Report - kp.techsysprogram.com/table02/template/header.html

Report Overview

Submitted URL
kp.techsysprogram.com/table02/template/header.html
IP
109.234.164.29
ASN
#50474 O2switch Sarl
Submitted
2022-11-23 12:24:27
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.89.255.30
app.nickel.eu	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	796 B	200 kB	23.36.79.11
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	2.7 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
ajax.cloudflare.com	4873	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	326 B	2.3 kB	104.17.73.14
kp.techsysprogram.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	381 B	953 B	109.234.164.29
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.77.32
code.jquery.com	634	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	372 B	31 kB	69.16.175.10
rotatorsurvey.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5.3 kB	39 kB	23.229.235.133
static-resources.nickel.eu	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	98 kB	23.36.79.11
rawgit.com	52214	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	399 B	40 kB	104.21.63.184
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	48 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-23	medium	rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	kp.techsysprogram.com/table02/template/header.html	488 B	2023-03-11	2023-03-11
Pretty URL kp.techsysprogram.com/table02/template/header.html IP 109.234.164.29 ASN #50474 O2switch Sarl Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 14:34:45 Last Seen2023-03-11 16:19:31 Times Seen1 Hash 5f3f749401e75f03e723c60939255fc4 efbdcf80245310f1cb42478bb142218e15715496 b618b0849ac61e74b8ff5fa6f83d7e013d3a36ff3799de7f457d0d2ec8e7d786 Loading...

	ajax.cloudflare.com/cdn-cgi/nexp/dok3v=fb690a32f5/cloudflare.min.js	3.1 kB	2023-03-08	2023-11-26
Pretty URL ajax.cloudflare.com/cdn-cgi/nexp/dok3v=fb690a32f5/cloudflare.min.js IP 104.17.73.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 21:20:31 Last Seen2023-11-26 23:08:27 Times Seen14 Hash 1960db43c3eb174d5082f0418420ed2d d6bf334c3636ca5a4235ee5996759ddf26539ea9 79d1744b3148a4b7265a9d2006eb1f6b72fda68490c398e380cb0692aeb8c5e5 Loading...

	code.jquery.com/jquery-3.6.0.min.js	90 kB	2023-03-07	2024-04-25
Pretty URL code.jquery.com/jquery-3.6.0.min.js IP 69.16.175.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-25 08:12:55 Times Seen261115 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	rawgit.com/RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js	197 kB	2023-03-11	2023-03-14
Pretty URL rawgit.com/RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js IP 104.21.63.184 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 10:02:47 Last Seen2023-03-14 05:24:29 Times Seen1 Hash e871ce82455e913d4b6a7fbe7f7e0903 6e20be9447f34bae7c57041c23be5e21feb24db2 2cfaa794a00f343478348b84cfbde43882c5bb941286c4b55cefab5c6b4ae87f Loading...

	rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/	4.1 kB	2023-03-07	2024-04-08
Pretty URL rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/ IP 23.229.235.133 ASN #398101 GO-DADDY-COM-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:40:00 Last Seen2024-04-08 19:55:30 Times Seen198 Hash c8488fb9128b2dcd81a903c9e23d253a 20dad03e87d487cfe730fb38115fb5bf2836e5b4 5786edd881dcfcf78a4ee4f15b73b8eef66ef80a343d364da03f95031c95602c Loading...

		Size	First Seen	Last Seen
	#1 Write - ed2c4b4fb14bf72325425d1592f97ce5	116 B	2023-03-08	2023-04-02
Pretty Observations First Seen2023-03-08 21:20:31 Last Seen2023-04-02 21:22:58 Times Seen5 Hash ed2c4b4fb14bf72325425d1592f97ce5 4608940eac3c8f26ddee4a588cad0946a246d98b 07511ce41a07ddd79c47ac75fa5b82510cfc0dcf601ec794dc865454b59ad7bb Loading...

HTTP Transactions (41)

URL IP Response Size

kp.techsysprogram.com/table02/template/header.html

109.234.164.29

200 OK

729 B

URL HTTP/1.1
kp.techsysprogram.com/table02/template/header.html
IP
109.234.164.29:0
ASN
#50474 O2switch Sarl

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (464)
Size
729 B (729 bytes)
Hash
e58dfc704d44fd99cad9ae6025a4e314
fef9029c43fcb4d24e2fe26648031c33ccf395ce
18b2eae7242fcd1c425e61b0328514f9d980df012ebb8a95590e05d7698c16c6

HTTP Headers

GET /table02/template/header.html HTTP/1.1
Host: kp.techsysprogram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 12:24:15 GMT
Content-Type: text/html
Content-Length: 729
Connection: keep-alive
Last-Modified: Mon, 21 Nov 2022 14:52:56 GMT
Server: o2switch-PowerBoost-v3
Accept-Ranges: bytes

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6827
Expires: Wed, 23 Nov 2022 14:18:03 GMT
Date: Wed, 23 Nov 2022 12:24:16 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4447
Cache-Control: max-age=170467
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 12:24:16 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 11:45:23 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2921
Expires: Wed, 23 Nov 2022 13:12:57 GMT
Date: Wed, 23 Nov 2022 12:24:16 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 12:17:07 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 429
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: wuiY7WntCb+MQCFBwQCVU1kyr4OYdDaIC8Rb2ef3qTTF6J4wOphsyhYZ50L8cNuRZNa1n5kI1aU=
x-amz-request-id: TDKX1J458MZQ4FBH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 11:42:58 GMT
age: 2478
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

ajax.cloudflare.com/cdn-cgi/nexp/dok3v=fb690a32f5/cloudflare.min.js

104.17.73.14

200 OK

1.5 kB

URL HTTP/1.1
ajax.cloudflare.com/cdn-cgi/nexp/dok3v=fb690a32f5/cloudflare.min.js
IP
104.17.73.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (2935)
Size
1.5 kB (1539 bytes)
Hash
c400f5b39a5ff7223f88ec5b3d20f482
77430c85cb91d83cc6ab13536e7e898359543296
a80e56c27894e937d5055958d970aa4ddcc3e8fcb1aaab3f6e4f3042eff8ca9b

HTTP Headers

GET /cdn-cgi/nexp/dok3v=fb690a32f5/cloudflare.min.js HTTP/1.1
Host: ajax.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kp.techsysprogram.com/

HTTP/1.1 200 OK
Date: Wed, 23 Nov 2022 12:24:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:34:50 GMT
ETag: W/"637ccffa-c37"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gq5LK5dwJKA47snywHhICQCVAIVVlhoHkGy%2BgY3jRkyJUcQOlqu6h4jHu6w7e6SIV%2F5lMO0njAOYfhhj7dY3qN5Y4vZPWqg6S7NVu%2F7wx0OIDdLvyVtIJOiFg4PYyPNreX3ZR5c%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e9e18079cfb524-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Fri, 25 Nov 2022 12:24:16 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 12:24:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 12:11:11 GMT
cache-control: public,max-age=3600
age: 786
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1186
Cache-Control: max-age=162142
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 12:24:17 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 09:26:39 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

52.89.255.30

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.89.255.30:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NtFbeQ7ZNGLfsq3bTy5bJA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1IGHDq7zZTOGNMDA4/7KpTEQnGQ=

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/

23.229.235.133

200 OK

24 kB

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1156), with CRLF line terminators
Size
24 kB (23623 bytes)
Hash
bda6c80652fdc685291c6e5799489019
534d5f8299c87753786cfd69ea7471c6c7b2575b
dbc690d8df4d6c2c30342156942c2b0082ebc6765a265ab0ba9561c6add382d8

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/clients/ HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-powered-by: PHP/7.0.33
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7; path=/
vary: Accept-Encoding
content-encoding: br
content-length: 23623
content-type: text/html; charset=UTF-8
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
0652b8250d41a075b668714e6be2327d
57c418e8b592c4d8b46c44a75c2c33f38a04f502
62984548c9a3737543223c730751a872f835b8f23d00801c6918838f8db9464e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5039
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 12:24:17 GMT
Last-Modified: Wed, 23 Nov 2022 11:00:18 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280

code.jquery.com/jquery-3.6.0.min.js

69.16.175.10

200 OK

31 kB

URL HTTP/2
code.jquery.com/jquery-3.6.0.min.js
IP
69.16.175.10:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (65447)
Size
31 kB (30875 bytes)
Hash
899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f

HTTP Headers

GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 23 Nov 2022 12:24:17 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669206257.dop227.sk1.t,1669206257.cds237.sk1.hn,1669206257.cds210.sk1.c
X-Firefox-Spdy: h2

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/86fffa26.chunk.css

23.229.235.133

200 OK

2.2 kB

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/86fffa26.chunk.css
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text, with CRLF line terminators
Size
2.2 kB (2237 bytes)
Hash
6ecf7b3275aba1363eced51f07b8776f
6164b551f5cd9a53f1e8c957f4baeffa95bf8876
2a65f279ba7b21a0c28af42fb2394fb20332014633bcbddd0561ec717049d9a1

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/assets/css/86fffa26.chunk.css HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
Cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 17:26:57 GMT
etag: "8b20078-65df-5d22d18eb7a40-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2237
content-type: text/css
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/des.css

23.229.235.133

200 OK

1.8 kB

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/des.css
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text
Size
1.8 kB (1794 bytes)
Hash
d6daac8af2a63fbd12291291f0ff72b0
23fc923f051ac38305dec1a94eaacc464afde36b
28415454d9aac7a834c098568f049ddd351f1d0a2219609a206f0ea59e72ead8

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/assets/css/des.css HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
Cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 17:21:02 GMT
etag: "8b2007f-27c8-5d22d03c29b80-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1794
content-type: text/css
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/f55d3599.chunk.css

23.229.235.133

200 OK

804 B

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/f55d3599.chunk.css
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text, with CRLF line terminators
Size
804 B (804 bytes)
Hash
3a0b70b26928a707ea72bfe49c256a90
038ebe49f6bf07f6099ce2aa970ff7316adf453d
4e148680051a3ee8e887a6aabf33862275d3a1e10b24f4e8e80978497c4d6a15

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/assets/css/f55d3599.chunk.css HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
Cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 18:29:35 GMT
etag: "8b20081-16e3-5d22df8ea01c0-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 804
content-type: text/css
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/fe9185d1.chunk.css

23.229.235.133

200 OK

800 B

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/fe9185d1.chunk.css
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text
Size
800 B (800 bytes)
Hash
3bb6adfed4dccfec76d77eeb03ffd2b5
b0f14cfb4499ec193b42b5b80ed7d6eb137f4ad0
979b280a2e2142333d57f47086b0798dcd7db939efaaa94040d4223f83ac42e2

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/assets/css/fe9185d1.chunk.css HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
Cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 18:40:30 GMT
etag: "8b20082-15db-5d22e1ff48380-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 800
content-type: text/css
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/645939e1.chunk.css

23.229.235.133

200 OK

1.4 kB

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/645939e1.chunk.css
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text, with CRLF line terminators
Size
1.4 kB (1418 bytes)
Hash
c6d62407dab5b0c0ad4cc5c36921ab66
d4fe9a6348388671d11a1ef8958c8e9a25ac837d
9e59698bbdd0408db66b34b0197328221d47157f314e95ba6c134ef897faa8bc

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/assets/css/645939e1.chunk.css HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
Cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 17:20:49 GMT
etag: "8b20077-27f9-5d22d02fc3e40-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1418
content-type: text/css
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/74.b7389af6.chunk.css

23.229.235.133

404 Not Found

315 B

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/74.b7389af6.chunk.css
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/assets/css/74.b7389af6.chunk.css HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
Cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/2282daa7.chunk.css

23.229.235.133

404 Not Found

315 B

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/2282daa7.chunk.css
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/assets/css/2282daa7.chunk.css HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
Cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/24571a40.chunk.css

23.229.235.133

200 OK

4.8 kB

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/24571a40.chunk.css
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
ASCII text, with CRLF line terminators
Size
4.8 kB (4835 bytes)
Hash
82f7cc58fa3c84641d942626e7f44458
fbdf2af5127b367864328fc3248070737abaceca
99872b1c0100670a73b3cc0df462ad67153d6abb87896537091b5dd0de39be11

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/assets/css/24571a40.chunk.css HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
Cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 18:40:24 GMT
etag: "8b20076-803e-5d22e1f98f600-br"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 4835
content-type: text/css
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/65.045f2d82.chunk.css

23.229.235.133

404 Not Found

315 B

URL HTTP/2
rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/assets/css/65.045f2d82.chunk.css
IP
23.229.235.133:0
ASN
#398101 GO-DADDY-COM-LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /fr/header/css_header/ie/ni/ckel/ni/assets/css/65.045f2d82.chunk.css HTTP/1.1
Host: rotatorsurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/fr/header/css_header/ie/ni/ckel/ni/clients/
Cookie: PHPSESSID=fr76lad7bn57djkpmu64inulb7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 23 Nov 2022 12:24:17 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
0652b8250d41a075b668714e6be2327d
57c418e8b592c4d8b46c44a75c2c33f38a04f502
62984548c9a3737543223c730751a872f835b8f23d00801c6918838f8db9464e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5040
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 12:24:18 GMT
Last-Modified: Wed, 23 Nov 2022 11:00:18 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280

static-resources.nickel.eu/fonts/MullerNarrow-Light.woff2

23.36.79.11

200 OK

32 kB

URL HTTP/1.1
static-resources.nickel.eu/fonts/MullerNarrow-Light.woff2
IP
23.36.79.11:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), TrueType, length 32024, version 1.0\012- data
Size
32 kB (32024 bytes)
Hash
8bfa4a94d58fb8a77071a090b39169cf
745bfa90223dafbe481748d1a6afbd54a3381612
f0e7fef75b97057f33e9ba884f068688dd6514ad2e303685ab29418e1390b842

HTTP Headers

GET /fonts/MullerNarrow-Light.woff2 HTTP/1.1
Host: static-resources.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rotatorsurvey.com
Connection: keep-alive
Referer: https://rotatorsurvey.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: font/woff2
Content-Length: 32024
Last-Modified: Wed, 01 Sep 2021 15:49:38 GMT
ETag: "612fa112-7d18"
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: static-resources.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=15724800; includeSubDomains
Date: Wed, 23 Nov 2022 12:24:18 GMT
Connection: keep-alive

app.nickel.eu/static/media/sketch-homepage.a14b9180.png

23.36.79.11

200 OK

198 kB

URL HTTP/1.1
app.nickel.eu/static/media/sketch-homepage.a14b9180.png
IP
23.36.79.11:0
ASN
#20940 Akamai International B.V.

File type
PNG image data, 2341 x 2090, 8-bit/color RGBA, non-interlaced\012- data
Size
198 kB (197851 bytes)
Hash
81b77ce16052163d40cb0665fc951f78
5b49fa09114237b29e1dee4cc9d4a64344f218d5
234a61d9c004512f92960323b0e8ea01bf7138f7e3daa22648f50000bec54301

HTTP Headers

GET /static/media/sketch-homepage.a14b9180.png HTTP/1.1
Host: app.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 197851
Last-Modified: Wed, 02 Nov 2022 13:55:29 GMT
ETag: "636276d1-304db"
Cache-Control: public
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: espace-perso.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
X-Frame-Options: sameorigin
Date: Wed, 23 Nov 2022 12:24:17 GMT
Connection: keep-alive
Set-Cookie: Path=/; HttpOnly; Secure

rawgit.com/RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js

104.21.63.184

200 OK

39 kB

URL HTTP/2
rawgit.com/RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js
IP
104.21.63.184:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (532)
Size
39 kB (38796 bytes)
Hash
4854a1543ded05105929912fa9d4b61e
e521d35e9c3af6bb2617748101706b66a81429c0
ccb75d7104e8fdf506c4a395fe40709f9ba42df3039b78d28fc9f38cb028f54d

HTTP Headers

GET /RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js HTTP/1.1
Host: rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 23 Nov 2022 12:24:17 GMT
content-type: application/javascript;charset=utf-8
x-content-type-options: nosniff
x-robots-tag: none
access-control-allow-origin: *
link: <https://rawgit.com/>; rel="sunset"; title="RawGit will soon shut down. Please stop using it."
sunset: Tue, 01 Oct 2019 00:00:00 GMT
etag: W/"20aa94bbd069958096e367bf33d6b2ae71d2aa5e42eff352dfe954421b15d673"
cache-control: max-age=3600, s-maxage=300
vary: Accept-Encoding
rawgit-cache-status: EXPIRED
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qs03OaWVqUx34g%2BZM%2FrLYkGxqWbCPaqLwa6GADFEcXEh%2BlEdBEqoyGhWMUp2pbaiKEsLVZ9EepJZv9078a%2Bm1HIZXVkGBMzjW3onTudgjtIdYOUyPLxBThWzr9qB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; preload
server: cloudflare
cf-ray: 76e9e1872b4fb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static-resources.nickel.eu/fonts/MullerNarrow-ExtraBold.woff2

23.36.79.11

200 OK

31 kB

URL HTTP/1.1
static-resources.nickel.eu/fonts/MullerNarrow-ExtraBold.woff2
IP
23.36.79.11:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), TrueType, length 30968, version 1.0\012- data
Size
31 kB (30968 bytes)
Hash
e1f0c316a274e4fb7df07d7594fffe32
cf17a7d2b83dc7cb990cc5ae6d366bbb488dca0c
e671416c9ac25a7877362f1c6581b91fbe987ec04e187b365a96a3feecc2bb1a

HTTP Headers

GET /fonts/MullerNarrow-ExtraBold.woff2 HTTP/1.1
Host: static-resources.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rotatorsurvey.com
Connection: keep-alive
Referer: https://rotatorsurvey.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: font/woff2
Content-Length: 30968
Last-Modified: Wed, 01 Sep 2021 15:49:38 GMT
ETag: "612fa112-78f8"
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: static-resources.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=15724800; includeSubDomains
Date: Wed, 23 Nov 2022 12:24:18 GMT
Connection: keep-alive

static-resources.nickel.eu/fonts/MullerNarrow-Medium.woff2

23.36.79.11

200 OK

33 kB

URL HTTP/1.1
static-resources.nickel.eu/fonts/MullerNarrow-Medium.woff2
IP
23.36.79.11:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), TrueType, length 33044, version 1.0\012- data
Size
33 kB (33044 bytes)
Hash
77f3505fab6d762778d600d08abafd4e
bbcda2aef9c080132da7cb01d2b3d46ed22fa31b
f996d7eb10768373376f60c455f38135808f5ad7d6a347aec0584362de092fa7

HTTP Headers

GET /fonts/MullerNarrow-Medium.woff2 HTTP/1.1
Host: static-resources.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rotatorsurvey.com
Connection: keep-alive
Referer: https://rotatorsurvey.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: font/woff2
Content-Length: 33044
Last-Modified: Wed, 01 Sep 2021 15:49:38 GMT
ETag: "612fa112-8114"
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: static-resources.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=15724800; includeSubDomains
Date: Wed, 23 Nov 2022 12:24:18 GMT
Connection: keep-alive

app.nickel.eu/favicon.ico

23.36.79.11

200 OK

1.2 kB

URL HTTP/1.1
app.nickel.eu/favicon.ico
IP
23.36.79.11:0
ASN
#20940 Akamai International B.V.

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
b2e9188d1bbbfa02ca3fdb2729a899f1
16f7fd93bc0d607d545e444fb8753580ffa0bd59
60a3acb3e24d8255c5ed37cf3fcb147a8c7ab63b5c4e3a4ec81492ff819e3331

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: app.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rotatorsurvey.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Wed, 02 Nov 2022 13:50:51 GMT
ETag: "636275bb-47e"
Cache-Control: no-store, no-cache, must-revalidate
Accept-Ranges: bytes
x-envoy-upstream-service-time: 2
x-envoy-decorator-operation: espace-perso.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
X-Frame-Options: sameorigin
Date: Wed, 23 Nov 2022 12:24:18 GMT
Connection: keep-alive
Set-Cookie: Path=/; HttpOnly; Secure

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6671
Expires: Wed, 23 Nov 2022 14:15:29 GMT
Date: Wed, 23 Nov 2022 12:24:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6671
Expires: Wed, 23 Nov 2022 14:15:29 GMT
Date: Wed, 23 Nov 2022 12:24:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6671
Expires: Wed, 23 Nov 2022 14:15:29 GMT
Date: Wed, 23 Nov 2022 12:24:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6671
Expires: Wed, 23 Nov 2022 14:15:29 GMT
Date: Wed, 23 Nov 2022 12:24:18 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6671
Expires: Wed, 23 Nov 2022 14:15:29 GMT
Date: Wed, 23 Nov 2022 12:24:18 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg

34.120.237.76

200 OK

4.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.3 kB (4309 bytes)
Hash
841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 05:01:14 GMT
age: 26584
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f159cda-2152-46b5-8f3f-971d5d406960.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.5 kB (6475 bytes)
Hash
050f43f830803646a2ece48e01ac8d24
d359314799f8873b35580dd5f8c64b75dfa4ffe3
d4ad8c9e5e1fe428c55c02e567aba32664055f8a881ee6aff8438c3a09124f3f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f159cda-2152-46b5-8f3f-971d5d406960.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6475
x-amzn-requestid: b3f37508-ce80-4bfd-8f40-d98c1ee57f7d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: byQlaF-9IAMFh8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63772e22-42b6d99c69142d1e37161d69;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 07:02:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PZE1jHafMw2Qp-hgWemayemh8jLD57th6a2hD55aLhj4KSyjR-rvmQ==
via: 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:15:53 GMT
age: 18505
etag: "d359314799f8873b35580dd5f8c64b75dfa4ffe3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25c463ad-46db-4c1c-a9ef-76d12a5dbcd7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.4 kB (9422 bytes)
Hash
31e6c88ba7f6e2f34a3f8c0986a5d358
ee9fe28661702bb56a5eae71ab66dda08c87cf50
9fa1bbbe3c52215f34509683ae2c1992f2319e2eef36e93dc1e6a29fe17df39b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25c463ad-46db-4c1c-a9ef-76d12a5dbcd7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9422
x-amzn-requestid: 61475bac-5ed8-4661-b9a4-055578afe9d7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5AHZ8oAMFfAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d06-7e69e5cd1afef9ee089f9d75;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:02 GMT
x-amz-cf-pop: SFO5-C3, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sMYTVN-IORXjnkopVsJADA2eo6hd_RytfhrADXP2gvWl2YhDSpZOrA==
via: 1.1 86eb67c9cdffbb1cad0c7a18a9b0f5a4.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:56:38 GMT
age: 52060
etag: "ee9fe28661702bb56a5eae71ab66dda08c87cf50"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.9 kB (5914 bytes)
Hash
c6380f73d47906bd63b9c48137e4df61
94e053461d2db89e9d08321f26a2555ebcd7e0b9
84144e3c3e7acc7339fd1da9b373f18582734b6f4d235b2aef8c90616ed1c8a7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5914
x-amzn-requestid: 175363fa-bb7a-4c95-8aa4-ebb3f16f3745
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1lI3HaqIAMFmTA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63788238-1bb736b52bbae37c5e19486f;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 39Lmple6qq9vrKeKJ4lcditVdK5XfRFtv3Cs0_R8B7pVDYPiRAGFtg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:13:08 GMT
age: 51070
etag: "94e053461d2db89e9d08321f26a2555ebcd7e0b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6378ed5-9377-4686-98bd-f799fa2d276b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7627 bytes)
Hash
73d326a472c49597186498283399b596
5f61c5e418f95e10e5b1260aac63a226dc26ab0b
143bef27d23a287bfa99421c33f28a4c8d37ad50d6b75d93ce4a3a167b9b5401

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6378ed5-9377-4686-98bd-f799fa2d276b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7627
x-amzn-requestid: 14fa1fb6-1af2-485d-ae6e-3c05baaf6944
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1eJnHTXoAMFryQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6378770a-738012af5c6313191ca29f38;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 06:26:18 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Lj2WKFWupspDwkhlsfhyvf3p2tabXaZNMQGnxQ4qLq5VU1JT1DSi0w==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 d15b6a95f7c8298444f59a99d8027cec.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:54:17 GMT
age: 52201
etag: "5f61c5e418f95e10e5b1260aac63a226dc26ab0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8365 bytes)
Hash
03830e3ff377979c234bf37561c54cfd
c18884ce9370c97e6b4e12ab0f827d68a1938bfa
5ba8bfc69c7eba42de4a16bf6d1e1e3570cd3918fe15cb8b2d25950ef791ddbb

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8365
x-amzn-requestid: e6c2ec6e-525e-4b9f-a45d-63076580df5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrpFJ3oAMF4mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee4a-576f678b6e364bca09532010;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RjuSNwOFpk7_LY-bp-R4iKsz33D4T5Are-BNb2ftPT-N_g0W2PDeuQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:44:55 GMT
age: 52763
etag: "c18884ce9370c97e6b4e12ab0f827d68a1938bfa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (41)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN