urlquery - report: freeways.in/11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	Sent bytes	Received bytes	IP
www.google.com (2)	7	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1636	57787	216.58.211.4
afs.googleusercontent.com (1)	12123	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	456	1215	216.58.207.225
www.google-analytics.com (2)	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1232	21124	216.239.32.178
ocsp.digicert.com (2)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682	1594	93.184.220.29
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5843	34.160.144.191
partner.googleadservices.com (1)	798	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	449	842	216.58.207.226
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	229	34.117.237.239
fonts.gstatic.com (2)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	996	32942	142.250.74.35
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	34.215.94.42
r3.o.lencr.org (6)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2028	5317	23.36.77.32
ocsp.pki.goog (12)	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4116	8400	142.250.74.131
fonts.googleapis.com (1)	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401	1298	142.250.74.106
freeways.in (7)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3998	29327	199.59.243.222
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2374	34.102.187.140
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3246	71867	34.120.237.76

Scan Date	Severity	Indicator	Comment
2022-12-01	medium	freeways.in/js/parking.2.100.2.js	Malware
2022-12-01	medium	freeways.in/_tr	Malware

Date	UQ / IDS / BL	URL	IP
2023-06-01 02:11:30 UTC	0 - 0 - 2	199.59.243.222	199.59.243.222
2023-05-28 15:49:02 UTC	0 - 0 - 4	netshoporizona.com.br/s.jpg?7e17f0=33054656	199.59.243.222
2023-05-26 06:33:03 UTC	0 - 0 - 4	netshoporizona.com.br/s.jpg?10c972d9=1971463151	199.59.243.222
2023-05-22 03:45:53 UTC	0 - 0 - 4	netshoporizona.com.br/s.jpg?4623b=1723746	199.59.243.222
2023-05-21 03:59:38 UTC	0 - 0 - 4	netshoporizona.com.br/s.jpg?59bd0=3308112	199.59.243.222

Date	UQ / IDS / BL	URL	IP
2023-06-01 04:32:28 UTC	3 - 1 - 0	atvkpwfkxc5sfq7q4owvovni2yqws33s2mvetks4kd3xw (...)	54.230.111.78
2023-06-01 04:29:49 UTC	0 - 0 - 1	newsbds.sbs/	52.8.24.9
2023-06-01 04:29:49 UTC	0 - 0 - 7	34543543535.byethost14.com/	199.59.243.223
2023-06-01 04:29:36 UTC	0 - 0 - 9	walemi.com/	76.223.26.96
2023-06-01 04:21:51 UTC	0 - 1 - 0	track.rendan-compto.com/36562b2e-c948-47e6-a4 (...)	18.195.195.71

Date	UQ / IDS / BL	URL	IP
2023-03-20 07:59:25 UTC	0 - 2 - 0	freeways.in/11111/gate.php?guid=ADMIN!USER-PC (...)	75.2.18.233
2022-12-01 18:48:17 UTC	0 - 0 - 2	freeways.in/11111/gate.php?guid=AZURE!AZURE-P (...)	199.59.243.222
2022-12-01 14:33:22 UTC	0 - 0 - 2	freeways.in/11111/gate.php?guid=AZURE!AZURE-P (...)	199.59.243.222
2022-12-04 11:33:50 UTC	0 - 0 - 2	freeways.in/11111/gate.php?guid=<USER>!<MACHI (...)	199.59.243.222
2022-12-03 14:31:56 UTC	0 - 0 - 2	freeways.in/11111/gate.php?guid=JANETTEDOE!TE (...)	199.59.243.222

Date	UQ / IDS / BL	URL	IP
2023-03-24 07:35:40 UTC	0 - 0 - 4	ww25.venygat.com/	199.59.243.223
2022-09-10 06:59:20 UTC	0 - 0 - 4	ww6.spotmecoin.com/	199.59.243.222
2023-01-12 09:15:32 UTC	0 - 0 - 4	ww25.online-acc.info/	199.59.243.222
2022-11-21 08:07:17 UTC	0 - 0 - 8	oyk.info/	70.32.1.32
2022-11-06 07:57:21 UTC	0 - 0 - 2	ww25.apexsilver.com/?subid1=20221106-1856-572 (...)	199.59.243.222

Request	Response
GET /11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 HTTP/1.1 Host: freeways.in User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	199.59.243.222 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: openresty Date: Thu, 01 Dec 2022 18:48:06 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec; expires=Thu, 01-Dec-2022 19:03:06 GMT; Max-Age=900; path=/; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ZhN9+PtrlAxoaMNG+/Annk3RrD3u2N7PV12mAAa4bOw+RnlyZijBQgTDNDpZx3DXBOPEHhVzTex1kGXUpjFbNA== Accept-CH: sec-ch-prefers-color-scheme Critical-CH: sec-ch-prefers-color-scheme Vary: sec-ch-prefers-color-scheme Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1612), with no line terminators Size: 1157 Md5: 9e52801fe314a5007f1db562f768bbff Sha1: da9700a5d20d7e7a0cadc31abbf49cd01a79fa9e Sha256: b244dc2dfed9c71cab092045050223d599fe948f96b9418fe06095e3f543a938
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4069 Expires: Thu, 01 Dec 2022 19:55:55 GMT Date: Thu, 01 Dec 2022 18:48:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 3bbb845b153026fc5332dd4506585b57 Sha1: 3cad200fac28fd00f34ce6ef79373e661e188743 Sha256: 6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6363 Cache-Control: max-age=149348 Date: Thu, 01 Dec 2022 18:48:07 GMT Etag: "63888270-1d7" Expires: Sat, 03 Dec 2022 12:17:15 GMT Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT Server: ECS (ska/F712) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 0c748388899e8a8d3680355da2ea5020 Sha1: 903c620cd137613daafb0da0508c37b2f4a67212 Sha256: 39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Thu, 01 Dec 2022 18:18:08 GMT cache-control: public,max-age=3600 age: 1799 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16885 Expires: Thu, 01 Dec 2022 23:29:32 GMT Date: Thu, 01 Dec 2022 18:48:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 55b4c61a1e99001307750e3647fe1102 Sha1: 7559f9f6770b7d3f45b723167062096312641e08 Sha256: 39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: k8/lQLyho0fGrRFXXm/2dZFgyOjUtlWeNYf2QjN8J3TjByO5kfzI2BlJHfdG++jF7Jetn9UcOtg= x-amz-request-id: T281502XSSNXNK5Y content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Thu, 01 Dec 2022 18:45:46 GMT age: 141 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Thu, 01 Dec 2022 18:48:07 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /js/parking.2.100.2.js HTTP/1.1 Host: freeways.in User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://freeways.in/11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec	199.59.243.222 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Server: openresty Date: Thu, 01 Dec 2022 18:48:07 GMT Last-Modified: Mon, 14 Nov 2022 17:45:48 GMT Transfer-Encoding: chunked Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: HTML document, ASCII text, with very long lines (65536), with no line terminators Size: 22285 Md5: 239c79e8ead12ade233b4b98f3a1d68d Sha1: ebb33fbc73ffa07c517270874bef61576c7aecf6 Sha256: 148cf1738ec4c4800fa6e1fa02ea75d6cc76c5d0096b11dc1af4b47ffbcf2d0b Blocklists: - fortinet: Malware
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Thu, 01 Dec 2022 18:11:15 GMT cache-control: public,max-age=3600 age: 2212 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST /_fd?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 HTTP/1.1 Host: freeways.in User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://freeways.in/11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 Content-Type: application/json Origin: http://freeways.in Connection: keep-alive Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec Content-Length: 0	199.59.243.222 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: openresty Transfer-Encoding: chunked Connection: keep-alive Date: Thu, 01 Dec 2022 18:48:07 GMT X-Version: 2.100.2 Set-Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec; expires=Thu, 01-Dec-2022 19:03:07 GMT; Max-Age=900; path=/; httponly Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with very long lines (5341), with no line terminators Size: 2642 Md5: 4b623f5e1679f516a8831cfacd5444ca Sha1: 1d9c781c069f4a909553614c08e0565b6ada3ccb Sha256: eee16ab2c772883dea54515a7c885e55ac1040aa6ba81dc208f9ffd089a2f6a1
GET /px.gif?ch=1&rn=6.863941688292794 HTTP/1.1 Host: freeways.in User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://freeways.in/11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec	199.59.243.222 HTTP/1.1 200 OK Content-Type: image/gif Server: openresty Date: Thu, 01 Dec 2022 18:48:07 GMT Content-Length: 42 Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Accept-Ranges: bytes --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /px.gif?ch=2&rn=6.863941688292794 HTTP/1.1 Host: freeways.in User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://freeways.in/11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec	199.59.243.222 HTTP/1.1 200 OK Content-Type: image/gif Server: openresty Date: Thu, 01 Dec 2022 18:48:07 GMT Content-Length: 42 Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Accept-Ranges: bytes --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 42 Md5: d89746888da2d9510b64a9f031eaecd5 Sha1: d5fceb6532643d0d84ffe09c40c481ecdf59e15a Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 16c3ad4a2bc7f419fb354b37778f8b2f Sha1: d193a1336556dcf6b4975a057e7c849037eef0ff Sha256: 5993deb5a53b2e844b9027a6b6906c718f6e9f69c27388199c4343a80ef067f6
GET /favicon.ico HTTP/1.1 Host: freeways.in User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://freeways.in/11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec	199.59.243.222 HTTP/1.1 200 OK Content-Type: image/x-icon Server: openresty Date: Thu, 01 Dec 2022 18:48:07 GMT Content-Length: 0 Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT Connection: keep-alive ETag: "61424bb6-0" x-backend-server: ip-10-201-16-121.ec2.internal Accept-Ranges: bytes --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6363 Cache-Control: max-age=144285 Date: Thu, 01 Dec 2022 18:48:07 GMT Etag: "63886ea9-1d7" Expires: Sat, 03 Dec 2022 10:52:52 GMT Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT Server: ECS (ska/F712) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 1f88399f3fdd89dbb9ca1229cb67143a Sha1: 325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3 Sha256: 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 533f66ef53706466ce20dc9aebf11812 Sha1: 0c0d713d538eb224deeb9241917a117205f16cb2 Sha256: 8ce7b68022c847b59b9a132ada3a75eea73bb57bae4683901c8df08fa255ba79
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 2127bde04ad44ce578c974ce17014430 Sha1: 0671da7ac6281e7666378aec875006158b784931 Sha256: e7353f4f5fdb557bbc3ed7b6c74c9a79d1bb7ef966f5bd471382feb82234bd93
GET /gampad/cookie.js?domain=freeways.in&client=dp-bodis31_3ph&product=SAS&callback=__sasCookie HTTP/1.1 Host: partner.googleadservices.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://freeways.in/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	216.58.207.226 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin x-content-type-options: nosniff content-disposition: attachment; filename="f.txt" content-encoding: gzip date: Thu, 01 Dec 2022 18:48:07 GMT server: cafe cache-control: private content-length: 179 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 179 Md5: 46426e48836e542c5df19eec8874e31b Sha1: 26b5267b2050f3d6c6a58f097b5546ff4bd34a12 Sha256: be00df2d7aafa75d95c87427dcb162bb400fb250369d44a8eac2a702758bda83
GET /afs/ads?adtest=off&psid=7049491253&pcsa=false&channel=pid-bodis-gcontrol85%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol318%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol475&client=dp-bodis31_3ph&r=m&hl=en&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2168685206042938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003&format=r3&nocache=1461669920486211&num=0&output=afd_ads&domain_name=freeways.in&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1669920486213&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1264&psh=79&frm=0&cl=491710121&uio=-&cont=rs&jsid=caf&jsv=491710121&rurl=http%3A%2F%2Ffreeways.in%2F11111%2Fgate.php%3Fguid%3DAZURE!AZURE-PC!ACFEEEC3%26ver%3D10084%26stat%3DONLINE%26ie%3D9.11.9600.19463%26os%3D6.1.7601%26ut%3DAdmin%26cpu%3D0%26ccrc%3D5A4F4DF7%26md5%3Dbc64d3f21a32207b3a8e1b155e6c7575&adbw=master-1%3A1264 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://freeways.in/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site TE: trailers	216.58.211.4 HTTP/2 200 OK content-type: text/html; charset=UTF-8 content-disposition: inline date: Thu, 01 Dec 2022 18:48:07 GMT expires: Thu, 01 Dec 2022 18:48:07 GMT cache-control: private, max-age=3600 cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="gws" report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} content-encoding: br server: gws content-length: 2077 x-xss-protection: 0 set-cookie: CONSENT=PENDING+696; expires=Sat, 30-Nov-2024 18:48:07 GMT; path=/; domain=.google.com; Secure p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5558) Size: 2077 Md5: 8b26b9f0b4dbad332050d2f5eb021089 Sha1: 4d815b886d43dab23e870766b7fe45828045e682 Sha256: 7c1a1649b677099370c9b9a33f654e75e841a943c0ed5ef8471230d2998e45b3
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 2127bde04ad44ce578c974ce17014430 Sha1: 0671da7ac6281e7666378aec875006158b784931 Sha256: e7353f4f5fdb557bbc3ed7b6c74c9a79d1bb7ef966f5bd471382feb82234bd93
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 3519a58310eefa01756f0440e2acd7dd Sha1: 50153382830684a6abb653dc7b4e41d7c7e386b5 Sha256: 5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 3519a58310eefa01756f0440e2acd7dd Sha1: 50153382830684a6abb653dc7b4e41d7c7e386b5 Sha256: 5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e
GET /adsense/domains/caf.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://freeways.in/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	216.58.211.4 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 accept-ranges: bytes vary: Accept-Encoding content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="ads-afs-ui" report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} date: Thu, 01 Dec 2022 18:48:07 GMT expires: Thu, 01 Dec 2022 18:48:07 GMT cache-control: private, max-age=3600 etag: "16357369056098493250" x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 53958 Md5: 14297c6fd0695df0038f4470586ce629 Sha1: 773d09bfb4eb2d6566ddfa3494d68078335b1c33 Sha256: e040cca2fede444eaf20f041136109a2b252c228c6122870b1d0b8ff5e3f713e
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: e7e19607943d3a3770dd76e619af315d Sha1: 78a4ef394f6fcbaa6b5abaa41f80eb9bce6bf06e Sha256: bafb86050e74ea34fc7206ec495f56d82f536245a1f23502eef3f3b7871ffea3
GET /css?family=Michroma&display=swap HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.google.com/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	142.250.74.106 HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Thu, 01 Dec 2022 18:48:07 GMT date: Thu, 01 Dec 2022 18:48:07 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (390) Size: 552 Md5: 3ae821533645aa6e503e21990703c050 Sha1: 7f98fde15e93e75afad6c3b8738e9d6ae7e53e46 Sha256: 2cad3d8109f565218b15713f3c3992b8301f949fc73dd8b28b8bb2a41887350f
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 980f31229421fd11df958496bea34502 Sha1: 648e03f048e6741beb1d4e10099b1429b79e4f00 Sha256: 887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.google.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	216.58.207.225 HTTP/2 200 OK content-type: image/svg+xml accept-ranges: bytes vary: Accept-Encoding content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers" report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} content-length: 278 x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 date: Thu, 01 Dec 2022 04:41:10 GMT expires: Fri, 02 Dec 2022 03:41:10 GMT cache-control: public, max-age=82800 age: 50818 last-modified: Tue, 09 Feb 2021 14:15:00 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (306) Size: 278 Md5: bb7fc36f627255dd4783f849dca0932e Sha1: 80e89ef8f3c2c8ee982523757fce214ea7323a69 Sha256: 735f48c2876099e6a731c65fc46ec1ec133c316e0997d04eb0ee246741bee647
GET /s/michroma/v16/PN_zRfy9qWD8fEagAPg9pTk.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://www.google.com Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	142.250.74.35 HTTP/2 200 OK content-type: font/woff2 accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 17156 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Tue, 29 Nov 2022 22:00:54 GMT expires: Wed, 29 Nov 2023 22:00:54 GMT cache-control: public, max-age=31536000 age: 161234 last-modified: Tue, 26 Apr 2022 14:38:29 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 17156, version 1.0\012- data Size: 17156 Md5: 402cbe860d64ae2e13145e34cbc7889c Sha1: 7af4691dc306b7583365b9ff2ead0c1f6db017c5 Sha256: da748253b458c5fc9c9a5e3c108b1cda280f52df4008702b9cea695ec23332aa
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: rFz6NdDJf38weA1J+IUgCQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	34.215.94.42 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: fagbRdqp4/XmC3UIY/eZxTpgm8w= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: e7e19607943d3a3770dd76e619af315d Sha1: 78a4ef394f6fcbaa6b5abaa41f80eb9bce6bf06e Sha256: bafb86050e74ea34fc7206ec495f56d82f536245a1f23502eef3f3b7871ffea3
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 980f31229421fd11df958496bea34502 Sha1: 648e03f048e6741beb1d4e10099b1429b79e4f00 Sha256: 887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce
GET /s/quicksand/v30/6xK-dSZaM9iE8KbpRA_LJ3z8mH9BOJvgkP8o58a-wg.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://freeways.in Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	142.250.74.35 HTTP/2 200 OK content-type: font/woff2 accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 13888 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Mon, 28 Nov 2022 21:42:07 GMT expires: Tue, 28 Nov 2023 21:42:07 GMT cache-control: public, max-age=31536000 age: 248761 last-modified: Mon, 18 Jul 2022 19:12:09 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 13888, version 1.0\012- data Size: 13888 Md5: 099548fac114f5f6498c5c75b943581d Sha1: 7505fcaf9f4fe36634352b322a9f5fed1256a9f6 Sha256: e36165510050fc4ef1d87cc430dd4d1d0f6a705c5f4aa7b3a97493921884bb05
GET /analytics.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://freeways.in/	216.239.32.178 HTTP/1.1 200 OK Content-Type: text/javascript Strict-Transport-Security: max-age=10886400; includeSubDomains; preload X-Content-Type-Options: nosniff Vary: Accept-Encoding Content-Encoding: gzip Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 20039 Date: Thu, 01 Dec 2022 18:22:58 GMT Expires: Thu, 01 Dec 2022 20:22:58 GMT Cache-Control: public, max-age=7200 Age: 1510 Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT --- Additional Info --- Magic: ASCII text, with very long lines (1325) Size: 20039 Md5: 47e6f374ca946fddd5b59871b325736c Sha1: baa9282efc8785e84d247c3bff518eaa45f101c4 Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
POST /_tr HTTP/1.1 Host: freeways.in User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://freeways.in/11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 Content-Type: application/json Origin: http://freeways.in Content-Length: 2265 Connection: keep-alive Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec; __gsas=ID=b1b0305cee4d51f9:T=1669920487:S=ALNI_MY_NXF99pnooypsN5fW6wXFsTgntA	199.59.243.222 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: openresty Transfer-Encoding: chunked Connection: keep-alive Date: Thu, 01 Dec 2022 18:48:08 GMT X-Version: 2.100.2 Set-Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec; expires=Thu, 01-Dec-2022 19:03:08 GMT; Max-Age=900; path=/; httponly Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with no line terminators Size: 22 Md5: 5cfde9b47de2d84bd26fc473632647c0 Sha1: fd53c70631b6068328be57daec71bd94bf004d41 Sha256: 47fd05ef74fef5da03fa22483e63fc977cad8e026ae41dadbbcc3745907f306b Blocklists: - fortinet: Malware
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 188c50963e7939b1f26a31dbcb8c8200 Sha1: 859416e6148ea6618584e53604efcf072bb989cc Sha256: 3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST /j/collect?v=1&_v=j98&a=1251843500&t=pageview&_s=1&dl=http%3A%2F%2Ffreeways.in%2F11111%2Fgate.php%3Fguid%3DAZURE!AZURE-PC!ACFEEEC3%26ver%3D10084%26stat%3DONLINE%26ie%3D9.11.9600.19463%26os%3D6.1.7601%26ut%3DAdmin%26cpu%3D0%26ccrc%3D5A4F4DF7%26md5%3Dbc64d3f21a32207b3a8e1b155e6c7575&dp=%2F11111%2Fgate.php&ul=en-us&de=UTF-8&dt=Freeways.in&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACACI~&jid=99649797&gjid=412640572&cid=1606442668.1669920487&tid=UA-162869945-1&_gid=58677013.1669920487&_r=1&_slc=1&z=1266160972 HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 0 Origin: http://freeways.in Connection: keep-alive Referer: http://freeways.in/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	216.239.32.178 HTTP/2 200 OK content-type: text/plain access-control-allow-origin: http://freeways.in date: Thu, 01 Dec 2022 18:48:08 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate last-modified: Sun, 17 May 1998 03:00:00 GMT access-control-allow-credentials: true x-content-type-options: nosniff cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 2 Md5: 38684612f0c6bb6dfa16da92f4a6878f Sha1: 6fe62d0dd7db314b7f9bb945672f078e01d27f0f Sha256: a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Thu, 01 Dec 2022 18:48:08 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 188c50963e7939b1f26a31dbcb8c8200 Sha1: 859416e6148ea6618584e53604efcf072bb989cc Sha256: 3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4391 Expires: Thu, 01 Dec 2022 20:01:20 GMT Date: Thu, 01 Dec 2022 18:48:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4391 Expires: Thu, 01 Dec 2022 20:01:20 GMT Date: Thu, 01 Dec 2022 18:48:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4312 Expires: Thu, 01 Dec 2022 20:00:01 GMT Date: Thu, 01 Dec 2022 18:48:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4312 Expires: Thu, 01 Dec 2022 20:00:01 GMT Date: Thu, 01 Dec 2022 18:48:09 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: ecab83d593cc540b02689be5be7abc8a Sha1: 81cda579b7b9b22332b85266b0126585f3d3f73f Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9674 x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cYgEoHVAoAMFvAQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0 x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 21:44:47 GMT age: 75802 etag: "53650399f9a986ba54addd668b4557109d12003b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9674 Md5: 5508d05a290b663fd89ead9b58f2efd8 Sha1: 53650399f9a986ba54addd668b4557109d12003b Sha256: 65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8740 x-amzn-requestid: 4823cf63-98eb-40d3-bb8b-e09cd2262f36 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cP7SqHjYIAMF8xw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63830c10-316b213c33ce9bc2355c0900;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:48 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: tK4wl-g5kcUhVFE3iZGILhZhZSsaMzQD9JTBHj1JXV95yXs_e3gMGw== via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 12:31:43 GMT age: 22586 etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8740 Md5: 26d6dffbf400da4803a2e76e2a8ef2f8 Sha1: 2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8 Sha256: 04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4762 x-amzn-requestid: b7c0e28a-de0d-443d-8bf4-900a964bf110 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cP7uSFcMoAMF2CQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63830cc1-7abade3a670201cf1906b79f;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 07:07:45 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: gZSkafSw8cXo9AChLOTVJW7r_hHLW8kaHlA-ED2_zFJwuUk1uS3VRw== via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google date: Thu, 01 Dec 2022 13:29:36 GMT age: 19113 etag: "fa2217bae05b7beca2e12597eaad835298276b82" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4762 Md5: d2dd5a4bcfd47db8f38544bf39ce3031 Sha1: fa2217bae05b7beca2e12597eaad835298276b82 Sha256: 3266004f5e73af5359b71622eea31f1e28abb4bbc443b5f9e481b5a8b2e9249e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 13411 x-amzn-requestid: 17fcc4e1-76c1-4eca-9235-c1a513bca24a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cbz80FCQoAMFs1A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6387cd1e-26da4f265d74215f31425eb9;Sampled=0 x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: MttRByNp1C1ZeFFicFVa0w3XRyXJnUycPy2Izk8hzGEgXGdDqD3L3A== via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 21:48:17 GMT age: 75592 etag: "63bfa2ea925aa2c188c664a7bf7af7b0e5417e60" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13411 Md5: 328ce221bcf3442f88d09373193ff594 Sha1: 63bfa2ea925aa2c188c664a7bf7af7b0e5417e60 Sha256: 21d5b5ec267430dba91b17f89a557aca5cd2a21535da18eb02ec69ed0e1b7371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 16038 x-amzn-requestid: 9d34c42b-ba0c-498f-8f99-d4ab527ffa89 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cbzMdHXNIAMFgaw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6387cbe9-376846f31dc9b995797cbd18;Sampled=0 x-amzn-remapped-date: Wed, 30 Nov 2022 21:32:25 GMT x-amz-cf-pop: SEA19-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: DngCuOTO9fQAwWe_ip6EtBcgruigZN6Bl1_v5BHM2dsWlhqCXCL3gg== via: 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 21:45:33 GMT age: 75756 etag: "5cf9a7a784952e1bb0cbe499104f1774b1269d08" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 16038 Md5: ffd12f9c423ffc627d9e3b3145944fe4 Sha1: 5cf9a7a784952e1bb0cbe499104f1774b1269d08 Sha256: a25f1b752d9af599aefd73073c105853130f1759905269de3d582d2eb35fe167
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12898 x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cQZBNFxToAMF_9A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: gsn5uUFEzDZDOMPTvW9UQxtccvRfJKUM4eJ8U99jvUGzNIKkF9SzeA== via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google date: Wed, 30 Nov 2022 21:49:20 GMT age: 75529 etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12898 Md5: 820cf89fcab8380adff42982c9fb11ed Sha1: 84241ddddbbfd7de30118307fb1a62800d0a4cb3 Sha256: 0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8

                                        
                                            GET /11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 HTTP/1.1 

                                        
                                            
Host: freeways.in

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                        
                                             199.59.243.222

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: text/html; charset=UTF-8

                                            

                                            
                                                
Server: openresty 

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:06 GMT 

                                            
                                                
Transfer-Encoding: chunked 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Set-Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec; expires=Thu, 01-Dec-2022 19:03:06 GMT; Max-Age=900; path=/; HttpOnly 

                                            
                                                
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ZhN9+PtrlAxoaMNG+/Annk3RrD3u2N7PV12mAAa4bOw+RnlyZijBQgTDNDpZx3DXBOPEHhVzTex1kGXUpjFbNA== 

                                            
                                                
Accept-CH: sec-ch-prefers-color-scheme 

                                            
                                                
Critical-CH: sec-ch-prefers-color-scheme 

                                            
                                                
Vary: sec-ch-prefers-color-scheme 

                                            
                                                
Expires: Thu, 01 Jan 1970 00:00:01 GMT 

                                            
                                                
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 

                                            
                                                
Pragma: no-cache 

                                            
                                                
Content-Encoding: gzip 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1612), with no line terminators

                                                Size:   1157

                                                Md5:    9e52801fe314a5007f1db562f768bbff

                                                Sha1:   da9700a5d20d7e7a0cadc31abbf49cd01a79fa9e

                                                Sha256: b244dc2dfed9c71cab092045050223d599fe948f96b9418fe06095e3f543a938

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             93.184.220.29

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Age: 6363 

                                            
                                                
Cache-Control: max-age=149348 

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
Etag: "63888270-1d7" 

                                            
                                                
Expires: Sat, 03 Dec 2022 12:17:15 GMT 

                                            
                                                
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT 

                                            
                                                
Server: ECS (ska/F712) 

                                            
                                                
X-Cache: HIT 

                                            
                                                
Content-Length: 471 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    0c748388899e8a8d3680355da2ea5020

                                                Sha1:   903c620cd137613daafb0da0508c37b2f4a67212

                                                Sha256: 39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA" 

                                            
                                                
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=16885 

                                            
                                                
Expires: Thu, 01 Dec 2022 23:29:32 GMT 

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    55b4c61a1e99001307750e3647fe1102

                                                Sha1:   7559f9f6770b7d3f45b723167062096312641e08

                                                Sha256: 39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
content-length: 12 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 329 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Thu, 01 Dec 2022 18:11:15 GMT 

                                            
                                                
cache-control: public,max-age=3600 

                                            
                                                
age: 2212 

                                            
                                                
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                            
                                                
etag: "1648230346554" 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET /px.gif?ch=1&rn=6.863941688292794 HTTP/1.1 

                                        
                                            
Host: freeways.in

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://freeways.in/11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575 

                                        
                                            
Cookie: parking_session=e7a59a52-d0cd-6312-cc7a-e964e568bbec

                                        
                                             199.59.243.222

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: image/gif

                                            

                                            
                                                
Server: openresty 

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
Content-Length: 42 

                                            
                                                
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Expires: Thu, 01 Jan 1970 00:00:01 GMT 

                                            
                                                
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0 

                                            
                                                
Pragma: no-cache 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   42

                                                Md5:    d89746888da2d9510b64a9f031eaecd5

                                                Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a

                                                Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.131

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    16c3ad4a2bc7f419fb354b37778f8b2f

                                                Sha1:   d193a1336556dcf6b4975a057e7c849037eef0ff

                                                Sha256: 5993deb5a53b2e844b9027a6b6906c718f6e9f69c27388199c4343a80ef067f6

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             93.184.220.29

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Age: 6363 

                                            
                                                
Cache-Control: max-age=144285 

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
Etag: "63886ea9-1d7" 

                                            
                                                
Expires: Sat, 03 Dec 2022 10:52:52 GMT 

                                            
                                                
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT 

                                            
                                                
Server: ECS (ska/F712) 

                                            
                                                
X-Cache: HIT 

                                            
                                                
Content-Length: 471 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    1f88399f3fdd89dbb9ca1229cb67143a

                                                Sha1:   325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3

                                                Sha256: 831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.131

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    2127bde04ad44ce578c974ce17014430

                                                Sha1:   0671da7ac6281e7666378aec875006158b784931

                                                Sha256: e7353f4f5fdb557bbc3ed7b6c74c9a79d1bb7ef966f5bd471382feb82234bd93

                                        
                                            GET /afs/ads?adtest=off&psid=7049491253&pcsa=false&channel=pid-bodis-gcontrol85%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol318%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol475&client=dp-bodis31_3ph&r=m&hl=en&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2168685206042938&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003&format=r3&nocache=1461669920486211&num=0&output=afd_ads&domain_name=freeways.in&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1669920486213&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1264&psh=79&frm=0&cl=491710121&uio=-&cont=rs&jsid=caf&jsv=491710121&rurl=http%3A%2F%2Ffreeways.in%2F11111%2Fgate.php%3Fguid%3DAZURE!AZURE-PC!ACFEEEC3%26ver%3D10084%26stat%3DONLINE%26ie%3D9.11.9600.19463%26os%3D6.1.7601%26ut%3DAdmin%26cpu%3D0%26ccrc%3D5A4F4DF7%26md5%3Dbc64d3f21a32207b3a8e1b155e6c7575&adbw=master-1%3A1264 HTTP/1.1 

                                        
                                            
Host: www.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://freeways.in/ 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: iframe 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                        
                                             216.58.211.4

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/html; charset=UTF-8

                                            

                                            
                                                
content-disposition: inline 

                                            
                                                
date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
expires: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
cache-control: private, max-age=3600 

                                            
                                                
cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="gws" 

                                            
                                                
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} 

                                            
                                                
content-encoding: br 

                                            
                                                
server: gws 

                                            
                                                
content-length: 2077 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
set-cookie: CONSENT=PENDING+696; expires=Sat, 30-Nov-2024 18:48:07 GMT; path=/; domain=.google.com; Secure 

                                            
                                                
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5558)

                                                Size:   2077

                                                Md5:    8b26b9f0b4dbad332050d2f5eb021089

                                                Sha1:   4d815b886d43dab23e870766b7fe45828045e682

                                                Sha256: 7c1a1649b677099370c9b9a33f654e75e841a943c0ed5ef8471230d2998e45b3

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.131

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    3519a58310eefa01756f0440e2acd7dd

                                                Sha1:   50153382830684a6abb653dc7b4e41d7c7e386b5

                                                Sha256: 5f321e771fa62d9f794339006752655316cdb6e8d69bc23e1d0e3c8bc526f12e

                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 

                                        
                                            
Host: www.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://freeways.in/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             216.58.211.4

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/javascript; charset=UTF-8

                                            

                                            
                                                
accept-ranges: bytes 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui" 

                                            
                                                
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} 

                                            
                                                
date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
expires: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
cache-control: private, max-age=3600 

                                            
                                                
etag: "16357369056098493250" 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-encoding: gzip 

                                            
                                                
server: sffe 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   53958

                                                Md5:    14297c6fd0695df0038f4470586ce629

                                                Sha1:   773d09bfb4eb2d6566ddfa3494d68078335b1c33

                                                Sha256: e040cca2fede444eaf20f041136109a2b252c228c6122870b1d0b8ff5e3f713e

                                        
                                            GET /css?family=Michroma&display=swap HTTP/1.1 

                                        
                                            
Host: fonts.googleapis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://www.google.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/css; charset=utf-8

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
expires: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
date: Thu, 01 Dec 2022 18:48:07 GMT 

                                            
                                                
cache-control: private, max-age=86400 

                                            
                                                
cross-origin-opener-policy: same-origin-allow-popups 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
content-encoding: gzip 

                                            
                                                
server: ESF 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
x-frame-options: SAMEORIGIN 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (390)

                                                Size:   552

                                                Md5:    3ae821533645aa6e503e21990703c050

                                                Sha1:   7f98fde15e93e75afad6c3b8738e9d6ae7e53e46

                                                Sha256: 2cad3d8109f565218b15713f3c3992b8301f949fc73dd8b28b8bb2a41887350f

                                        
                                            GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1 

                                        
                                            
Host: afs.googleusercontent.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://www.google.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.225

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/svg+xml

                                            

                                            
                                                
accept-ranges: bytes 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers 

                                            
                                                
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers" 

                                            
                                                
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} 

                                            
                                                
content-length: 278 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-encoding: gzip 

                                            
                                                
server: sffe 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
date: Thu, 01 Dec 2022 04:41:10 GMT 

                                            
                                                
expires: Fri, 02 Dec 2022 03:41:10 GMT 

                                            
                                                
cache-control: public, max-age=82800 

                                            
                                                
age: 50818 

                                            
                                                
last-modified: Tue, 09 Feb 2021 14:15:00 GMT 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (306)

                                                Size:   278

                                                Md5:    bb7fc36f627255dd4783f849dca0932e

                                                Sha1:   80e89ef8f3c2c8ee982523757fce214ea7323a69

                                                Sha256: 735f48c2876099e6a731c65fc46ec1ec133c316e0997d04eb0ee246741bee647

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: rFz6NdDJf38weA1J+IUgCQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                        
                                             34.215.94.42

                                            
                                                HTTP/1.1 101 Switching Protocols

                                            

                                            
                                                
Connection: Upgrade 

                                            
                                                
Upgrade: websocket 

                                            
                                                
Sec-WebSocket-Accept: fagbRdqp4/XmC3UIY/eZxTpgm8w= 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.131

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:08 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    980f31229421fd11df958496bea34502

                                                Sha1:   648e03f048e6741beb1d4e10099b1429b79e4f00

                                                Sha256: 887d1a1020b73fa3221c168713525f99474ac02fa10e251b5b23f6c0c519afce

                                        
                                            GET /analytics.js HTTP/1.1 

                                        
                                            
Host: www.google-analytics.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://freeways.in/

                                        
                                             216.239.32.178

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: text/javascript

                                            

                                            
                                                
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload 

                                            
                                                
X-Content-Type-Options: nosniff 

                                            
                                                
Vary: Accept-Encoding 

                                            
                                                
Content-Encoding: gzip 

                                            
                                                
Cross-Origin-Resource-Policy: cross-origin 

                                            
                                                
Server: Golfe2 

                                            
                                                
Content-Length: 20039 

                                            
                                                
Date: Thu, 01 Dec 2022 18:22:58 GMT 

                                            
                                                
Expires: Thu, 01 Dec 2022 20:22:58 GMT 

                                            
                                                
Cache-Control: public, max-age=7200 

                                            
                                                
Age: 1510 

                                            
                                                
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (1325)

                                                Size:   20039

                                                Md5:    47e6f374ca946fddd5b59871b325736c

                                                Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4

                                                Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.131

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:08 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    188c50963e7939b1f26a31dbcb8c8200

                                                Sha1:   859416e6148ea6618584e53604efcf072bb989cc

                                                Sha256: 3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.131

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:08 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    188c50963e7939b1f26a31dbcb8c8200

                                                Sha1:   859416e6148ea6618584e53604efcf072bb989cc

                                                Sha256: 3a313cd3c1693a886bfbf6ffc6fbac78f87e6ded2b9a7749553444ada65ce36e

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" 

                                            
                                                
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=4391 

                                            
                                                
Expires: Thu, 01 Dec 2022 20:01:20 GMT 

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:09 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    ecab83d593cc540b02689be5be7abc8a

                                                Sha1:   81cda579b7b9b22332b85266b0126585f3d3f73f

                                                Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             95.101.11.115

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC" 

                                            
                                                
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=4312 

                                            
                                                
Expires: Thu, 01 Dec 2022 20:00:01 GMT 

                                            
                                                
Date: Thu, 01 Dec 2022 18:48:09 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    ecab83d593cc540b02689be5be7abc8a

                                                Sha1:   81cda579b7b9b22332b85266b0126585f3d3f73f

                                                Sha256: d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8740 

                                            
                                                
x-amzn-requestid: 4823cf63-98eb-40d3-bb8b-e09cd2262f36 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cP7SqHjYIAMF8xw= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-63830c10-316b213c33ce9bc2355c0900;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Sun, 27 Nov 2022 07:04:48 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: tK4wl-g5kcUhVFE3iZGILhZhZSsaMzQD9JTBHj1JXV95yXs_e3gMGw== 

                                            
                                                
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Thu, 01 Dec 2022 12:31:43 GMT 

                                            
                                                
age: 22586 

                                            
                                                
etag: "2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8740

                                                Md5:    26d6dffbf400da4803a2e76e2a8ef2f8

                                                Sha1:   2e62f9ed8f5e7b2f888a73320dd98b0cda9303b8

                                                Sha256: 04c6e31623fe48cbe83dc91635bfa47b337590f18919995b08d5bde27e929e03

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcb53953-3f6b-43ee-95d9-fb65d133745f.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 13411 

                                            
                                                
x-amzn-requestid: 17fcc4e1-76c1-4eca-9235-c1a513bca24a 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cbz80FCQoAMFs1A= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-6387cd1e-26da4f265d74215f31425eb9;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Wed, 30 Nov 2022 21:37:34 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: MttRByNp1C1ZeFFicFVa0w3XRyXJnUycPy2Izk8hzGEgXGdDqD3L3A== 

                                            
                                                
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Wed, 30 Nov 2022 21:48:17 GMT 

                                            
                                                
age: 75592 

                                            
                                                
etag: "63bfa2ea925aa2c188c664a7bf7af7b0e5417e60" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   13411

                                                Md5:    328ce221bcf3442f88d09373193ff594

                                                Sha1:   63bfa2ea925aa2c188c664a7bf7af7b0e5417e60

                                                Sha256: 21d5b5ec267430dba91b17f89a557aca5cd2a21535da18eb02ec69ed0e1b7371

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 12898 

                                            
                                                
x-amzn-requestid: 9b594c3c-6b8c-4589-8fcb-b3d7518b46f6 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cQZBNFxToAMF_9A= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-63833ba1-767f510d72eef86d0cc892df;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Sun, 27 Nov 2022 10:27:45 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: gsn5uUFEzDZDOMPTvW9UQxtccvRfJKUM4eJ8U99jvUGzNIKkF9SzeA== 

                                            
                                                
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Wed, 30 Nov 2022 21:49:20 GMT 

                                            
                                                
age: 75529 

                                            
                                                
etag: "84241ddddbbfd7de30118307fb1a62800d0a4cb3" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   12898

                                                Md5:    820cf89fcab8380adff42982c9fb11ed

                                                Sha1:   84241ddddbbfd7de30118307fb1a62800d0a4cb3

                                                Sha256: 0d051495f06ac84de934283b40cbfee7a042d32153a73486dd7c017430e882d8

URL	freeways.in/11111/gate.php?guid=AZURE!AZURE-PC!ACFEEEC3&ver=10084&stat=ONLINE&ie=9.11.9600.19463&os=6.1.7601&ut=Admin&cpu=0&ccrc=5A4F4DF7&md5=bc64d3f21a32207b3a8e1b155e6c7575
IP	199.59.243.222 (United States)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access
Report completed	2022-12-01 18:48:17 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	2
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (15)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.59.243.222

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: freeways.in

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (6)

Executed Evals (1)

#1 JavaScript::Eval (size: 793) - SHA256: 5aff05f856534d1387fcda6210fe7ef655b932e2d9cfcf180158e8fa03f4279f

Executed Writes (0)

HTTP Transactions (47)

Overview

Domain Summary (15)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.59.243.222

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: freeways.in

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (6)

Executed Evals (1)

#1 JavaScript::Eval (size: 793) - SHA256: 5aff05f856534d1387fcda6210fe7ef655b932e2d9cfcf180158e8fa03f4279f

Executed Writes (0)

HTTP Transactions (47)

Network Intrusion Detection Systems