promotions.betfred.com/
403 Forbidden 918 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (918), with no line terminators
Hash cead795fff5bbbfad88b7c637ce1b13b
e3eb44a976b2534dba88f7e49f326a3a2dac5727
aae2b870deed3290610a4a25fdc8d153a096df6e8bd85d903b676f7fcce9ad96
GET / HTTP/1.1
Host: promotions.betfred.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 918
X-Iinfo: 6-6938192-0 0NNN RT(1679783606001 57) q(0 -1 -1 0) r(0 -1) B16 U18
Set-Cookie: visid_incap_2382758=VP7fhAwiQbWLGuPSwoa9cLZ2H2QAAAAAQUIPAAAAAACmWG4XgRJ8kkZ9OoHrV5/c; expires=Sun, 24 Mar 2024 22:28:09 GMT; HttpOnly; path=/; Domain=.betfred.com
incap_ses_277_2382758=vqlnAPLYfzIQqof7mhrYA7Z2H2QAAAAAKLomsh/zoJzlZR97/RzocQ==; path=/; Domain=.betfred.com
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16753
Expires: Sun, 26 Mar 2023 03:12:39 GMT
Date: Sat, 25 Mar 2023 22:33:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16444
Expires: Sun, 26 Mar 2023 03:07:30 GMT
Date: Sat, 25 Mar 2023 22:33:26 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 22:27:45 GMT
content-type: application/json
age: 341
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1313ee2f06606d09c45b06ff9e8e1001
285ca89d1d3ea45d35832bc6d9827f834b3bfe21
63463447d29550c3734f621be02ec85290fbdf4612f79f9fad7e94f7e066dcb0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63463447D29550C3734F621BE02EC85290FBDF4612F79F9FAD7E94F7E066DCB0"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4090
Expires: Sat, 25 Mar 2023 23:41:37 GMT
Date: Sat, 25 Mar 2023 22:33:27 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: OczmN7kBEC6n3KBR+v9nui9fC68MoiiyW4DRL2SrfpBUBpYo5zMWm46hE5q/lboCstyP4Ub4M8E=
x-amz-request-id: GZVT0CT7SPYDFFYJ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 21:55:04 GMT
age: 2303
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
promotions.betfred.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3
200 OK 22 kB URL HTTP/1.1 promotions.betfred.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2adf65596cc8f1fb6fd3a35f1562b7a3
aba41ca16ca13f9165646836bc92a425cce4c55f
f4d56917ad1ff9c0f5cbe08315e1eba36e13017844c7f906b30326829af63a8c
NIDS Severity Alert suricata medium ETPRO HUNTING Observed Suspicious Hex Encoded String Inbound (decodeURIComponent)
GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3 HTTP/1.1
Host: promotions.betfred.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://promotions.betfred.com/
Cookie: visid_incap_2382758=VP7fhAwiQbWLGuPSwoa9cLZ2H2QAAAAAQUIPAAAAAACmWG4XgRJ8kkZ9OoHrV5/c; incap_ses_277_2382758=vqlnAPLYfzIQqof7mhrYA7Z2H2QAAAAAKLomsh/zoJzlZR97/RzocQ==
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: application/javascript
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 21942
promotions.betfred.com/uture-it-no-ouetst-Goose-That-ward-Such-thers-of
200 OK 68 kB URL HTTP/1.1 promotions.betfred.com/uture-it-no-ouetst-Goose-That-ward-Such-thers-of
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 38649e698273d72b689b81cff2c6ea7d
cf6d4b0e4e0d2140805ac2299950fd096eea44b9
1b1331aef33c02d64908d7d868f526f9861503d20875fcaf055d9cbd9c9d7eb0
GET /uture-it-no-ouetst-Goose-That-ward-Such-thers-of HTTP/1.1
Host: promotions.betfred.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://promotions.betfred.com/
Cookie: visid_incap_2382758=VP7fhAwiQbWLGuPSwoa9cLZ2H2QAAAAAQUIPAAAAAACmWG4XgRJ8kkZ9OoHrV5/c; incap_ses_277_2382758=vqlnAPLYfzIQqof7mhrYA7Z2H2QAAAAAKLomsh/zoJzlZR97/RzocQ==
HTTP/1.1 200 OK
content-type: text/javascript
cache-control: max-age=60
content-encoding: gzip
access-control-allow-origin: *
server-timing: bon, total;dur=9.147188
server: bon
keep-alive: timeout=60
content-length: 68239
date: Sat, 25 Mar 2023 22:33:26 GMT
Set-Cookie: nlbi_2382758_2147483392=Ig6dUMP2eUwBcpt7PO0IowAAAAALfhnqSqU265r6qahr1BDC; path=/; Domain=.betfred.com
X-CDN: Imperva
X-Iinfo: 13-27699959-27699961 NNNN CT(5 6 0) RT(1679783606442 2) q(0 0 0 -1) r(0 0)
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 22:33:27 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
promotions.betfred.com/_Incapsula_Resource?SWKMTFSR=1&e=0.6105504817837334
200 OK 1 B URL HTTP/1.1 promotions.betfred.com/_Incapsula_Resource?SWKMTFSR=1&e=0.6105504817837334
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /_Incapsula_Resource?SWKMTFSR=1&e=0.6105504817837334 HTTP/1.1
Host: promotions.betfred.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://promotions.betfred.com/
Cookie: visid_incap_2382758=VP7fhAwiQbWLGuPSwoa9cLZ2H2QAAAAAQUIPAAAAAACmWG4XgRJ8kkZ9OoHrV5/c; incap_ses_277_2382758=vqlnAPLYfzIQqof7mhrYA7Z2H2QAAAAAKLomsh/zoJzlZR97/RzocQ==; nlbi_2382758_2147483392=Ig6dUMP2eUwBcpt7PO0IowAAAAALfhnqSqU265r6qahr1BDC; ___utmvc=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
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: text/plain
X-Robots-Tag: noindex
Content-Length: 1
promotions.betfred.com/_Incapsula_Resource?CWUDNSAI=1&xinfo=6-6938192-0%200NNN%20RT%281679783606001%2057%29%20q%280%20-1%20-1%200%29%20r%280%20-1%29%20B16%20U18&incident_id=277000630030543376-29224434968891334&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
200 OK 3.7 kB URL HTTP/1.1 promotions.betfred.com/_Incapsula_Resource?CWUDNSAI=1&xinfo=6-6938192-0%200NNN%20RT%281679783606001%2057%29%20q%280%20-1%20-1%200%29%20r%280%20-1%29%20B16%20U18&incident_id=277000630030543376-29224434968891334&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4072), with CRLF line terminators
Hash 8352c920795f65c68f552494c37f63d7
1f010a8117a71f65dd95a4089dc04610f6424a5d
000b1fc229225a57e9f8cdb8ee7737a3ba6d88ca5c08cc2913feb429aeb35804
GET /_Incapsula_Resource?CWUDNSAI=1&xinfo=6-6938192-0%200NNN%20RT%281679783606001%2057%29%20q%280%20-1%20-1%200%29%20r%280%20-1%29%20B16%20U18&incident_id=277000630030543376-29224434968891334&edet=16&cinfo=ffffffff&rpinfo=0&mth=GET HTTP/1.1
Host: promotions.betfred.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://promotions.betfred.com/
Cookie: visid_incap_2382758=VP7fhAwiQbWLGuPSwoa9cLZ2H2QAAAAAQUIPAAAAAACmWG4XgRJ8kkZ9OoHrV5/c; incap_ses_277_2382758=vqlnAPLYfzIQqof7mhrYA7Z2H2QAAAAAKLomsh/zoJzlZR97/RzocQ==; nlbi_2382758_2147483392=Ig6dUMP2eUwBcpt7PO0IowAAAAALfhnqSqU265r6qahr1BDC; ___utmvc=55IvH4J4HALzsSyZWnc2Q2Hh3HGDm23bWAXumK4P5KUvQQ/REmF2oKxkHVn5HXmx1cHZaDD/d7UeYqejeSTxnqkqJDAQ5W5u839ane0O2MgjVcbljEXqXTQScENCk3JynRKzDWWQ5eTVRSWS1o61+gW64Squ3GpKOBWpTsARKR5f1wxpdM2JYsd5vz/QNvysx+tyYFsqbV2c33y8PmFVBEvxSzICo1NAjQvZ5okpbPy9KFh/YO7A/xid3vbS4AGnLzouF7CrGa51mbxEX4wnDuGOj6Iz046n+HudBEHfY5uBQKwROPOuTCRFL9I3pDlD6OKNVtzsT2gRJVb8hB4jZyn4zcSYnD/C4Q0WmzsVDikoU+zhe7SYGxTnizGrIWmgsP1p4c9CBUOCrAivibSwNkvqGnWI/VR0o8YopjbBtcHLg2s/oW2ZzvGspqWRow4DWUgQH4BLeb+NjjKRNluCleT6/nSlCHnLrpdDMCU8l+hsBEQ8Fb+GmHZHqCGQh+DH5MZyvcZ4ogI55oeUCATy5rUWDL57C9pCtsXlXZj6DwumV0a3y1bFo/rKW7FwvSkKgPrpLtYblNBCNoDxQ/LTruzOtMmGijQxXYYHse5I6D1Mw3yWnMClAQiKpr8+wVENSoRcRU6QP2F7bMuiakbHxm/I7TFChP+jyC05CuCcVV93GruO6xofk+vqrMJQgvBnP45/slBqr49oMRRygzTR1JMS98JTyU76zMIxgi1c8wla5Z0I061yZ4NxaOkfBsMXbRm2qrl3SKqVfogig/uoOSpMOh1cpyftCcTZUAfgU0UfPF2wPVtxzxxrLZLSt3j2NjvQP2msZA65HpAOUSXWciVZ/Bh7h+EilOFiNN4xuOIWzwhItjCqEUHSt0o8XW2Z8rxiLuoe8x2tG/8NkSG7YR6zpLj/+bAojTHjEWRYK3Llsjef6VxaYxtYkT1CVlxjTSXMEcL2mTAySOiBSC7Nkhkk3FEM1rFBvMeepOc/IzUY3xp1EY+CUhYLCkJnTdqNppJNIZ0CB45pMrlW3eUMVfAmZqSPbCa39A57AvMFgOansDOlHxBfdFUIVna/dFi99AO2GkG0L/T2iETMxAgdFWrx/yZ3+ybsqguf/uWWQO2l2VFMmKsQZu8/82qKn9Jn9FixiDrT7vpsb1QNUQmGMi/MGR8WrzgqLxcgTltvRz4bL1fdhj99rBcpIvnFSPr1aonMIo23uDB/qQ3kXJrIrxG49KaJsgk6F5noil4ObDJxhSWnz5+PfAmPUUx/Y76tlSO9lDHhUUhl73HFmtFa9JsjpZZ2Bp3hmkbY3/VfdcU6J1SsamQ86cy5w8qZikirFK4vz+0RrZ8izrFX0lhr0mDUM5W002kdkoPz9eKkQLy579+mnv/bXrG41FF3BgjEuvCs1twTyAz0dxWAYGmoYubCa8F4HbVRrTxUtz25q5dhlOkU1udqxyEXMZmdRTblEpssw5pkyfHD1CW0SUXFLo5g3YdX/gB5+hgEVFP22MJJzn/iXwbD0AoxT39Nzuz+NoxSoEoS/L2c3FDoUawyjVVdPm7C3Slz1179mtZm10PtLuT5x+ghZjBdA9P5AGTL42BA9HXNhRARB+xWPaMt/PHLDa+ErhIKY9Rcc3QpW2KD+Vm4EHPzeU3NWaT8z9GfKLcqDrc+kpmD4+qkPxCY1YqXFwIW9ldCS9hdzutJd6wFXpoE+qvCHw77ABi5sJI6nvawVKG5flbUpnh/GJP0C8latUwrtFPPaiHZI+9hdMvYoTK9p3P2nXfNHZUpzVnbn4gHFI081KJ8peJPqQyJSKyXdo4E2nZzG53lsCm2KVYneo/LrVkmLe0A7+xGR+zXxv0RWtZKpjQcOxy0uY+kEG1an/HHItrBUhy0QAq5WGwnfEZFHL8vJjgr1X/iGGdg8u0gzuy3K00/QN62T/fm+0lU/VeTsv3HQ1MEb/eBUeVoNy88CPHS0rX9TK/eTUptZIPnVvz7x/ev0FDEhAz+wDS+ZSW9e6uLbMAq34+kZ/692DpGauffHQpKwkdjQp6FCwBze+1GsGP4yUutFVs3st1yjmpb8uyAVOPlTT70+4FRGZWJmNAit32Gmd522/e95u706rgiQSRqjUEwvphj6bMKZ6uftW3sqPd8v/LobpvLgDyJI25ArfVGKsD/Q4oOpQP0HWaUFwrPy4tT+P2ZhhU9m7+yRr474gWuJsuFtKqqjRyh/txroz6W+ISzOWovJJZjA6LjS7ru83wdsvdKXI4Mas3bup7pDZv2M52uPjK6yOXPa0MIfnP7j9I68ERrtmlH7B8XR3OJXp2QqJPj8nc7FJzRSQFmUvJHKfdOR2eO/kBGmJWQOV3w6q58cPFk+NqfMdhivTB3z/NbQebhd845AojkEJPj/eLomoCJkAcGVEpx/La+Lk+gwAE0dd3Nq+DKw1sWzz/2iZISHPrA8KoGFunqn0lhWV/pXPS5dZNlVXmCLol9GR6M7ZFw5WdWcQYbJ8iy0d6r0zFQO7mkps+IONO02/C60uzmJ80JmImyoO3unHW0QBpajKfMZCHGbPfQB3zYPBqbLED0JRl6WNewggFcrBjwp/8tgocLas9aZpiMvZh740P1phcRt0kGFPa8oEuVUdiuQ02Nw7m6vaH1eTj/QlD24Lpznn2PBtO3xAJbL503v64tghpcg2B0PePBIwZ/fozSqcal3Ual4dzrEDdEXSxkaWdlc3Q9MTg1NTk3LHM9YTc3ZTgyYTE4ZDgzOTJhYjlkNzhhMzhkOTI2OWEyNzk4ZDhmN2U2YTdiYWU3MTlmNjA3MTYwNjU4NjljNjE5ZTc4NzlhZWE1OTRhZjcyNzI=
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Content-Type: text/html
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 3749
promotions.betfred.com/favicon.ico
403 Forbidden 809 B URL HTTP/1.1 promotions.betfred.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (809), with no line terminators
Hash 903e050270441099d84e38d877413aec
52ca7ba75d91d641de62b137bb7e3abdfa8d916a
2a8cec7fd651706248fbe3329fd5db97bbac66867a24a67a3ce457f9c9a3da5c
GET /favicon.ico HTTP/1.1
Host: promotions.betfred.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://promotions.betfred.com/
Cookie: visid_incap_2382758=VP7fhAwiQbWLGuPSwoa9cLZ2H2QAAAAAQUIPAAAAAACmWG4XgRJ8kkZ9OoHrV5/c; incap_ses_277_2382758=vqlnAPLYfzIQqof7mhrYA7Z2H2QAAAAAKLomsh/zoJzlZR97/RzocQ==; nlbi_2382758_2147483392=Ig6dUMP2eUwBcpt7PO0IowAAAAALfhnqSqU265r6qahr1BDC; ___utmvc=55IvH4J4HALzsSyZWnc2Q2Hh3HGDm23bWAXumK4P5KUvQQ/REmF2oKxkHVn5HXmx1cHZaDD/d7UeYqejeSTxnqkqJDAQ5W5u839ane0O2MgjVcbljEXqXTQScENCk3JynRKzDWWQ5eTVRSWS1o61+gW64Squ3GpKOBWpTsARKR5f1wxpdM2JYsd5vz/QNvysx+tyYFsqbV2c33y8PmFVBEvxSzICo1NAjQvZ5okpbPy9KFh/YO7A/xid3vbS4AGnLzouF7CrGa51mbxEX4wnDuGOj6Iz046n+HudBEHfY5uBQKwROPOuTCRFL9I3pDlD6OKNVtzsT2gRJVb8hB4jZyn4zcSYnD/C4Q0WmzsVDikoU+zhe7SYGxTnizGrIWmgsP1p4c9CBUOCrAivibSwNkvqGnWI/VR0o8YopjbBtcHLg2s/oW2ZzvGspqWRow4DWUgQH4BLeb+NjjKRNluCleT6/nSlCHnLrpdDMCU8l+hsBEQ8Fb+GmHZHqCGQh+DH5MZyvcZ4ogI55oeUCATy5rUWDL57C9pCtsXlXZj6DwumV0a3y1bFo/rKW7FwvSkKgPrpLtYblNBCNoDxQ/LTruzOtMmGijQxXYYHse5I6D1Mw3yWnMClAQiKpr8+wVENSoRcRU6QP2F7bMuiakbHxm/I7TFChP+jyC05CuCcVV93GruO6xofk+vqrMJQgvBnP45/slBqr49oMRRygzTR1JMS98JTyU76zMIxgi1c8wla5Z0I061yZ4NxaOkfBsMXbRm2qrl3SKqVfogig/uoOSpMOh1cpyftCcTZUAfgU0UfPF2wPVtxzxxrLZLSt3j2NjvQP2msZA65HpAOUSXWciVZ/Bh7h+EilOFiNN4xuOIWzwhItjCqEUHSt0o8XW2Z8rxiLuoe8x2tG/8NkSG7YR6zpLj/+bAojTHjEWRYK3Llsjef6VxaYxtYkT1CVlxjTSXMEcL2mTAySOiBSC7Nkhkk3FEM1rFBvMeepOc/IzUY3xp1EY+CUhYLCkJnTdqNppJNIZ0CB45pMrlW3eUMVfAmZqSPbCa39A57AvMFgOansDOlHxBfdFUIVna/dFi99AO2GkG0L/T2iETMxAgdFWrx/yZ3+ybsqguf/uWWQO2l2VFMmKsQZu8/82qKn9Jn9FixiDrT7vpsb1QNUQmGMi/MGR8WrzgqLxcgTltvRz4bL1fdhj99rBcpIvnFSPr1aonMIo23uDB/qQ3kXJrIrxG49KaJsgk6F5noil4ObDJxhSWnz5+PfAmPUUx/Y76tlSO9lDHhUUhl73HFmtFa9JsjpZZ2Bp3hmkbY3/VfdcU6J1SsamQ86cy5w8qZikirFK4vz+0RrZ8izrFX0lhr0mDUM5W002kdkoPz9eKkQLy579+mnv/bXrG41FF3BgjEuvCs1twTyAz0dxWAYGmoYubCa8F4HbVRrTxUtz25q5dhlOkU1udqxyEXMZmdRTblEpssw5pkyfHD1CW0SUXFLo5g3YdX/gB5+hgEVFP22MJJzn/iXwbD0AoxT39Nzuz+NoxSoEoS/L2c3FDoUawyjVVdPm7C3Slz1179mtZm10PtLuT5x+ghZjBdA9P5AGTL42BA9HXNhRARB+xWPaMt/PHLDa+ErhIKY9Rcc3QpW2KD+Vm4EHPzeU3NWaT8z9GfKLcqDrc+kpmD4+qkPxCY1YqXFwIW9ldCS9hdzutJd6wFXpoE+qvCHw77ABi5sJI6nvawVKG5flbUpnh/GJP0C8latUwrtFPPaiHZI+9hdMvYoTK9p3P2nXfNHZUpzVnbn4gHFI081KJ8peJPqQyJSKyXdo4E2nZzG53lsCm2KVYneo/LrVkmLe0A7+xGR+zXxv0RWtZKpjQcOxy0uY+kEG1an/HHItrBUhy0QAq5WGwnfEZFHL8vJjgr1X/iGGdg8u0gzuy3K00/QN62T/fm+0lU/VeTsv3HQ1MEb/eBUeVoNy88CPHS0rX9TK/eTUptZIPnVvz7x/ev0FDEhAz+wDS+ZSW9e6uLbMAq34+kZ/692DpGauffHQpKwkdjQp6FCwBze+1GsGP4yUutFVs3st1yjmpb8uyAVOPlTT70+4FRGZWJmNAit32Gmd522/e95u706rgiQSRqjUEwvphj6bMKZ6uftW3sqPd8v/LobpvLgDyJI25ArfVGKsD/Q4oOpQP0HWaUFwrPy4tT+P2ZhhU9m7+yRr474gWuJsuFtKqqjRyh/txroz6W+ISzOWovJJZjA6LjS7ru83wdsvdKXI4Mas3bup7pDZv2M52uPjK6yOXPa0MIfnP7j9I68ERrtmlH7B8XR3OJXp2QqJPj8nc7FJzRSQFmUvJHKfdOR2eO/kBGmJWQOV3w6q58cPFk+NqfMdhivTB3z/NbQebhd845AojkEJPj/eLomoCJkAcGVEpx/La+Lk+gwAE0dd3Nq+DKw1sWzz/2iZISHPrA8KoGFunqn0lhWV/pXPS5dZNlVXmCLol9GR6M7ZFw5WdWcQYbJ8iy0d6r0zFQO7mkps+IONO02/C60uzmJ80JmImyoO3unHW0QBpajKfMZCHGbPfQB3zYPBqbLED0JRl6WNewggFcrBjwp/8tgocLas9aZpiMvZh740P1phcRt0kGFPa8oEuVUdiuQ02Nw7m6vaH1eTj/QlD24Lpznn2PBtO3xAJbL503v64tghpcg2B0PePBIwZ/fozSqcal3Ual4dzrEDdEXSxkaWdlc3Q9MTg1NTk3LHM9YTc3ZTgyYTE4ZDgzOTJhYjlkNzhhMzhkOTI2OWEyNzk4ZDhmN2U2YTdiYWU3MTlmNjA3MTYwNjU4NjljNjE5ZTc4NzlhZWE1OTRhZjcyNzI=
HTTP/1.1 403 Forbidden
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 809
X-Iinfo: 13-27699959-0 0CNN RT(1679783606442 175) q(0 -1 -1 -1) r(0 -1) B16
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 63ca8c4e17e0b692d1829cd62b9af3af
d0bbecbe0b93ea21026898dbd13edee5fc071cb2
1208545ecf01edb7bcef0b3c288d9edd34d2034c7404ba68a64c2ef251cb42f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 22:33:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700&display=swap
IP
Hash 75b11d83a4c034532a1ff6576d6d67cf
7ba1308c07c899462cae4d335b779af44ea3d57d
682442efd2816344847a307f98a63c9f81e088046ed9142d30bf5378781ced06
GET /css2?family=Inter:wght@300;400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://promotions.betfred.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 25 Mar 2023 22:33:27 GMT
date: Sat, 25 Mar 2023 22:33:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 22:33:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 22:33:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
200 OK 38 kB URL HTTP/2 fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 37924, version 1.0\012- data
Hash e08be6d5d433944f7ad52902e4d24db5
e2600c1d60d12d397b3ee44411a021231d71e974
450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e
GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://promotions.betfred.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:43 GMT
expires: Sat, 23 Mar 2024 10:26:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 20:54:46 GMT
content-type: font/woff2
age: 130004
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 22:33:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 22:33:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 22:33:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promotions.betfred.com/uture-it-no-ouetst-Goose-That-ward-Such-thers-of?d=promotions.betfred.com
200 OK 572 B URL HTTP/1.1 promotions.betfred.com/uture-it-no-ouetst-Goose-That-ward-Such-thers-of?d=promotions.betfred.com
IP
File type JSON data\012- , ASCII text, with very long lines (677)
Hash a1c11e1035d3b946fd7b422e0b1b7239
2dfb377e296c014b79f0b4c1e67d0f5ff2c68c47
f3a909be221a12d3c5abc7daa7a19b79fa2b450eaff7db32cf01e1bd470d6a70
POST /uture-it-no-ouetst-Goose-That-ward-Such-thers-of?d=promotions.betfred.com HTTP/1.1
Host: promotions.betfred.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json; charset=utf-8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://promotions.betfred.com/
Content-Type: text/plain; charset=utf-8
Origin: http://promotions.betfred.com
Content-Length: 24347
Connection: keep-alive
Cookie: visid_incap_2382758=VP7fhAwiQbWLGuPSwoa9cLZ2H2QAAAAAQUIPAAAAAACmWG4XgRJ8kkZ9OoHrV5/c; incap_ses_277_2382758=vqlnAPLYfzIQqof7mhrYA7Z2H2QAAAAAKLomsh/zoJzlZR97/RzocQ==; nlbi_2382758_2147483392=Ig6dUMP2eUwBcpt7PO0IowAAAAALfhnqSqU265r6qahr1BDC; ___utmvc=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
HTTP/1.1 200 OK
content-type: application/json
cache-control: no-cache, no-store
access-control-allow-origin: *
server-timing: bon, total;dur=5.199007
server: bon
keep-alive: timeout=60
date: Sat, 25 Mar 2023 22:33:27 GMT
Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Mon, 20 Mar 2023 22:20:16 GMT
nlbi_2382758_2147483392=oxKeWShmEkhVgvgnPO0IowAAAAD5b4duc4CtbSK/xgB8CLj2; path=/; Domain=.betfred.com
X-CDN: Imperva
Content-Encoding: gzip
Transfer-Encoding: chunked
X-Iinfo: 14-40111802-40111840 NNYN CT(4 5 0) RT(1679783606442 682) q(0 0 0 -1) r(0 0) U6
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 717ebcc65cb1390c2509851bac7b5878
1e04e3058329f3809bc01022d441172dcacc1aaa
3c8d41efe14dc75e001ce50aae65e133d90bcb2e2f86b2426cefe7abe4c7b588
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8D41EFE14DC75E001CE50AAE65E133D90BCB2E2F86B2426CEFE7ABE4C7B588"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8028
Expires: Sun, 26 Mar 2023 00:47:15 GMT
Date: Sat, 25 Mar 2023 22:33:27 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9b0GCb8YVkKti6M5sJEV4g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: n7yBG5Plou1bntBEWTLaZH7Wp60=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8218
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 22:33:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8218
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 22:33:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8218
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 22:33:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8218
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 22:33:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8218
Expires: Sun, 26 Mar 2023 00:50:27 GMT
Date: Sat, 25 Mar 2023 22:33:29 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5773974a7341690f006b052ad02c94db
1b11316c952e2195da1646dd94671669e7e3bc2b
a06b72138745500cacc919fea29536ebd4188a1c483f6123e3402458e299f16a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7800
x-amzn-requestid: bad99b1e-3923-4de9-8bea-4dd04e96f7cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTigfFGcIAMFdBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e179c-0826b92d4c4af16553503600;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:24 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 9AGLmjvUSTKIsYIWECOR8QwdF4PP1tP1TweUm0VYvxQ0qskqj3YuLA==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:43:55 GMT
age: 2974
etag: "1b11316c952e2195da1646dd94671669e7e3bc2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: I3GuoZ4ZxAtz0sKe3wrW67aitLlCAbaZkiPw23fl0F3FoumJDEnXiQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 05:56:24 GMT
age: 59825
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07b6f4d1-af89-4aaf-acec-609bb76366de.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07b6f4d1-af89-4aaf-acec-609bb76366de.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70169fbc493bf12f91f072aa3a30ddde
4cd24b81bd6ade3ab5ff90fc88b0f7497e93391d
8b5fc3c8421d5696522231c3490a0853709897f5c9b645bd5e84398cf84089aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07b6f4d1-af89-4aaf-acec-609bb76366de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12071
x-amzn-requestid: 02bb2a93-c0aa-4d43-aa99-759a0418bc20
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTigfGHYoAMF8BQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e179c-2258162e1901b5cd6e7144d3;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:24 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: FP8E5X0_kcH_Mzwx-UUcFox-uhJQwMzUVQAr25LSB8SWzr39uiusHw==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:47:25 GMT
age: 2764
etag: "4cd24b81bd6ade3ab5ff90fc88b0f7497e93391d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aecd210f66f83c73c3450d047ae7448a
d68861e96e12e8a3f293dbae8b687f05b6e15afb
22b69c41c56e5538d91f824d5dc2e63ab5563f99ae8e429c9166f4b397cacd0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5296
x-amzn-requestid: 11fdf0c8-244c-4cd5-bfa7-4c77d777174f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiuzEqkIAMFXOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17f8-5c241d63598dbf595b54ead5;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:36:56 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: sDPb8MmkvC7gaHfKppk2TcoQcV17zuGzrryo6s10PczAg9NUbtEDEA==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:57:15 GMT
age: 2174
etag: "d68861e96e12e8a3f293dbae8b687f05b6e15afb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dd191e3a122d6e31f81e6e9d434c58d6
aec88022970c93289434f8097e4a663da33e5271
1f00c901ef479637ec703d7924526a970cb13dd2635b2bbb68b285df9d98e011
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6185
x-amzn-requestid: 223de50b-9a7e-4ac7-9305-336658eec4ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiwYHoLoAMFXtg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e1802-226bd8524ade75234053ff50;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:37:06 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ye0ADORg1hFVLxcNVj-qS60tlfguOEtyTx_XFU4ooJOcDHqNsqV3kw==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:56:18 GMT
age: 2231
etag: "aec88022970c93289434f8097e4a663da33e5271"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 73f9697594d173d623b331b5c35eab8d
6323f751f6b7517f062a0442480f672086ea02a1
116cb71658b31e87f19c390b242c684f6505cc8edf90b7fc934ac726fc7ddd18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8635
x-amzn-requestid: fc715b03-f48f-4300-b752-ab157a684f08
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTihcETyIAMFhYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17a2-68f685ec0f50dae026ea3f64;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:30 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: ipA8JbPC-mLjFtyQBf0Phqw97x9PaZ-zj6KbgSHjRMeI3YUB62j-6A==
via: 1.1 ba490acb2ea716cd57876286ed686786.cloudfront.net (CloudFront), 1.1 0cf6c59c77f0fff670ae085179adc458.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:45:56 GMT
age: 2853
etag: "6323f751f6b7517f062a0442480f672086ea02a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
45.60.124.248
23.36.76.226
0.0.0.0