r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6579
Expires: Thu, 24 Nov 2022 14:48:10 GMT
Date: Thu, 24 Nov 2022 12:58:31 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5691
Cache-Control: max-age=169651
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:58:31 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 12:06:02 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ns1.100mesa.com/
301 Moved Permanently 228 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f16ab6ab01177b644943ba8a12120253
a66aff4ae3ff0bd7227bf186907a9b9e866d7d54
fd05ba0ccb8c300e9504c7a7b4053695b821897deda3e9628aa4a9571c2871c8
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: ns1.100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 12:58:31 GMT
Server: Apache
Location: https://100mesa.com/
Content-Length: 228
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5949
Expires: Thu, 24 Nov 2022 14:37:40 GMT
Date: Thu, 24 Nov 2022 12:58:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 12:18:58 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2373
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dwoD3T3lPeaSlfXZCTRq+2gE+3wLxuv6kG54vWysqCVYd4xN2adashKpG5/xeKqyymMcqaJLd6A=
x-amz-request-id: 586F3SV6HK12DC53
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 12:43:24 GMT
age: 907
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 12:58:31 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 12:08:53 GMT
cache-control: public,max-age=3600
age: 2978
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3755
Cache-Control: max-age=162653
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 12:58:31 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:09:24 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 97e6fe59873179c3661a942d7c702ba6
ff5f7eae72b367e81314d15e86d6cd40f5c1a22e
cb4c824114873bb4887c24c466804a43a1d35e10840c512dda30697b1299f729
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB4C824114873BB4887C24C466804A43A1D35E10840C512DDA30697B1299F729"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1114
Expires: Thu, 24 Nov 2022 13:17:06 GMT
Date: Thu, 24 Nov 2022 12:58:32 GMT
Connection: keep-alive
100mesa.com/
200 OK 205 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (35054), with CRLF, NEL line terminators
Size 205 kB (204570 bytes)
Hash e49b5eff977b3cbcadd96a584506d4f2
0604053f330367923355fdf896c5a7fcff165fab
5b6ddfe5c404f3b62616eeaf398b95c5604544266bf40ba394c4eb2f66a72338
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET / HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:31 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Cache-Control: private
Pragma: private
Set-Cookie: bblastvisit=1669294711; expires=Fri, 24-Nov-2023 12:58:31 GMT; Max-Age=31536000; path=/; secure
bblastactivity=0; expires=Fri, 24-Nov-2023 12:58:31 GMT; Max-Age=31536000; path=/; secure
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=windows-1256
100mesa.com/clientscript/vbulletin_important.css?v=3811
200 OK 1.6 kB URL HTTP/1.1 100mesa.com/clientscript/vbulletin_important.css?v=3811
IP
Hash aa9ab662c9387eba6d5a6400c511261e
69c8e0759e0b8414ca0e7d3cffae8a48b54941fb
634b9beb1d2e1c77091dde8b024de8ca9c72bb83d8be40b00dce3ce01362b5ac
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /clientscript/vbulletin_important.css?v=3811 HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sat, 13 May 2017 07:58:18 GMT
Accept-Ranges: bytes
Content-Length: 1648
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/css
100mesa.com/clientscript/vbulletin_md5.js?v=3811
200 OK 6.2 kB URL HTTP/1.1 100mesa.com/clientscript/vbulletin_md5.js?v=3811
IP
File type ISO-8859 text, with very long lines (5464)
Hash 95ac4d48957852513da18d633320c848
e4c2f5ebf8df127717e5088fdd440f497961f74a
cb8614d7a4974eeafbff564faf479b53a59f847bc53b768ff2d4ab37f18a860c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /clientscript/vbulletin_md5.js?v=3811 HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Fri, 12 May 2017 14:39:28 GMT
Accept-Ranges: bytes
Content-Length: 6161
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: application/javascript
f.top4top.io/p_1943cu0uy1.png
200 OK 2.5 kB URL HTTP/2 f.top4top.io/p_1943cu0uy1.png
IP
File type PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced\012- data
Hash c02f1c94c60bcfbb5a692734cea8f2a8
1aa0419b84203d58ef8ffae9e5ef2475c12cff44
944feea63f5034b1ee02e7ceec74e4136ed393b9715d1637207e1ec2fca2dc9d
GET /p_1943cu0uy1.png HTTP/1.1
Host: f.top4top.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 12:58:32 GMT
content-type: image/png
content-length: 2520
set-cookie: klj_40d147_downloads=mpgeh; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Fri, 25 Nov 2022 12:35:12 GMT
last-modified: Tue, 27 Apr 2021 20:06:34 GMT
content-disposition: inline; filename="%D9%82%D9%84%D8%A82.png"
etag: "60886eca-9d8"
expires: Thu, 24 Nov 2022 14:58:32 GMT
cache-control: max-age=7200
x-file-id: x38139209x
accept-ranges: bytes
X-Firefox-Spdy: h2
www.r-eshq.com/vb/images/icons/q68.gif
200 OK 1.3 kB URL HTTP/1.1 www.r-eshq.com/vb/images/icons/q68.gif
IP
File type GIF image data, version 89a, 25 x 16\012- data
Hash 87776f91dcfb000491dc292fd5e610c3
5831b121132d6fb3b419339f5e1d1684c93ea833
d2e083da1b8e6710708428f5e58dbd4571745b3877b114107cf0f7f68f19af53
GET /vb/images/icons/q68.gif HTTP/1.1
Host: www.r-eshq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sat, 13 May 2017 19:20:10 GMT
Accept-Ranges: bytes
Content-Length: 1258
Keep-Alive: timeout=5, max=100
Content-Type: image/gif
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ROlF2Tas60pM1B5ILUs4lg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: o/nCVyV/bjk7iRnfy3jf7oUOQdk=
100mesa.com/sudan/images/Untitled-1_12.jpg
200 OK 1.2 kB URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_12.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 16x39, components 3\012- data
Hash 62721de8ae6246ddc622b57902b3e29f
079f2fee0fae68f7b36cd597726a941ee116c830
941af15f21c4a538bbb7c970d1345f87949fcdcaa81288722262ca512beaf92e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_12.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 1243
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/sudan/buttons/collapse_thead.gif
200 OK 68 B URL HTTP/1.1 100mesa.com/sudan/buttons/collapse_thead.gif
IP
File type GIF image data, version 89a, 17 x 17\012- data
Hash f2cd57986f23cb9986ed4e50d27afee6
582077063d583e35758a0b1861c0be664c33fe2a
9ef6a61a36678dd650ca6bc56f00035cbecb458863dc0697cd6edb650ab59eca
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/buttons/collapse_thead.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 68
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/images/statusicon/post_old.gif
200 OK 522 B URL HTTP/1.1 100mesa.com/images/statusicon/post_old.gif
IP
File type GIF image data, version 89a, 10 x 11\012- data
Hash 9bb9b2c0b7cb21c45f3b69148c3bcd81
e6f9c10eedcfba2378c779bb6457317a4e605211
2a6dfba8f06b9513236b98f83820767514890fd3a471b9f9e15ca343254ec7b4
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /images/statusicon/post_old.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Fri, 12 May 2017 08:39:26 GMT
Accept-Ranges: bytes
Content-Length: 522
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/statusicon/forum_new.gif
200 OK 6.5 kB URL HTTP/1.1 100mesa.com/sudan/statusicon/forum_new.gif
IP
File type GIF image data, version 89a, 112 x 46\012- data
Hash fa14763f1ab1fa02b65ba0ccebc8c0a9
48b7b3d277cfede0fa507f4707be3cc5c50d0a52
1400cdfe4cb9e8eda5cc48bc582a82faba467e55cd2288b937d550f742e7bc11
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/statusicon/forum_new.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 6500
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/misc/stats.gif
200 OK 2.8 kB URL HTTP/1.1 100mesa.com/sudan/misc/stats.gif
IP
File type GIF image data, version 89a, 32 x 32\012- data
Hash 4a4741481d8d3da450cc8c30b04ab2b9
bc5d8e95f8db206e291f02af8d33bf0e2b92800e
c09384d57e79f104e1cbddff70ed3e487910a9c7600561b3ba759fd27345f601
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/misc/stats.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sun, 19 Sep 2021 19:48:24 GMT
Accept-Ranges: bytes
Content-Length: 2750
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/misc/whos_online.gif
200 OK 2.3 kB URL HTTP/1.1 100mesa.com/sudan/misc/whos_online.gif
IP
File type GIF image data, version 89a, 32 x 32\012- data
Hash f7563a40d11a9bba44b8e11274b7ba74
c1a266ba0c7bc075cfc7c2bdbfc8d0327f2d98dd
b904bf56e5597cc48a5137cdb711e4a59ad0105a73ebf7654a2e51b4e79ddbe3
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/misc/whos_online.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sun, 19 Sep 2021 19:47:49 GMT
Accept-Ranges: bytes
Content-Length: 2262
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/misc/navbits_start.gif
200 OK 226 B URL HTTP/1.1 100mesa.com/sudan/misc/navbits_start.gif
IP
File type GIF image data, version 89a, 18 x 19\012- data
Hash d11afa2cd167f0fd187f73db80694caa
d1d14a74300244b97b30c28d5fad60ab58410639
9236703f5c6cf3ea450d5b9b063e28a4127b4b986dcb6e21a9a7be15382b1fbf
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/misc/navbits_start.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 226
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/buttons/collapse_tcat.gif
200 OK 458 B URL HTTP/1.1 100mesa.com/sudan/buttons/collapse_tcat.gif
IP
File type GIF image data, version 89a, 13 x 13\012- data
Hash f740db8f0a6eab89668907e49026930e
190dd7849a114ceff1360b9a4fa5d6a52637cbc7
fe0e6c438575ed9ec7012330d7bb6ac8be9563c584947b479f1637add57d43dc
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/buttons/collapse_tcat.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 458
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/statusicon/forum_old.gif
200 OK 4.2 kB URL HTTP/1.1 100mesa.com/sudan/statusicon/forum_old.gif
IP
File type GIF image data, version 89a, 112 x 46\012- data
Hash 84d285e545dcc40ff558a6e4412f1ad5
f0717c5e974d3e9a7a3017c6c32855b27986a2a9
6da83fb04745aa14cb1c6504622f871c57aa4bd580b460ca97bd9a8b6a9bd768
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/statusicon/forum_old.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 4193
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/images/icons/icon1.gif
200 OK 1.1 kB URL HTTP/1.1 100mesa.com/images/icons/icon1.gif
IP
File type GIF image data, version 89a, 19 x 19\012- data
Hash 9be6d7df315c29956837fea31dfaf948
d3c982dda9c3a3c988938632659cdaebf2d6115e
6dabfb7f074b1487caa678d068c208ccd8e00be1bdc8eadc410336c6ccad0fed
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /images/icons/icon1.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 09 Aug 2007 15:16:40 GMT
Accept-Ranges: bytes
Content-Length: 1109
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/buttons/lastpost.gif
200 OK 964 B URL HTTP/1.1 100mesa.com/sudan/buttons/lastpost.gif
IP
File type GIF image data, version 89a, 12 x 12\012- data
Hash 2b68b60f00426e1fd146ccd5507a5f52
92d8ce68c280439d9bb85171b66549000b09bc9f
d754c443e3fb82aad481a30927cb00085fdc982ca74a3eaf6b00146918d8a1ad
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/buttons/lastpost.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 964
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/statusicon/subforum_old.gif
200 OK 91 B URL HTTP/1.1 100mesa.com/sudan/statusicon/subforum_old.gif
IP
File type GIF image data, version 89a, 11 x 11\012- data
Hash 37293618b65d539a4ff9025a5dbb7edf
15d1078f449478f72fe6dbef5bf8fdefab10c35e
0f87da09bed05c331b84a0b6cdce08110d9d203b766284bc92a5a6128a437b08
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/statusicon/subforum_old.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 91
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/images/Untitled-1_05.jpg
200 OK 937 B URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_05.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x100, components 3\012- data
Hash 545cf7f8310b82b989b2680133ab9358
f930a3b688f288959f4bda64cfc99f643e9a9320
782a1276e02be709da4b21d9dcbe48dde2ffcdc8036834e0fbb1e1aef8c77d3e
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_05.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 937
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/sudan/images/Untitled-1_04.jpg
200 OK 12 kB URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_04.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 303x100, components 3\012- data
Hash 6959a07b9a6bd562a1cc558f9c35448a
d7e509659d7afeabe3c02012c9e34c0ec74527e5
d178a81a0f41d39295fafd4c420e2ff2a7a2a1cfb7be26789ae665c51fbabd9c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_04.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 12485
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/sudan/images/Untitled-1_01.jpg
200 OK 1.0 kB URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_01.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 16x101, components 3\012- data
Hash 567bbffbf12008d77a5d7bfd4bd8a975
6de06d33a4ea31a1b7f25cf00255b1e40acfa946
3b199c36ff928145cc59fd88e4b8e00441f2ed158fe6324c188031b2bf7da2d9
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_01.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 1036
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/sudan/images/Untitled-1_03.jpg
200 OK 3.0 kB URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_03.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 125x100, components 3\012- data
Hash 15f3e8f9a90650103669c883616be52c
ddc8b9bbed2d9e65af723f745ed97f320f0a3690
8d8edfe29e155e191f528ab8b0e6fd7aa533bddac9071ff9b6892f9bdebd9c68
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_03.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 2966
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/sudan/images/Untitled-1_07.jpg
200 OK 764 B URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_07.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x49, components 3\012- data
Hash 3eb19b87992f0446abe0e9e47562ce6a
c2e599535559f4afa6170ae05c7f775be7a055be
20405c11ed2b3bd1592b43158b5bbbc0c9ba9624d9327f5aa392beac91af937b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_07.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 764
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/sudan/bb.gif
200 OK 2.1 kB IP
File type GIF image data, version 89a, 186 x 314\012- data
Hash 0bf853e0d2b9093d0ef206f8a281db0b
f2561ef0cdae3a2eda8f972ad596a0695a5407a4
f74603f966b617a3680130162c141d4f5e193853ec34d34f28a3b82a1855e2ff
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/bb.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 2101
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/t.gif
200 OK 2.0 kB IP
File type GIF image data, version 89a, 50 x 30\012- data
Hash d334aa451f9e4bacc16e3e287d1ac47b
099f3864e454a1d8380abaaaa5f46ed500083a68
edb47da6b2686c499965e70519b23380cf7530b098dcf2d3b8379bff582cd0b0
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/t.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 2032
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/images/Untitled-1_08.jpg
200 OK 665 B URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_08.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 16x48, components 3\012- data
Hash f2bd607e8698357695ba30d9d23d5c54
7f03524f6ca5e9ff58b14b4467c769f0d813cfe7
9fddae65144f3f14f31e05f2fb1bea2c05c4527d7dbe00b9a0144fa55754b8b3
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_08.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 665
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/sudan/images/Untitled-1_17.jpg
200 OK 523 B URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_17.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 14x39, components 3\012- data
Hash 576d5c0d099bd7089dd5f6af42bf53fe
76544a845f7887c73a5c08607c3aeeece05a8419
46f2bcf043b8c96de4afcf660b2e46d40792e81beeb85d1d91772ed194f1cf3b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_17.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 523
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/sudan/images/Untitled-1_15.jpg
200 OK 3.3 kB URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_15.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 419x39, components 3\012- data
Hash 96da749cb68a49e6d447fe73fb68c81c
3fcba1ad25d88984c82b11c48b096e48c00b7db3
2adc1d0b48ffa7a0663cfde552068a78836a68659ec7f6b30475a04df34bbb4c
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_15.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 3337
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/sudan/k.gif
200 OK 1.3 kB IP
File type GIF image data, version 89a, 50 x 30\012- data
Hash 2bdd3fabf5c637126b4b571c54cf9a0c
c6135e614e2031e72ef7a2647be1ae59a6071085
40a9f30d9afd7c3fc8ce0ea1eeea4f8eaeb4fb6456d1217e334188c31f21dfc1
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/k.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 1330
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/sudan/images/Untitled-1_13.jpg
200 OK 4.9 kB URL HTTP/1.1 100mesa.com/sudan/images/Untitled-1_13.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 141x39, components 3\012- data
Hash 600793d1c284e8b0e19a1eb75d9af23a
b7b3ee08dafbfd8260d1bb50279a2a5d06ca820d
93bd8af8934efae631141772093e2d8675cccc83f3d8a9acd9a5a082eb01d5d6
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /sudan/images/Untitled-1_13.jpg HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Thu, 16 Sep 2021 14:24:58 GMT
Accept-Ranges: bytes
Content-Length: 4855
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
100mesa.com/mwaextrastatus/bak/373.gif
200 OK 94 kB URL HTTP/1.1 100mesa.com/mwaextrastatus/bak/373.gif
IP
File type GIF image data, version 89a, 160 x 45\012- data
Hash 872a8136c047617381fb0e0921f20afa
4f702f5bf78ce9a223f54fa3b0b6008c8c999053
9bd2765763eccd8157ff627cae47f3320532562de87c761d493e789579c7c6ef
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /mwaextrastatus/bak/373.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sun, 29 Aug 2021 21:50:44 GMT
Accept-Ranges: bytes
Content-Length: 93972
Keep-Alive: timeout=2, max=95
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/mwaextrastatus/bak/339.gif
200 OK 93 kB URL HTTP/1.1 100mesa.com/mwaextrastatus/bak/339.gif
IP
File type GIF image data, version 89a, 160 x 45\012- data
Hash 7a4b444a0599477d4beb16bd29a244e7
3a5b7bc0014a0b88625e8d49c9887bb059e8405c
42e02a814a76725ed86f2d9dc094973d0f61469605e531eb3b6fba8916fc6be8
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /mwaextrastatus/bak/339.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sun, 29 Aug 2021 21:31:22 GMT
Accept-Ranges: bytes
Content-Length: 93052
Keep-Alive: timeout=2, max=94
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/mwaextrastatus/bak/308.gif
200 OK 87 kB URL HTTP/1.1 100mesa.com/mwaextrastatus/bak/308.gif
IP
File type GIF image data, version 89a, 160 x 45\012- data
Hash 7ccab6dacd29a9bb47f24d48e59e5011
df6f75a7312e9cf02bd0a745e7d2ed88536bf54c
c39a7be295c73d8a34052f6935f86235756e16f5d1d08361af91dde312d601a1
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /mwaextrastatus/bak/308.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sun, 29 Aug 2021 21:23:02 GMT
Accept-Ranges: bytes
Content-Length: 87024
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/mwaextrastatus/bak/300.gif
200 OK 92 kB URL HTTP/1.1 100mesa.com/mwaextrastatus/bak/300.gif
IP
File type GIF image data, version 89a, 160 x 45\012- data
Hash 257789ddf74ce4856331f8b1d1fbcf15
f7b7c324fb7c8c708d0c7ee28de8939d1f96a7f5
2912c81ca851ac1bbe00154b22a1104b0c78cf9b16e294650d1fb7ded598334d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /mwaextrastatus/bak/300.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sun, 29 Aug 2021 21:21:26 GMT
Accept-Ranges: bytes
Content-Length: 91945
Keep-Alive: timeout=2, max=95
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/mwaextrastatus/bak/314.gif
200 OK 96 kB URL HTTP/1.1 100mesa.com/mwaextrastatus/bak/314.gif
IP
File type GIF image data, version 89a, 160 x 45\012- data
Hash 59a0212b9000ac6182c8962ecdf78b61
b729bd6d7864b52acc3642013a1556a964f0b15d
e2332bd38ff4524a2402a5e869de31ef009969300a7cc295c1407345ed319f27
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /mwaextrastatus/bak/314.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sun, 29 Aug 2021 21:24:38 GMT
Accept-Ranges: bytes
Content-Length: 96337
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/mwaextrastatus/bak/330.gif
200 OK 93 kB URL HTTP/1.1 100mesa.com/mwaextrastatus/bak/330.gif
IP
File type GIF image data, version 89a, 160 x 45\012- data
Hash 06ff8c076b2ecb082fb07bec7e2505b1
68c3e462aae1c1e22b91a716b6f86b06b608f515
59e1a10e6de79c27c1952af92f7db45f7070439376fbddb78d873c827e48eac4
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /mwaextrastatus/bak/330.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sun, 29 Aug 2021 21:29:20 GMT
Accept-Ranges: bytes
Content-Length: 93156
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/mwaextrastatus/bak/302.gif
200 OK 106 kB URL HTTP/1.1 100mesa.com/mwaextrastatus/bak/302.gif
IP
File type GIF image data, version 89a, 160 x 45\012- data
Size 106 kB (106072 bytes)
Hash ecaf9f077c5261123c1eea9e1ca94f4f
ab1cd186f351c64f826165223a386af922954cc3
ca5df2d8347fcdf724a454d967f4b1c6884961d6dada74568b317bf7e10b54cb
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /mwaextrastatus/bak/302.gif HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
Last-Modified: Sun, 29 Aug 2021 21:21:58 GMT
Accept-Ranges: bytes
Content-Length: 106072
Keep-Alive: timeout=2, max=95
Connection: Keep-Alive
Content-Type: image/gif
100mesa.com/cron.php?s=d82ff892f0c46d656467fb521c4b9af2&rand=1669294711
200 OK 43 B URL HTTP/1.1 100mesa.com/cron.php?s=d82ff892f0c46d656467fb521c4b9af2&rand=1669294711
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /cron.php?s=d82ff892f0c46d656467fb521c4b9af2&rand=1669294711 HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:32 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Cache-Control: private
Pragma: private
Connection: Close
Content-Length: 43
Content-Type: image/gif
100mesa.com/favicon.ico
200 OK 10 kB IP
File type MS Windows icon resource - 6 icons, 16x16, 16 colors, 16x16, 8 bits/pixel\012- data
Hash c1201c47c81081c7f0930503cae7f71a
9078c96e8b639bdfafd182a4483956f1538f050a
ee99ad6eec4ec9470701b0d15be87686454d12f061611aa578a100aa7bbd6678
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: 100mesa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://100mesa.com/
Cookie: bblastvisit=1669294711; bblastactivity=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 12:58:33 GMT
Server: Apache
Last-Modified: Fri, 12 May 2017 14:39:26 GMT
Accept-Ranges: bytes
Content-Length: 10134
Keep-Alive: timeout=2, max=94
Connection: Keep-Alive
Content-Type: image/x-icon
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21300
Expires: Thu, 24 Nov 2022 18:53:33 GMT
Date: Thu, 24 Nov 2022 12:58:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21300
Expires: Thu, 24 Nov 2022 18:53:33 GMT
Date: Thu, 24 Nov 2022 12:58:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21300
Expires: Thu, 24 Nov 2022 18:53:33 GMT
Date: Thu, 24 Nov 2022 12:58:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08efdc1b-e7ef-4a2f-b199-9a633b00cef5.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08efdc1b-e7ef-4a2f-b199-9a633b00cef5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 28381329eca6c426a8b05fcdef4aafcc
a1fbb6da386cf2eef8b76a65438cf9c6bd741f7a
4fc8414d39bbaacb1e6575924bd0bbb9373d78b177022f7d3c6457829abffd06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08efdc1b-e7ef-4a2f-b199-9a633b00cef5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8748
x-amzn-requestid: 864da50a-44bb-4d20-b499-08c2a140871e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtENmoAMFqKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-2705cc956f2c2aa5535533b0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xT0IorkRpXysoYMnugcrV40YaAxoRPjLmkPcv1ElteP_-rNZ1c6fog==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:48:57 GMT
age: 54576
etag: "a1fbb6da386cf2eef8b76a65438cf9c6bd741f7a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ad1430-c833-4f58-99a3-6a959cced2fe.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ad1430-c833-4f58-99a3-6a959cced2fe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 891d19eb042be6fd5d021ff08db2dfcc
c35c0a9bf6ad7f53e3aadaffb8f3a03c4f9457e3
3efff3d6a8bfa358652bf73ae26ab233ed8c2ca37dab1ff2f2298cd805b88bc1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ad1430-c833-4f58-99a3-6a959cced2fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9099
x-amzn-requestid: d828c8f5-3ff1-4e20-822f-32d9ad7a0d7a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cExDeGjKIAMFQHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9549-71d957297c3ec4b01633b1ce;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:48:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZXi-qHYx7QoMQZAsZzEW099laTRSyxjhe8stloZ5ZhlRfw4W8sebjw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:13:58 GMT
etag: "c35c0a9bf6ad7f53e3aadaffb8f3a03c4f9457e3"
content-type: image/jpeg
age: 53075
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YJuHCuUgkLuFFiQUlrPWgv9grHznufMTU08hi4ZMpQTBmou6BGWrhQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:52 GMT
age: 54641
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9d93b2a6875d446c3467eb49767eef5
303c571b13b05fcf27ee1159d8fdf6369aaef0a2
2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 4d94ce1b-d18f-43b8-bb4d-e7093f9bea42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvd2G9UIAMFrEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5f2-64a570135be59b83031811da;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:04:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JygkDI7XSvlgurUTot874ZAXlOIqnv4cntMQ55IvHVqw93JBcksZjQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:10:24 GMT
age: 20889
etag: "303c571b13b05fcf27ee1159d8fdf6369aaef0a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4157f2c5c3c77ce699324ecb08f47c7
a7d9135f9d01ba13c3cdaf8b038c70212f159297
2305f7afee95bb34d9e8dbff571c6b146ba7b694be96e9e925c32d1f41785916
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7462
x-amzn-requestid: 1f6fb14d-83e0-43d3-9dab-5bc83af1a7c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwV3HV9oAMFs9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9425-634d43db6308e0be596aa5a0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GW5UTfY7-TwPWTno9z1e21a2cA9fmU7GfHFYWdL-zQvMLxeq-S9Trg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:08:16 GMT
age: 53417
etag: "a7d9135f9d01ba13c3cdaf8b038c70212f159297"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 05:04:28 GMT
age: 28445
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
152.160.203.102
23.36.77.32
51.159.59.190
93.184.220.29