188.42.218.249/6440905163d1260cab2a3b524d7b70dc
188.42.218.249200 OK 1.3 kB URL HTTP/1.1 188.42.218.249/6440905163d1260cab2a3b524d7b70dc
IP 188.42.218.249:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (517)
Hash f4edd4068919c0e515aaf55d7a3fc2f8
ac6b1799f2b20affdee65eef5ed9465445c79a87
c4737d28308f9300b6f1ba975d6d3faf207ee64c36f01ae637f053f2b4d140b7
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /6440905163d1260cab2a3b524d7b70dc HTTP/1.1
Host: 188.42.218.249
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: fasthttp
Date: Tue, 13 Dec 2022 02:07:51 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1287
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b642ec5702fb818c5d1c67168cc68fdb
015146489a8e7fcb4ba0ba74cfe757a072705f93
4846d047a23903856bd113d02639ce7e08a1e40030151d302295b2d12df98ffc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4846D047A23903856BD113D02639CE7E08A1E40030151D302295B2D12DF98FFC"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2163
Expires: Tue, 13 Dec 2022 02:43:54 GMT
Date: Tue, 13 Dec 2022 02:07:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3c0c53379f331e934f61070074d41035
420f6e542cbf741838566f22e475a80e2f600d21
4b7213ec107cdf1c2cd61a124453fb682ec291af0004d071105c87e2fe7528f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B7213EC107CDF1C2CD61A124453FB682EC291AF0004D071105C87E2FE7528F5"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18720
Expires: Tue, 13 Dec 2022 07:19:51 GMT
Date: Tue, 13 Dec 2022 02:07:51 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 13 Dec 2022 01:33:44 GMT
content-type: application/json
age: 2047
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d29881eeb0456eff8cf415ad2ce64ba0
e3cfdd5f56ff88066257ec8f4726f53e3a733bd3
2cd90072f113163f976ddb8bc7017884efd3f764e7e8961b04e3ba5ec0a17d85
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CD90072F113163F976DDB8BC7017884EFD3F764E7E8961B04E3BA5EC0A17D85"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5744
Expires: Tue, 13 Dec 2022 03:43:35 GMT
Date: Tue, 13 Dec 2022 02:07:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: n0KQiXPZWiP4ZopB4W2jjeL8cth4Dw61hwtTi3pZABO62maKwWT6YbBbbH1PBgh0YsLD92L2nEc=
x-amz-request-id: 9NJ60XEXF7TB37T4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 13 Dec 2022 01:51:43 GMT
age: 968
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
188.42.218.249/favicon.ico
188.42.218.249404 Not Found 9 B URL HTTP/1.1 188.42.218.249/favicon.ico
IP 188.42.218.249:0
File type ASCII text, with no line terminators
Hash 9e076f5885f5cc16a4b5aeb8de4adff5
475c848673a3f79fa778f01c2bd5a721d4c41707
e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: 188.42.218.249
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.42.218.249/6440905163d1260cab2a3b524d7b70dc
HTTP/1.1 404 Not Found
Server: fasthttp
Date: Tue, 13 Dec 2022 02:07:51 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 9
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:07:51 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
top-conttent.com/f2c7a87a-91bf-4ace-9c70-10ed6a868a21?zoneid=5398955&bannerid=15911755&browser=firefox&os=%7bos%7d&device=%7bdevice%7d®ion=%7bregion%7d&isp=%7bisp%7d&useragent=%7buseragent%7d&language=%7blanguage%7d&connectiontype=%7bconnection.type%7d&cost=0.0078&visitor_id=$%7bSUBID%7d
18.193.209.105302 Found 0 B URL HTTP/2 top-conttent.com/f2c7a87a-91bf-4ace-9c70-10ed6a868a21?zoneid=5398955&bannerid=15911755&browser=firefox&os=%7bos%7d&device=%7bdevice%7d®ion=%7bregion%7d&isp=%7bisp%7d&useragent=%7buseragent%7d&language=%7blanguage%7d&connectiontype=%7bconnection.type%7d&cost=0.0078&visitor_id=$%7bSUBID%7d
IP 18.193.209.105:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /f2c7a87a-91bf-4ace-9c70-10ed6a868a21?zoneid=5398955&bannerid=15911755&browser=firefox&os=%7bos%7d&device=%7bdevice%7d®ion=%7bregion%7d&isp=%7bisp%7d&useragent=%7buseragent%7d&language=%7blanguage%7d&connectiontype=%7bconnection.type%7d&cost=0.0078&visitor_id=$%7bSUBID%7d HTTP/1.1
Host: top-conttent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://188.42.218.249/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 13 Dec 2022 02:07:52 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://bndl-trp.com/l0c8v/index.html?brand=Desktop&model=Desktop&clickid=&cep=KPBeMUgYDbGlExgHjOdNPbTv0CUkEfHsLN3dacQYll6VOOinEbwpnUnLMNf1HXyd5SHrTftmHRLDISbT_Vk1nmjpTME5xmo23fnvXNrGUOUcwAgiM7WtjJF434QjACiHWF3coSrYF3kD5JIhJPWW04Iq9jPGJjirCmXUYFxnEkA3DqVI24K_fiOAY1LKwmLmyk1vj1y91Ei7YQplCjNC7yEczrKM5_Wz675K_Fr2HjnWns8cg5FvzFpPsGRRWA-foav7HVMmWMonirRQFDMAdkIRN1aDQaJuPzXKgMOHKP_CAahOeVDZjiDEO0W4I7ErCjVS5ok7juWHvrAJbd1_sI3q1-WB1SlvL3lIV7mNPKlOx4Q_lw8oUxKDdI9hkMwePq8gXGrikMbOIiYI1mqCjGpLZiXEH1ACZJ-qjFdTkUbvDZxP0Tyj5cSGZNFbmk2GgeTrrsWpgLdFrsa_BgKds877BWQIBUUMXi5aE--tgFygA4IGClqbiaWGE-vlWZ5iUTzMT5RLu9Eq8XEMSa7HEL0YmSf-MvAbex-kiab_7eaqOM2yTo3R9kb8tsoCTmKokRXJpPKXh5-YLidpMWBH4NgcDEVGMwG_IgrwbivA4P8&lptoken=1615708a892890577265&zoneid=5398955&bannerid=15911755&browser=firefox&os=%7Bos%7D&device=%7Bdevice%7D®ion=%7Bregion%7D&isp=%7Bisp%7D&useragent=%7Buseragent%7D&language=%7Blanguage%7D&connectiontype=%7Bconnection.type%7D&cost=0.0078&visitor_id=%24%7BSUBID%7D
pragma: no-cache
set-cookie: f2c7a87a-91bf-4ace-9c70-10ed6a868a21-v4=89X37YYoC87H4ucX-uXbyRuHqOVr4cj7wilCAwM1y68; Max-Age=86400; Expires=Wed, 14-Dec-2022 02:07:52 GMT; Domain=top-conttent.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=XTkVyJ3BDPJS_vHdwPO1ym1AoBkVnS2VlWwvlOyWFYgpLKr_i3woUY3pGsETSPLmCqC-4vxu_-jKn-SB-GaVQOkX5wm2qql_J0jtxMJuE0LNhE0xLWCaY3RRWpOxop7Per1C227Esdck7OFhyxAW1Ku9n6KYq9JyDbEC6DtTDJ5iBLmmqG0sEquGD4DTOyoYUANyXv4LD3CLcKJmWdqG3Ho6l4vcqAq6CXqbHf3ZA7-8WAkhirkW8WH87axZAcbCBhqt4QXSANTww5Y_uN8paBZlqZy0dox0nYkHUvllogLqZZWzQvagGFl93wNRY1TybSOIfoY6xJCGGpHwP1-u3HRpgyGbziuZEo923c9YK00RfwJ77lQbtYz4WgXY-hy9ogtmRz55eBDulJS_ZMt6nyLjdXZtXoLDif14gUsTn0HRwaqIVfZCtJ0-UsDtb_3ZINzd2uJHlpEfiFgiPmU_Ted5xeodZjbna8a1MxFyvuI1jQmL6LAmoKi39n7MC8b3zwTMFImz5K4AVqm2IhpkXifyjzRBgSrXrfFO2BI8p_bzw9T8cdhed4y1O_1cVugC41QSNkZUcTUTB4RsEvnkqz4FtYjwJGpaJ0TKaEjcseo; Max-Age=86400; Expires=Wed, 14-Dec-2022 02:07:52 GMT; Domain=top-conttent.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 13 Dec 2022 01:07:57 GMT
age: 3595
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e1cf7015f35d1166723c7a258609a71d
14a5790ca4ef2f01764fc77a92a8d7696b6fc055
fb2068923f7119075d7024941bc57e06011aa58343e008eb377ff0b5cb48bf77
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FB2068923F7119075D7024941BC57E06011AA58343E008EB377FF0B5CB48BF77"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8648
Expires: Tue, 13 Dec 2022 04:32:00 GMT
Date: Tue, 13 Dec 2022 02:07:52 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ee19f96e42a0eca99d00c8d91f977c35
3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9
6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6316
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:07:52 GMT
Etag: "6396ef2b-1d7"
Last-Modified: Tue, 13 Dec 2022 00:22:36 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
bndl-trp.com/l0c8v/index.html?brand=Desktop&model=Desktop&clickid=&cep=KPBeMUgYDbGlExgHjOdNPbTv0CUkEfHsLN3dacQYll6VOOinEbwpnUnLMNf1HXyd5SHrTftmHRLDISbT_Vk1nmjpTME5xmo23fnvXNrGUOUcwAgiM7WtjJF434QjACiHWF3coSrYF3kD5JIhJPWW04Iq9jPGJjirCmXUYFxnEkA3DqVI24K_fiOAY1LKwmLmyk1vj1y91Ei7YQplCjNC7yEczrKM5_Wz675K_Fr2HjnWns8cg5FvzFpPsGRRWA-foav7HVMmWMonirRQFDMAdkIRN1aDQaJuPzXKgMOHKP_CAahOeVDZjiDEO0W4I7ErCjVS5ok7juWHvrAJbd1_sI3q1-WB1SlvL3lIV7mNPKlOx4Q_lw8oUxKDdI9hkMwePq8gXGrikMbOIiYI1mqCjGpLZiXEH1ACZJ-qjFdTkUbvDZxP0Tyj5cSGZNFbmk2GgeTrrsWpgLdFrsa_BgKds877BWQIBUUMXi5aE--tgFygA4IGClqbiaWGE-vlWZ5iUTzMT5RLu9Eq8XEMSa7HEL0YmSf-MvAbex-kiab_7eaqOM2yTo3R9kb8tsoCTmKokRXJpPKXh5-YLidpMWBH4NgcDEVGMwG_IgrwbivA4P8&lptoken=1615708a892890577265&zoneid=5398955&bannerid=15911755&browser=firefox&os=%7Bos%7D&device=%7Bdevice%7D®ion=%7Bregion%7D&isp=%7Bisp%7D&useragent=%7Buseragent%7D&language=%7Blanguage%7D&connectiontype=%7Bconnection.type%7D&cost=0.0078&visitor_id=%24%7BSUBID%7D
165.227.26.65200 OK 4.0 kB URL HTTP/2 bndl-trp.com/l0c8v/index.html?brand=Desktop&model=Desktop&clickid=&cep=KPBeMUgYDbGlExgHjOdNPbTv0CUkEfHsLN3dacQYll6VOOinEbwpnUnLMNf1HXyd5SHrTftmHRLDISbT_Vk1nmjpTME5xmo23fnvXNrGUOUcwAgiM7WtjJF434QjACiHWF3coSrYF3kD5JIhJPWW04Iq9jPGJjirCmXUYFxnEkA3DqVI24K_fiOAY1LKwmLmyk1vj1y91Ei7YQplCjNC7yEczrKM5_Wz675K_Fr2HjnWns8cg5FvzFpPsGRRWA-foav7HVMmWMonirRQFDMAdkIRN1aDQaJuPzXKgMOHKP_CAahOeVDZjiDEO0W4I7ErCjVS5ok7juWHvrAJbd1_sI3q1-WB1SlvL3lIV7mNPKlOx4Q_lw8oUxKDdI9hkMwePq8gXGrikMbOIiYI1mqCjGpLZiXEH1ACZJ-qjFdTkUbvDZxP0Tyj5cSGZNFbmk2GgeTrrsWpgLdFrsa_BgKds877BWQIBUUMXi5aE--tgFygA4IGClqbiaWGE-vlWZ5iUTzMT5RLu9Eq8XEMSa7HEL0YmSf-MvAbex-kiab_7eaqOM2yTo3R9kb8tsoCTmKokRXJpPKXh5-YLidpMWBH4NgcDEVGMwG_IgrwbivA4P8&lptoken=1615708a892890577265&zoneid=5398955&bannerid=15911755&browser=firefox&os=%7Bos%7D&device=%7Bdevice%7D®ion=%7Bregion%7D&isp=%7Bisp%7D&useragent=%7Buseragent%7D&language=%7Blanguage%7D&connectiontype=%7Bconnection.type%7D&cost=0.0078&visitor_id=%24%7BSUBID%7D
IP 165.227.26.65:0
ASN #14061 DIGITALOCEAN-ASN
Hash 588eafd72de9699a94351b703beda9a4
c3fa7f4f6dbc6aaf71c8e19aad442e95c1b92835
f07d9eaa1b3ba36fb5baa410c25650014bac3b89f7d43eebd74e06073f34bc47
GET /l0c8v/index.html?brand=Desktop&model=Desktop&clickid=&cep=KPBeMUgYDbGlExgHjOdNPbTv0CUkEfHsLN3dacQYll6VOOinEbwpnUnLMNf1HXyd5SHrTftmHRLDISbT_Vk1nmjpTME5xmo23fnvXNrGUOUcwAgiM7WtjJF434QjACiHWF3coSrYF3kD5JIhJPWW04Iq9jPGJjirCmXUYFxnEkA3DqVI24K_fiOAY1LKwmLmyk1vj1y91Ei7YQplCjNC7yEczrKM5_Wz675K_Fr2HjnWns8cg5FvzFpPsGRRWA-foav7HVMmWMonirRQFDMAdkIRN1aDQaJuPzXKgMOHKP_CAahOeVDZjiDEO0W4I7ErCjVS5ok7juWHvrAJbd1_sI3q1-WB1SlvL3lIV7mNPKlOx4Q_lw8oUxKDdI9hkMwePq8gXGrikMbOIiYI1mqCjGpLZiXEH1ACZJ-qjFdTkUbvDZxP0Tyj5cSGZNFbmk2GgeTrrsWpgLdFrsa_BgKds877BWQIBUUMXi5aE--tgFygA4IGClqbiaWGE-vlWZ5iUTzMT5RLu9Eq8XEMSa7HEL0YmSf-MvAbex-kiab_7eaqOM2yTo3R9kb8tsoCTmKokRXJpPKXh5-YLidpMWBH4NgcDEVGMwG_IgrwbivA4P8&lptoken=1615708a892890577265&zoneid=5398955&bannerid=15911755&browser=firefox&os=%7Bos%7D&device=%7Bdevice%7D®ion=%7Bregion%7D&isp=%7Bisp%7D&useragent=%7Buseragent%7D&language=%7Blanguage%7D&connectiontype=%7Bconnection.type%7D&cost=0.0078&visitor_id=%24%7BSUBID%7D HTTP/1.1
Host: bndl-trp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://188.42.218.249/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.16.0
date: Tue, 13 Dec 2022 02:07:52 GMT
content-type: text/html
last-modified: Wed, 02 Nov 2022 07:37:33 GMT
etag: W/"63621e3d-2524"
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 98e61b557225f17c810d4956a992813e
044d1d433e66d55033dcfeca4c9ae20c222e8395
b1dff136a4c1d8c0d70d4f828cc402ebb8be9edffebf66e8c3d0915560ffb946
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3775
Cache-Control: max-age=90089
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:07:52 GMT
Etag: "63968ca2-117"
Expires: Wed, 14 Dec 2022 03:09:21 GMT
Last-Modified: Mon, 12 Dec 2022 02:06:26 GMT
Server: ECS (amb/6BA5)
X-Cache: HIT
Content-Length: 279
littlecdn.com/apps/contents/s/4a/2c/19/36c444996f735c0696006f92fd/034723420638.png
104.22.24.116200 OK 6.3 kB URL HTTP/2 littlecdn.com/apps/contents/s/4a/2c/19/36c444996f735c0696006f92fd/034723420638.png
IP 104.22.24.116:0
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Hash 4a2c1936c444996f735c0696006f92fd
14bd6f11317d3196371cb9302c2cea39e86fc609
585e926709c767219ddfed37ee10f83ff1306cba64079f6e3e013f658fb05f1a
GET /apps/contents/s/4a/2c/19/36c444996f735c0696006f92fd/034723420638.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bndl-trp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:07:52 GMT
content-type: image/png
content-length: 6308
last-modified: Fri, 18 Jun 2021 16:24:26 GMT
etag: "60ccc8ba-18a4"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 3703
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b2612dcefb529-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0f27176cca54384e330f7cdb6aadde21
44895fcba5c4886a56b1f6c95816c37bdc5127a2
eaffbdad2ddae08352b408b25954e38c3dc4a2f06495bf6151332af488cf4912
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAFFBDAD2DDAE08352B408B25954E38C3DC4A2F06495BF6151332AF488CF4912"
Last-Modified: Mon, 12 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3938
Expires: Tue, 13 Dec 2022 03:13:30 GMT
Date: Tue, 13 Dec 2022 02:07:52 GMT
Connection: keep-alive
static.steessay.com/templates/_assets/sounds/blip1/default.mp3
139.45.197.152206 Partial Content 6.7 kB URL HTTP/2 static.steessay.com/templates/_assets/sounds/blip1/default.mp3
IP 139.45.197.152:0
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6422f23e1751d74410347e02c0210a60
0e3e65be6b5fbb76f6a52191e973bd37368be204
4fdb5a03ae3f26e801517144609db3589bd0835a686fe11dfe7afddcdb750ef8
GET /templates/_assets/sounds/blip1/default.mp3 HTTP/1.1
Host: static.steessay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://bndl-trp.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 206 Partial Content
server: nginx
date: Tue, 13 Dec 2022 02:07:52 GMT
content-type: audio/mpeg
content-length: 6712
last-modified: Fri, 09 Dec 2022 14:51:21 GMT
vary: Accept-Encoding
etag: "63934b69-1a38"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-range: bytes 0-6711/6712
X-Firefox-Spdy: h2
bndl-trp.com/l0c8v/index.html?brand=Desktop&model=Desktop&clickid=&cep=KPBeMUgYDbGlExgHjOdNPbTv0CUkEfHsLN3dacQYll6VOOinEbwpnUnLMNf1HXyd5SHrTftmHRLDISbT_Vk1nmjpTME5xmo23fnvXNrGUOUcwAgiM7WtjJF434QjACiHWF3coSrYF3kD5JIhJPWW04Iq9jPGJjirCmXUYFxnEkA3DqVI24K_fiOAY1LKwmLmyk1vj1y91Ei7YQplCjNC7yEczrKM5_Wz675K_Fr2HjnWns8cg5FvzFpPsGRRWA-foav7HVMmWMonirRQFDMAdkIRN1aDQaJuPzXKgMOHKP_CAahOeVDZjiDEO0W4I7ErCjVS5ok7juWHvrAJbd1_sI3q1-WB1SlvL3lIV7mNPKlOx4Q_lw8oUxKDdI9hkMwePq8gXGrikMbOIiYI1mqCjGpLZiXEH1ACZJ-qjFdTkUbvDZxP0Tyj5cSGZNFbmk2GgeTrrsWpgLdFrsa_BgKds877BWQIBUUMXi5aE--tgFygA4IGClqbiaWGE-vlWZ5iUTzMT5RLu9Eq8XEMSa7HEL0YmSf-MvAbex-kiab_7eaqOM2yTo3R9kb8tsoCTmKokRXJpPKXh5-YLidpMWBH4NgcDEVGMwG_IgrwbivA4P8&lptoken=1615708a892890577265&zoneid=5398955&bannerid=15911755&browser=firefox&os=%7Bos%7D&device=%7Bdevice%7D®ion=%7Bregion%7D&isp=%7Bisp%7D&useragent=%7Buseragent%7D&language=%7Blanguage%7D&connectiontype=%7Bconnection.type%7D&cost=0.0078&visitor_id=%24%7BSUBID%7D&mprtr=1
165.227.26.65405 Method Not Allowed 157 B URL HTTP/2 bndl-trp.com/l0c8v/index.html?brand=Desktop&model=Desktop&clickid=&cep=KPBeMUgYDbGlExgHjOdNPbTv0CUkEfHsLN3dacQYll6VOOinEbwpnUnLMNf1HXyd5SHrTftmHRLDISbT_Vk1nmjpTME5xmo23fnvXNrGUOUcwAgiM7WtjJF434QjACiHWF3coSrYF3kD5JIhJPWW04Iq9jPGJjirCmXUYFxnEkA3DqVI24K_fiOAY1LKwmLmyk1vj1y91Ei7YQplCjNC7yEczrKM5_Wz675K_Fr2HjnWns8cg5FvzFpPsGRRWA-foav7HVMmWMonirRQFDMAdkIRN1aDQaJuPzXKgMOHKP_CAahOeVDZjiDEO0W4I7ErCjVS5ok7juWHvrAJbd1_sI3q1-WB1SlvL3lIV7mNPKlOx4Q_lw8oUxKDdI9hkMwePq8gXGrikMbOIiYI1mqCjGpLZiXEH1ACZJ-qjFdTkUbvDZxP0Tyj5cSGZNFbmk2GgeTrrsWpgLdFrsa_BgKds877BWQIBUUMXi5aE--tgFygA4IGClqbiaWGE-vlWZ5iUTzMT5RLu9Eq8XEMSa7HEL0YmSf-MvAbex-kiab_7eaqOM2yTo3R9kb8tsoCTmKokRXJpPKXh5-YLidpMWBH4NgcDEVGMwG_IgrwbivA4P8&lptoken=1615708a892890577265&zoneid=5398955&bannerid=15911755&browser=firefox&os=%7Bos%7D&device=%7Bdevice%7D®ion=%7Bregion%7D&isp=%7Bisp%7D&useragent=%7Buseragent%7D&language=%7Blanguage%7D&connectiontype=%7Bconnection.type%7D&cost=0.0078&visitor_id=%24%7BSUBID%7D&mprtr=1
IP 165.227.26.65:0
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash ffff1d95c7126c874e514b1911611b0e
15d3c86579c74ac11a345c93bcf75bfe1b177d10
89113b531706acb62a2c11637048f86f8b3aa2342782736570688169c7186313
POST /l0c8v/index.html?brand=Desktop&model=Desktop&clickid=&cep=KPBeMUgYDbGlExgHjOdNPbTv0CUkEfHsLN3dacQYll6VOOinEbwpnUnLMNf1HXyd5SHrTftmHRLDISbT_Vk1nmjpTME5xmo23fnvXNrGUOUcwAgiM7WtjJF434QjACiHWF3coSrYF3kD5JIhJPWW04Iq9jPGJjirCmXUYFxnEkA3DqVI24K_fiOAY1LKwmLmyk1vj1y91Ei7YQplCjNC7yEczrKM5_Wz675K_Fr2HjnWns8cg5FvzFpPsGRRWA-foav7HVMmWMonirRQFDMAdkIRN1aDQaJuPzXKgMOHKP_CAahOeVDZjiDEO0W4I7ErCjVS5ok7juWHvrAJbd1_sI3q1-WB1SlvL3lIV7mNPKlOx4Q_lw8oUxKDdI9hkMwePq8gXGrikMbOIiYI1mqCjGpLZiXEH1ACZJ-qjFdTkUbvDZxP0Tyj5cSGZNFbmk2GgeTrrsWpgLdFrsa_BgKds877BWQIBUUMXi5aE--tgFygA4IGClqbiaWGE-vlWZ5iUTzMT5RLu9Eq8XEMSa7HEL0YmSf-MvAbex-kiab_7eaqOM2yTo3R9kb8tsoCTmKokRXJpPKXh5-YLidpMWBH4NgcDEVGMwG_IgrwbivA4P8&lptoken=1615708a892890577265&zoneid=5398955&bannerid=15911755&browser=firefox&os=%7Bos%7D&device=%7Bdevice%7D®ion=%7Bregion%7D&isp=%7Bisp%7D&useragent=%7Buseragent%7D&language=%7Blanguage%7D&connectiontype=%7Bconnection.type%7D&cost=0.0078&visitor_id=%24%7BSUBID%7D&mprtr=1 HTTP/1.1
Host: bndl-trp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bndl-trp.com
Connection: keep-alive
Referer: https://bndl-trp.com/l0c8v/index.html?brand=Desktop&model=Desktop&clickid=&cep=KPBeMUgYDbGlExgHjOdNPbTv0CUkEfHsLN3dacQYll6VOOinEbwpnUnLMNf1HXyd5SHrTftmHRLDISbT_Vk1nmjpTME5xmo23fnvXNrGUOUcwAgiM7WtjJF434QjACiHWF3coSrYF3kD5JIhJPWW04Iq9jPGJjirCmXUYFxnEkA3DqVI24K_fiOAY1LKwmLmyk1vj1y91Ei7YQplCjNC7yEczrKM5_Wz675K_Fr2HjnWns8cg5FvzFpPsGRRWA-foav7HVMmWMonirRQFDMAdkIRN1aDQaJuPzXKgMOHKP_CAahOeVDZjiDEO0W4I7ErCjVS5ok7juWHvrAJbd1_sI3q1-WB1SlvL3lIV7mNPKlOx4Q_lw8oUxKDdI9hkMwePq8gXGrikMbOIiYI1mqCjGpLZiXEH1ACZJ-qjFdTkUbvDZxP0Tyj5cSGZNFbmk2GgeTrrsWpgLdFrsa_BgKds877BWQIBUUMXi5aE--tgFygA4IGClqbiaWGE-vlWZ5iUTzMT5RLu9Eq8XEMSa7HEL0YmSf-MvAbex-kiab_7eaqOM2yTo3R9kb8tsoCTmKokRXJpPKXh5-YLidpMWBH4NgcDEVGMwG_IgrwbivA4P8&lptoken=1615708a892890577265&zoneid=5398955&bannerid=15911755&browser=firefox&os=%7Bos%7D&device=%7Bdevice%7D®ion=%7Bregion%7D&isp=%7Bisp%7D&useragent=%7Buseragent%7D&language=%7Blanguage%7D&connectiontype=%7Bconnection.type%7D&cost=0.0078&visitor_id=%24%7BSUBID%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 405 Method Not Allowed
server: nginx/1.16.0
date: Tue, 13 Dec 2022 02:07:52 GMT
content-type: text/html
content-length: 157
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.70.68.230101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.70.68.230:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hvfIarhLHCFrKHw04/oL3Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: RiZKWxNLt1dec1jJV5kUJPgrngQ=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4234
Expires: Tue, 13 Dec 2022 03:18:28 GMT
Date: Tue, 13 Dec 2022 02:07:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4234
Expires: Tue, 13 Dec 2022 03:18:28 GMT
Date: Tue, 13 Dec 2022 02:07:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4234
Expires: Tue, 13 Dec 2022 03:18:28 GMT
Date: Tue, 13 Dec 2022 02:07:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4234
Expires: Tue, 13 Dec 2022 03:18:28 GMT
Date: Tue, 13 Dec 2022 02:07:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4234
Expires: Tue, 13 Dec 2022 03:18:28 GMT
Date: Tue, 13 Dec 2022 02:07:54 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a14c22-5022-4263-af44-d51914a825ed.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a14c22-5022-4263-af44-d51914a825ed.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 82729f01d4f9937407d14605a2b611f4
63ef739dbbcd1238da788c05909df21826d9f37b
4420ac61a207ef4d7899632123af2dd2c7421e6d16a494aea33383d37d603038
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a14c22-5022-4263-af44-d51914a825ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5871
x-amzn-requestid: 0c5fa60d-81f3-4796-966d-cf91b6a28939
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dDWefGstIAMF-zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63979df6-7234498f4094f61107741d1c;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 21:32:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CxVd8_RIj3lEuDAyy9zMdU6jUrRHrosdRCMLCePbaILqq1vqlzvlJg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:47:05 GMT
age: 15649
etag: "63ef739dbbcd1238da788c05909df21826d9f37b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg
34.120.237.76200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 690133687ca909986a7ac4e919193bbb
9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4
d4913048b7f2b341c77a345420a855e6385e00c64ef30f6cf136ad16f6bda771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6711
x-amzn-requestid: ac93518c-b2e1-4995-9152-11c30c05cc9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c9h4oHmiIAMFXQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639549d0-5180e10e467c4c4c5e7fd1f4;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 03:09:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YHHaFWjmRFuBvcFQ6orltY_4JuQEcHhfyjxHO3-XZduh_hEGfPcPoA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 03:38:02 GMT
age: 80992
etag: "9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409bf41a-5f98-441f-a838-34e319b4ffec.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409bf41a-5f98-441f-a838-34e319b4ffec.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9c41a668e81a782c5548ef82bc42df96
6e833f91a12e0beb9014a99c6b49792b81ad8dc2
323a322870127db232648bd70b906f0b62bb24568c7e84a2651141d1ecf7b83f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409bf41a-5f98-441f-a838-34e319b4ffec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7682
x-amzn-requestid: 7f877768-ce73-4ea3-aa53-95ed5886598d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw5VEHzXIAMFqIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903c20-6818fed235383e3c27c355d2;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:09:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9h-nzrNz3zvVEGvlOKHPeHa4zX3zoCYIbMk_G5WzWZAzP6-uZjIPPQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 12:22:55 GMT
age: 49499
etag: "6e833f91a12e0beb9014a99c6b49792b81ad8dc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9051770b3587c195bea670f8820e8cfe
abf58087f0e345202da088238daea85d177b431b
f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8841
x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMWH7MIAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: viqtSt0N4FbMvP-u-vlA4Y8SfzIafFu_4XhqXSKrbItp7gkJDp5PKA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 22:37:58 GMT
age: 12596
etag: "abf58087f0e345202da088238daea85d177b431b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8b0477fb90d103e2155bbf7ab47d877
ab668e755bd742b165fa3ba46a4c486c616a7ff6
40e2282cf64da6034f73a2ff0c0d060550caa364244d5bdf282d2f54719d48ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2263c6ae-1846-44f1-8b25-471bca417daf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4703
x-amzn-requestid: 975cb427-5feb-4c36-bcfe-bed0cc9bd3b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czpW4Hh4IAMFeRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639155c5-63d6d97371f11d6012edae68;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 03:11:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BouIqIrg_vfxBH0weDXiqoEBcSV8_d4qDVB3Er5PeIrZz249iHdqGQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 06:13:00 GMT
age: 71694
etag: "ab668e755bd742b165fa3ba46a4c486c616a7ff6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F011f2c78-7785-4bfa-a0cc-3f1da3373cb7.jpeg
34.120.237.76200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F011f2c78-7785-4bfa-a0cc-3f1da3373cb7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 148429983fce0e20f4de08c2f048471f
f97353ee4ae4ed1475f2095e3bc0f93d24ad848f
10ab479c83787195a0b85caa6335914da01b67ed9bd576f7d6a90278e2698763
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F011f2c78-7785-4bfa-a0cc-3f1da3373cb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5035
x-amzn-requestid: a0a4ef66-8d0c-4be6-867d-be98f4ea65ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cqTXdER6oAMFf-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d98fc-4d6af6b802321b75422f358d;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 07:08:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Neh3ldqYhkn9NKCPWPvw57ghrN6OqiJk60lxnfGfCI-4Y7PXF-ezOA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 16:20:03 GMT
age: 35271
etag: "f97353ee4ae4ed1475f2095e3bc0f93d24ad848f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
littlecdn.com/apps/templates/android-instructions/ios-sys-msg-icon/css/style.css?v=1.2
104.22.24.116200 OK 0 B URL HTTP/2 littlecdn.com/apps/templates/android-instructions/ios-sys-msg-icon/css/style.css?v=1.2
IP 104.22.24.116:0
GET /apps/templates/android-instructions/ios-sys-msg-icon/css/style.css?v=1.2 HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bndl-trp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:07:52 GMT
content-type: text/css
last-modified: Fri, 09 Dec 2022 14:51:21 GMT
vary: Accept-Encoding
etag: W/"63934b69-1525"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 3703
server: cloudflare
cf-ray: 778b2612ecf0b529-OSL
content-encoding: br
X-Firefox-Spdy: h2