864582b5a1b04cf094ee5b22512ba9956e39dab72a52f29f6e49a57d48d
GET /lander/fr-ambawithform/Dynaform/loading.gif HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:05 GMT
Content-Type: image/gif
Content-Length: 184974
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-2d28e"
Expires: Sat, 14 Jan 2023 14:30:04 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PbtTCCzFnO3Wd83KsiwN65LfmuJyMjCUj%2BObcXBAbBX0WiLVbAu2KyRUnEHh5pvU%2Fu7WFhI0ViB7FMPxWU2Fc5J6SJDmGNMUO36ua6G%2FpGAZTqdfWlxTLup6ZFDTnCSI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab85799ab503-OSL
alt-svc: h2=":443"; ma=60
fb.zotech.biz/lander/fr-ambawithform/favicon.png
200 OK 1.6 kB URL HTTP/1.1 fb.zotech.biz/lander/fr-ambawithform/favicon.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data
Hash 54ee397b9557cc66c2e34afad1e11bdf
1f779930648756963321be515eb89eb487ce756c
907b21e676fc190809468c344e721acfd718bbc61404e1706e30959a0dc65af5
GET /lander/fr-ambawithform/favicon.png HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://fb.zotech.biz/lander/fr-ambawithform/
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 14:30:05 GMT
Content-Type: image/png
Content-Length: 1648
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 17:22:20 GMT
ETag: "6394c04c-670"
Expires: Sat, 14 Jan 2023 14:30:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TubqvZQ%2B2s74PhaxRHLNWM8a3DvvG0%2F7710W2jcJLWydXPDZdqJ9MUx5iTaI%2F32SDZB%2BwTkkoti4EOpkDOdeA0i8U%2FmxiInhy%2BA%2BMJ8rN0%2Bg32dkGgHcm6B4I6E%2B17lq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7844ab898e3bb4eb-OSL
alt-svc: h2=":443"; ma=60
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 497859be29dfe712d986ccfd352809bc
e37b0802e709ddfd51fbb1e9c03a5d9d03f76311
2bf8edf524fe88e1a7175f4d41d5c539137a6fe728522b34285cd6d274a17cf2
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2BF8EDF524FE88E1A7175F4D41D5C539137A6FE728522B34285CD6D274A17CF2"
Last-Modified: Tue, 03 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 04 Jan 2023 20:30:05 GMT
Date: Wed, 04 Jan 2023 14:30:05 GMT
Connection: keep-alive
fb.zotech.biz/lander/fr-ambawithform/Dynaform/intl-tel/js/utils.js
200 OK 60 kB URL HTTP/2 fb.zotech.biz/lander/fr-ambawithform/Dynaform/intl-tel/js/utils.js
IP
File type ASCII text, with very long lines (1454), with CRLF line terminators
Hash ee360e9f879adbbd80138ec8fff6b54d
2e16898599a86253c21223d92453d19e92e13c42
edafc1844733c9869e3572f2d0c573021b7274b6d796707a5e7be75d8e874b0d
Analyzer Verdict Alert fortinet Phishing
GET /lander/fr-ambawithform/Dynaform/intl-tel/js/utils.js HTTP/1.1
Host: fb.zotech.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://fb.zotech.biz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 04 Jan 2023 14:30:06 GMT
content-type: application/javascript
last-modified: Sat, 10 Dec 2022 17:22:20 GMT
etag: W/"6394c04c-3daf4"
expires: Sat, 14 Jan 2023 14:30:05 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fc8RYzYk0xlLMYCpco8nnIMzqBBoYngUiSAK45EAcY4d4BgLfX7Uz%2BJJssNy9r0DgouM6wXTCGX5mDw9O%2BSjNYAVj92v7eS1yIgV9vFrQe4bHzsa9Pc%2BV38ap7PrLTOV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7844ab8d0a3afac4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.90.51
172.67.195.104
147.135.255.40
23.36.76.226
93.184.220.29