zone-telechargement-albums.com/pwd.php?id=1418547089
200 OK 4.3 kB URL HTTP/1.1 zone-telechargement-albums.com/pwd.php?id=1418547089
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 293650485e78662a77d5ee1128793f1a
9c66ef3233785552fe35cd06c65c42cbb32f5cc3
613bbadd75219fbbefe138aae86728db7832c8519e9aef68e05a377770e68420
GET /pwd.php?id=1418547089 HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:18 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c%2B9%2F2ElQxin2f4%2FWS4o%2Bu1xb3f6hgzcw1h63LCJC8MDMndepgCL4GG%2F7xiiG5wrMVuZc%2BwRTDIZpN%2FQR1WbcEEDRy8sNFxzlZ18sijKgWxh80hJNV9MbB0Ml5cEfJDAPOf8wOgF1eLx8TVpvpNutCQM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76673ac66bc0b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9e164a845d32db8fa51fdb5b1aa218d9
169099b4d2f8e119ab6cf6fca279b6fb535b1759
402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "402FFBF1404CF05C0516C5A8CD5344BD53537AC5150D387730A90C81C17DC9E4"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8754
Expires: Mon, 07 Nov 2022 18:17:13 GMT
Date: Mon, 07 Nov 2022 15:51:19 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9fd081ea88e8b8563986b3e558496d21
60700393dce5eb42c0db0d5feef340f4832e3c65
d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2424
Cache-Control: max-age=156023
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 11:11:42 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 9fd081ea88e8b8563986b3e558496d21
60700393dce5eb42c0db0d5feef340f4832e3c65
d92555957857423ed02f0d0435739bcd40a996591c73f40315564b372f6e2395
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5439
Cache-Control: max-age=159038
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 12:01:57 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d8c32b2fb818533a5b3fe5c69157bde9
93594fd3fc50d9d444c28660eabba1edbe4f0588
df8b8ce7a83d11fbe075c8780103c509654f288b5d757d64b696d861a11f3c7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8474
Expires: Mon, 07 Nov 2022 18:12:33 GMT
Date: Mon, 07 Nov 2022 15:51:19 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: udWXXVNcTq8g9m9EYbNvLbMDjkYKG9tYKx0RJToHVD4YvNe0JVZ/ROZAGN+71aSxVj8N4pZ3Uoc=
x-amz-request-id: VKM0X82X5NS33ASX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 07 Nov 2022 15:48:07 GMT
age: 192
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 07 Nov 2022 15:51:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash ab0ff0400be4a39d3107eb1f230ca47d
5ab30c2e5ad48134f442dd5aa6c095ff96356eff
94fe78aed5d76cd53e10fb613a8fa912ef8d9e66e14e8f9cd92b76a1b592bfa2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3334
Cache-Control: max-age=92858
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Etag: "6367e42b-1d7"
Expires: Tue, 08 Nov 2022 17:38:57 GMT
Last-Modified: Sun, 06 Nov 2022 16:43:23 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
200 OK 6.2 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP
File type ASCII text, with very long lines (19015)
Hash 7b4114faa411d059a9a5ac4b5b4d9dee
277da4486916fa3a4ab3375f47bc98f58dbf90f6
60b3528de2f7d48cbb335d19dddef756aaacc70f73d4254a2ef17978a14ca0d9
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://zone-telechargement-albums.com
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 15:51:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5780704
expires: Sat, 28 Oct 2023 15:51:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fqkf%2F9Ixpphh5VqsFng2mvq2x8Y44p1voEvGsTmatDSJvLorEInQQUugXmbNAvfDsmJ%2B5EnJm%2B9ULYT5ngpc0kpbUHoNxMJlJPuk5qfeO7eYLz0RIWR1ElLaHqT4jMeIf6AJqLC9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76673ac9abb0b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
zone-telechargement-albums.com/jplayer/dist/skin/blue.monday/css/jplayer.blue.monday.min.css
200 OK 1.9 kB URL HTTP/1.1 zone-telechargement-albums.com/jplayer/dist/skin/blue.monday/css/jplayer.blue.monday.min.css
IP
File type ASCII text, with very long lines (8916), with no line terminators
Hash 63579caa005c0771b7967fc495af1750
08f208f4eb2f355ea438013a6149d4d61b2ae06c
0e6abeb06bd2482034739d9aa0c7a8ca5e2d9d23e1c22002849d6856d9a23892
GET /jplayer/dist/skin/blue.monday/css/jplayer.blue.monday.min.css HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1418547089
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 10:58:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xv87dXSuSta2h%2FQ4NGpNQ460zh%2B7v8VsSNZ%2BMV14XOSWb%2B5dINiimXaU20KarZCEHHDbezMkGduwomJ7VvSbmH4GUeAhVlgmIuv%2FFvtgTWTGSVuxDU7yp8uQ3jcLOMPi3P6RV5GlY8ETFhKFnhJ37dY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673ac92c7eb4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
zone-telechargement-albums.com/style.css?rand=
200 OK 1.1 kB URL HTTP/1.1 zone-telechargement-albums.com/style.css?rand=
IP
File type ASCII text, with CRLF line terminators
Hash 2390d04cec8b8301404c8bdf0ec7eb9e
76efe76c19a75c20ac6e544e090331b42420fc0f
8375ce8e0b4a265f1ac119a99bae830c3e8853c80aa9d7ea17144ab03c6bb6b8
GET /style.css?rand= HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1418547089
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 07:26:59 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3KZt3fSjHlMc2aqqEqT3zBc4UgoRWimW6d8m6dm%2FI5ab6uUZXr3Gv5duIU8TIcpm%2FRVYcgpCdqSS49pSrZ1qpaQ2Ildbi37PIYCwEKVabXDNwUmUcuGImDW1rAQvMpefxo2f8ZpjDwvY956OmT%2F5BIs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673ac92d4c0b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b8988c44d656e4521aa7d84091f926d3
debd55429e2a0f0bcd257201f2efe00d2e7ed35f
e04704fa687f5daa90436f47c59fabadc7779f604a68cef3baf6b97a0bc5e92b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zone-telechargement-albums.com/fontawesome-all.min.css
200 OK 7.7 kB URL HTTP/1.1 zone-telechargement-albums.com/fontawesome-all.min.css
IP
File type ASCII text, with very long lines (35179), with CRLF line terminators
Hash e0ebeb29ce862bb454f2826ac17e3cc7
373174302b217307244f390a2ca236b08f55395a
514b8becd5fad7a55591c7cbea3be69488c5e504fd180441ec1ad95ec646aa86
GET /fontawesome-all.min.css HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1418547089
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:53:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jrI0jCj8GBSu%2BL%2FOzwOUcOYacGz80k2HL24ErFKCOAXwA19On%2BB6J3nxKDUWQqWTYNigLNZDsdy%2FDjcQsxN5sxxtCuHvIXkpMexbTnkNkaVFHyyoN8DA7CX8o4oF9GLwJdS0bui%2BxunVuVnrt6ldU6E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673ac91851b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.jsdelivr.net/npm/bootstrap@5.0.1/dist/js/bootstrap.bundle.min.js
200 OK 22 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.1/dist/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65299)
Hash 327521bb0a0293b819ad7f660c8bd131
87a86071ef6e0848dd18f4f4b551b69373219263
4574cbb969068a76aee2d0431c0dd7967312b87c5b25e47bcb6878f10440f5b2
GET /npm/bootstrap@5.0.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://zone-telechargement-albums.com
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.1
x-jsd-version-type: version
etag: W/"1339c-XbTEDbxr09liPumKIGHdJliFzy4"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 07 Nov 2022 15:51:19 GMT
age: 5957337
x-served-by: cache-fra19130-FRA, cache-bma1659-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22454
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.2.1.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-3.2.1.min.js
IP
File type ASCII text, with very long lines (32058)
Hash 148f8d3ffd9cc02048c5f4d1cc83c407
9f2b89cfd151be6a29b4d43ad64d164fb8471046
4dc681da48ba2b417e613e8e027ff5322963c3a3697a8ba97973cfefb48def5e
GET /jquery-3.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 15:51:19 GMT
content-encoding: gzip
content-length: 30125
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15283"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1667836279.dop216.sk1.t,1667836279.cds256.sk1.hn,1667836279.cds222.sk1.c
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 5bd8cb0bfdbb67632d5a695693907e3d
11bc9c7ffa92cf9bb0320e3168d568e04c67f96c
2c8625e358507d5ad0d7f0d1114b8d7d709aab279aab9e5371b83d26bb65df4d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2672
Cache-Control: max-age=172093
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Etag: "63691c44-118"
Expires: Wed, 09 Nov 2022 15:39:32 GMT
Last-Modified: Mon, 07 Nov 2022 14:55:00 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 280
is3-ssl.mzstatic.com/image/thumb/Music118/v4/e0/27/64/e0276442-e60c-082d-2718-8d7bb3858e22/artwork.jpg/600x600bb.jpeg
200 OK 145 kB URL HTTP/2 is3-ssl.mzstatic.com/image/thumb/Music118/v4/e0/27/64/e0276442-e60c-082d-2718-8d7bb3858e22/artwork.jpg/600x600bb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 600x600, components 3\012- data
Size 145 kB (144994 bytes)
Hash 7d1df75022bf664422fc9ef77e35aadd
cdaf6cd96d3f07a86874391e252b332911af1845
f801049ad6976a5ce6ab398019ab34d4c40fb5670d2eb2f7a5e1cf038067d429
GET /image/thumb/Music118/v4/e0/27/64/e0276442-e60c-082d-2718-8d7bb3858e22/artwork.jpg/600x600bb.jpeg HTTP/1.1
Host: is3-ssl.mzstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: daiquiri/3.0.0
content-type: image/jpeg
content-length: 144994
x-apple-jingle-correlation-key: COCFZKEPGF7HUNQYPYHJ3LDGRM
x-apple-request-uuid: 13845ca8-8f31-7e7a-3618-7e0e9dac668b
b3: 13845ca88f317e7a36187e0e9dac668b-38d3b6c4facbcc8e
x-b3-spanid: 38d3b6c4facbcc8e
x-b3-parentspanid: 464375c58703a6b0
apple-seq: 0.0
apple-tk: false
apple-originating-system: UnknownOriginatingSystem
last-modified: Mon, 07 Nov 2022 15:43:05 GMT
etag: "MSwxLjI4LTIySCxWZXJzaW9uIDEyLjEgKEJ1aWxkIDIxQzUyKSwxNjY3ODM1Nzg1ODM4LGlzQnVpbGRWZXJzaW9uTm90U2V0LDdjYWY3MzkyLG5vRWZmZWN0"
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Type,ETag,Cache-Control,Expires,Last-Modified
timing-allow-origin: *
x-b3-traceid: 52647833c8107d02
strict-transport-security: max-age=31536000; includeSubDomains
x-daiquiri-instance: daiquiri:33624002:pv50p00it-hyhk12033901:7987:22RELEASE148:daiquiri-amp-processing-shared-int-001-pv
cdnuuid: 3014fffe-c310-48cf-8e06-190991966260-859355041
cache-control: no-transform, max-age=14969108
date: Mon, 07 Nov 2022 15:51:19 GMT
x-cache: TCP_HIT from a23-36-79-6.deploy.akamaitechnologies.com (AkamaiGHost/10.10.1-44825277) (-)
X-Firefox-Spdy: h2
i.imgur.com/ZaWoU3s.png
200 OK 126 kB IP
File type PNG image data, 575 x 280, 8-bit/color RGBA, non-interlaced\012- data
Size 126 kB (126468 bytes)
Hash 1362ff58dbc8cd9992ba8a099c6b73c3
bfae8c118f9cf8fcf760b8ed1258172bffd35aae
c679135e2e7533a34c212c5e7abe95c4cffbbd796ab9b6e08fc053de7ca8b6ea
GET /ZaWoU3s.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 May 2021 15:23:56 GMT
etag: "1362ff58dbc8cd9992ba8a099c6b73c3"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 07 Nov 2022 15:51:19 GMT
age: 2769515
x-served-by: cache-iad-kiad7000160-IAD, cache-bma1622-BMA
x-cache: HIT, HIT
x-cache-hits: 1228, 1
x-timer: S1667836279.307135,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 126468
X-Firefox-Spdy: h2
i.imgur.com/llF5iyg.gif
200 OK 55 kB IP
File type GIF image data, version 89a, 512 x 512\012- data
Hash bb533f76423cab3aa8f798501357e763
9316c9673c9190d7313946f540b7e0e17de6fbc5
db505c6d20a02c36e119ed16c0d2833a181de96d01993f0872c9d0d48afa0945
GET /llF5iyg.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Jul 2019 23:07:36 GMT
etag: "bb533f76423cab3aa8f798501357e763"
content-type: image/gif
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 07 Nov 2022 15:51:19 GMT
age: 4245684
x-served-by: cache-iad-kcgs7200051-IAD, cache-bma1622-BMA
x-cache: HIT, HIT
x-cache-hits: 5430, 1
x-timer: S1667836279.308552,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 54553
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.0.1/dist/css/bootstrap.min.css
200 OK 23 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.1/dist/css/bootstrap.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash ce26ee4a5b9806b376f44f1e3b9c1ed0
bb1a001cc78839836d1a4d6f7a08821250e000a2
4860148d3bcb23f5710e8124f11dc521ce83440627bb86eacc73ae6357e14b2a
GET /npm/bootstrap@5.0.1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://zone-telechargement-albums.com
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.0.1
x-jsd-version-type: version
etag: W/"25fef-PDndyutgvrSms9Gt5O+JOaWK1Zo"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 07 Nov 2022 15:51:19 GMT
age: 8025944
x-served-by: cache-fra19163-FRA, cache-bma1659-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22929
X-Firefox-Spdy: h2
i.imgur.com/trVzdzK.png
200 OK 225 kB IP
File type PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Size 225 kB (224804 bytes)
Hash 6d968a18e741259f4f297344c7ec51df
eee7cd0d62ec149ed11c32f0bd961f42c0aff736
3319e76266b2f614f17dd472684bd229e18ad53e7029831a9793c7b9535bc236
GET /trVzdzK.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 31 May 2021 09:35:59 GMT
etag: "6d968a18e741259f4f297344c7ec51df"
x-amz-storage-class: STANDARD_IA
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 07 Nov 2022 15:51:19 GMT
age: 2780139
x-served-by: cache-iad-kjyo7100084-IAD, cache-bma1622-BMA
x-cache: HIT, HIT
x-cache-hits: 10143, 1
x-timer: S1667836279.307382,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 224804
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 12a1f191d3251cadd0fce23ca14e1a5d
a95b5c8eafe5d0ae8d78c77d4965ba1c486ec864
95b318059b6735c7221e60eabe0489c228c705c47a5f6adc8f829ac0f3c5f77c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 8093e97b92bf8c7d224065cfdff7508e
54a90619d073faf8c9b59d57c6a842301ed23055
2c893e2c22d9e8a6fec684ea833e3c02dedd74df8254c83363b8f62acd542e51
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=92389
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Etag: "6367ef5c-118"
Expires: Tue, 08 Nov 2022 17:31:08 GMT
Last-Modified: Sun, 06 Nov 2022 17:31:08 GMT
Server: nginx
Content-Length: 280
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash aa5f4099213d824745697dc74e3b78a9
6c63d6d31c71f99fba86c243ac504fb9ecf9baa2
8197305ab0754e3fc8baa06aa0ef2da2fc4b8f524318008a0d1ad3453e3dc677
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "E6F51F74511FBAEAB1F53294A8E980912959B0B8"
Expires: Tue, 08 Nov 2022 02:00:00 GMT
Last-Modified: Mon, 07 Nov 2022 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2412
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673aca891c0b06-OSL
www.googletagmanager.com/gtag/js?id=UA-68420562-9
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-68420562-9
IP
File type ASCII text, with very long lines (1921)
Hash 0efb300b70657ab2dc9069c1f6e3a16b
54b57d7390bb520ee716aa8a77610021a94212da
4372391b3516c38d23db60bcae51d5dff4d38bd2de132145a6ef0583ee1b64bb
GET /gtag/js?id=UA-68420562-9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 07 Nov 2022 15:51:19 GMT
expires: Mon, 07 Nov 2022 15:51:19 GMT
cache-control: private, max-age=900
last-modified: Mon, 07 Nov 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43618
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b8988c44d656e4521aa7d84091f926d3
debd55429e2a0f0bcd257201f2efe00d2e7ed35f
e04704fa687f5daa90436f47c59fabadc7779f604a68cef3baf6b97a0bc5e92b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
unpkg.com/imagesloaded@4/imagesloaded.pkgd.min.js
302 Found 2.4 kB URL HTTP/2 unpkg.com/imagesloaded@4/imagesloaded.pkgd.min.js
IP
Hash afcae6641118e889a578cff5731fbf5b
19b3ca40151d3439bce5a7d435af36180e30dfc8
9d4007dd8f33ce890e15dda1d950e1ed9ffb03fe58f8dcc172856b2e40cbfdef
GET /imagesloaded@4/imagesloaded.pkgd.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 07 Nov 2022 15:51:19 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /imagesloaded@4.1.4/imagesloaded.pkgd.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GH9CKCKDNWYRFTTEY98YJWQB-fra
cf-cache-status: HIT
age: 18
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76673aca6b820b49-OSL
X-Firefox-Spdy: h2
zone-telechargement-albums.com/img/monkey_emoji_1.png
200 OK 26 kB URL HTTP/1.1 zone-telechargement-albums.com/img/monkey_emoji_1.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash f5dd413a76fa8e65b1d7c38314381942
91a6cccd63c979beff1eadd5a8c5059fe50efade
7598110b160ab8d746d6f3062f87891f642ff0af2806e3622a2e5c1c4509ce59
GET /img/monkey_emoji_1.png HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1418547089
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: image/png
Content-Length: 25933
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:12:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t54wnVWztFq%2F8dA3vr4fbNdD8lgzwo9J4%2BNKwJkn1S99L32GMLHpR6CM%2FHhk91%2BO62UDT8fCXz%2FHG3NDoSlq9zMeknBiVItlv47iL9o8V68Z1J9h6T1yyRr%2FZXYMIkIdGVH5%2BQCxbGNFBR3ZkrX6cok%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673aca8e4cb4fa-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 03fc468285706210a3ce339d5a223c61
fd32b7fa20b5c53cc2aebc09a3defe4c890f61be
9401d1803a9bac1dd2297405f8cf32dffdc375912ccc1c7bcf884f59a0ed64ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zone-telechargement-albums.com/img/monkey_emoji_2.png
200 OK 27 kB URL HTTP/1.1 zone-telechargement-albums.com/img/monkey_emoji_2.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 813b8f62a9779fd47c4027041835fab4
33113843f2af85f1b88f7e61c606de45e12d830c
9a24da818ef612be3c44a9df6e0a5688aeecc3ac99bc51ea56ca225586ba7d7a
GET /img/monkey_emoji_2.png HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1418547089
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: image/png
Content-Length: 26782
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:12:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xhKMgGKL9qSJB4F7EhNdsebRErl3ajk0mCCem6c9kMzyQCWw%2FF%2FfuiMMr3myL%2Fc9JiOvfWlKgbMBBcturTdpfTHXROBE51LpBI0iPJ5IV1sepooGZLxEXa%2BwIl3F4HjkTW3mfq8z%2BTGkrFYeXfUtL28%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673aca8f370b45-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/cousine/v25/d6lIkaiiRdih4SpP_SQvzA.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/cousine/v25/d6lIkaiiRdih4SpP_SQvzA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18408, version 1.0\012- data
Hash 2925e8798e52aad85f4bfcb7760c3027
e1a3749264b421649cdce85f8b3350b7bef5c15c
a554da152dffb3b46e6dab5a4cb63cebeb27cc44c6ea851a398a6bbde4fbbfcb
GET /s/cousine/v25/d6lIkaiiRdih4SpP_SQvzA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://zone-telechargement-albums.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 14:11:14 GMT
expires: Thu, 02 Nov 2023 14:11:14 GMT
cache-control: public, max-age=31536000
age: 438005
last-modified: Tue, 19 Apr 2022 19:32:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
zone-telechargement-albums.com/img/monkey_emoji_3.png
200 OK 27 kB URL HTTP/1.1 zone-telechargement-albums.com/img/monkey_emoji_3.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash b698e0210ff1e18994c438fd980fa55b
8bfdda219bde3ce23ecf1f5e12a2c4d6f3d3c555
1d85326d6c3ae3cc75a087223dabf954bd0dbd1042c5311e5a7e5d604b981bf3
GET /img/monkey_emoji_3.png HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1418547089
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: image/png
Content-Length: 26671
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:12:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t3RjWswN9LowjGh9YTqz%2FSxdLPQDprUz7IdvGHobhXLsgtfghZvRFt3O1biOVLR2ZuKRYpXIhJPEr9FAe258oyQNUyVN1zJIwxG70fMDqvi%2FjnlU3uTp1Xa1aNBOYbF6EYV8z0n8YkG8v4sauKUEPks%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673aca8f3bb51b-OSL
alt-svc: h2=":443"; ma=60
zone-telechargement-albums.com/webfonts/fa-solid-900.woff2
200 OK 40 kB URL HTTP/1.1 zone-telechargement-albums.com/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 40148, version 1.0\012- data
Hash 0ab54153eeeca0ce03978cc463b257f7
6ec6d36cb2464b4e821cfabb532f310bd342601c
434466b59545a8a1cac6ddb38197cdc6b35995a98c3f3812fb88d61b1c300dd3
GET /webfonts/fa-solid-900.woff2 HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/fontawesome-all.min.css
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: font/woff2
Content-Length: 40148
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:53:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uURVkpwkRr0s7VgaCoD5fNVDi9ib7WdQiQtVar1zRXpVBEfOjnC7HNYNR7lFbSCzzZbqWK8ibJ5ro1vGO6NZRZ%2FlGnLpi6O41JYKoTIJsou4mEsWZvYnw1piPCaDNixjYcOTK2eqMTrk3x7DWTU%2FM40%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673acaed1ab521-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6dba1915540598e77ae8d73ce49c4b3b
f9c34b678d814548946cafea65b20ff352fb501b
89f7e3ac689535c3a373e1ff2f4125e7879782917687c26210a3eaf6c9a6e6a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zone-telechargement-albums.com/img/bg1.jpg
200 OK 78 kB URL HTTP/1.1 zone-telechargement-albums.com/img/bg1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3\012- data
Hash 286a748079321176e554cd96b028e137
1af468c17e1302a1d3b4c4e3f37522a395282b3c
a094c760ffc965a39145c211f58891e316f428010a7876614a7500951d890f8b
GET /img/bg1.jpg HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/style.css?rand=
HTTP/1.1 200 OK
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: image/jpeg
Content-Length: 78370
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:12:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wpdYl5eABpcJMCUmdjxPc9qR9LvwLSR0i7w7waZFYrb1TZ4Ul9cTKfMDvGSpx6HM24wyomrA1F%2FFEeM0SI5sTg5SeeP9GyJulJGuYc5LeLjJo7cueOlUW7Aoh%2BxaoVJ%2FiKto1vbQSXhq0ISPLfkvyaw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673acaccc5b51d-OSL
alt-svc: h2=":443"; ma=60
zone-telechargement-albums.com/favicon.ico
404 Not Found 238 B URL HTTP/1.1 zone-telechargement-albums.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /favicon.ico HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1418547089
HTTP/1.1 404 Not Found
Date: Mon, 07 Nov 2022 15:51:19 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Y%2FALILzKA3B5wM%2FqVhG8ql5Y5AiFA0U6wpUyID6rc52qXSbTYih8iN5nX7OwIsUUdssdNgjHtlaQpJQeLwuiZkYfT46Znymqnod6zJzNAEOVbXlie%2FtavKYTZJY1MyRnuhwPsGyc%2BFAIRUYDtqR1EA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76673acbbe49b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 07 Nov 2022 14:41:09 GMT
expires: Mon, 07 Nov 2022 16:41:09 GMT
cache-control: public, max-age=7200
age: 4210
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e6f4643306be10417c47176a6e67306f
940a13818904add9e1cacd12610f37ba1efd7bc5
67e51095b5da59b3eeda8a28c81789e69064a0a19a93347c2fcb05fd4b21e6d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2673
Cache-Control: max-age=151199
Content-Type: application/ocsp-response
Date: Mon, 07 Nov 2022 15:51:20 GMT
Etag: "6368caa6-1d7"
Expires: Wed, 09 Nov 2022 09:51:19 GMT
Last-Modified: Mon, 07 Nov 2022 09:06:46 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KJ9qxIyuDlSRhknnTfWcQQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iOjizwDNyKgn4jyH6dI65c5FXaQ=
dwmsurhf1svv8.cloudfront.net/public/external/css_front.css
200 OK 6.6 kB URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/css_front.css
IP
File type ASCII text, with CRLF line terminators
Hash 2649f9832b1ede1bca6b60a16e50a676
c96e86a59be0ab5f2a1c86558205193597822742
a7bd79b6fba60944ee3a9c153108ff0819d2db57850116ac7065a86db08af4ec
GET /public/external/css_front.css HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 6596
date: Mon, 07 Nov 2022 15:51:20 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
last-modified: Tue, 23 Jun 2020 20:06:47 GMT
etag: "19c4-5a8c5e62e9d0a"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QkjCu8UWUy9a_aZpl6jAf4nRvCCba0bsWB4dojhI8YoUgNNR6ZT0Yg==
X-Firefox-Spdy: h2
dwmsurhf1svv8.cloudfront.net/public/clockers/PrimeApps/css.css
200 OK 1.0 kB URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/clockers/PrimeApps/css.css
IP
File type ASCII text, with CRLF line terminators
Hash 683a185465436634825046815ac5a2d2
dd9a216245afb09ebc5098aa44374ee8ef51d3dd
a7081a117335212b9e7f2e348f7369a64423d51db1666310b3451e7375f0b7de
GET /public/clockers/PrimeApps/css.css HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 1010
date: Mon, 07 Nov 2022 15:51:20 GMT
server: Apache/2.4.48 () OpenSSL/1.0.2k-fips PHP/7.4.11
last-modified: Fri, 10 Apr 2020 22:29:00 GMT
etag: "3f2-5a2f7428ae907"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RtIi8Bebb9UN0ffwDiiG1eSeO8doZPhzmba8j6olBV8IwrLaFMjT2g==
X-Firefox-Spdy: h2
dwmsurhf1svv8.cloudfront.net/public/guid?cpguid=5li504a7k&s1=album-pwd-smart&s2=1418547089%7C2007-05-13&e=ll&t=1667836278479
200 OK 0 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/guid?cpguid=5li504a7k&s1=album-pwd-smart&s2=1418547089%7C2007-05-13&e=ll&t=1667836278479
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /public/guid?cpguid=5li504a7k&s1=album-pwd-smart&s2=1418547089%7C2007-05-13&e=ll&t=1667836278479 HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 07 Nov 2022 15:51:21 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sqYlPx_6pTfBKNMTKgmHbQaJCNvAZgJBnGG84rCf1b2vu5JU02P81A==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11956
Expires: Mon, 07 Nov 2022 19:10:37 GMT
Date: Mon, 07 Nov 2022 15:51:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11956
Expires: Mon, 07 Nov 2022 19:10:37 GMT
Date: Mon, 07 Nov 2022 15:51:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11956
Expires: Mon, 07 Nov 2022 19:10:37 GMT
Date: Mon, 07 Nov 2022 15:51:21 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bf1a5e65cd048b761eac5cb0b52048a
f64cface851717dee160a5c6fad975cc34fe4cd2
8b849bbe5d73c02bd82c39e5970ef02d46bf36ccfed31b51db437d85d12c004b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11956
Expires: Mon, 07 Nov 2022 19:10:37 GMT
Date: Mon, 07 Nov 2022 15:51:21 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa958db65-71f7-4c79-9753-9af1fe88477b.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa958db65-71f7-4c79-9753-9af1fe88477b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a5e060b41bd5313b1cf828c1d5ecbcc
e63e4bee84953491236a8261ef07b5a4743fa891
e8750b0156ed980f11682d92f5c60ce2783518b37f156e74340617a74d826813
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa958db65-71f7-4c79-9753-9af1fe88477b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13224
x-amzn-requestid: d6c8a626-313d-4add-9467-eb946a38262a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a9iPHEkgoAMF1Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6362172d-1be7a03a1b288dec56281915;Sampled=0
x-amzn-remapped-date: Wed, 02 Nov 2022 07:07:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: R2vHbrKm_n2kWK3bG4htWAIqi1YNjNjaX8LG5AWWHPlKnaWi6JAGzA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 20:12:14 GMT
age: 70747
etag: "e63e4bee84953491236a8261ef07b5a4743fa891"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcc79e66d1e21452efb26d26650f6739
1f727a7ea032082658944cf4041686446fb6b5f2
af1fe8de442a365a108d5c03f0d3ae8b0beb1abb4f267a46979f9c885ee026c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8961
x-amzn-requestid: 3a50374d-d90e-452e-bb89-82ca14c94b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJarpGtqIAMFkPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-55c356475fb64e6625a338c7;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OR8zISm84Iz0FL3Km-aQOHSnjROX2-S_lKloAhMAThT17igEWRbxkA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:44:24 GMT
age: 65217
etag: "1f727a7ea032082658944cf4041686446fb6b5f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100d1c51-b2c7-40d5-bd34-a37c21b8252d.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100d1c51-b2c7-40d5-bd34-a37c21b8252d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c0a079a6dfb70fb2a2d6b5aff7103f73
55ffd5d6cb8074bdbdb8d06719119021bc81aeab
196ffd4e5245355c1c5d67f49b28200630ccfe1e4ebaa7280154b7adaf39b18f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F100d1c51-b2c7-40d5-bd34-a37c21b8252d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9435
x-amzn-requestid: 7c39c00f-1362-44c1-9628-749045e542b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bEIU9G5gIAMFzZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364ba85-57fbfb872251c37f4137b262;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 07:08:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GaFmcnh2vF0lCj_QPQ7SAIT_UzHHyr8UaHa-R_ifuZsX7quU0mBJ9Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 21:50:59 GMT
age: 64822
etag: "55ffd5d6cb8074bdbdb8d06719119021bc81aeab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bF_38GKXoAMFwSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q0yZmbExDP4tH0n1n2qj_NR2Mv_y_dsO0LJ1RKZoS6Me-NLbhpUWqw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 09:11:38 GMT
age: 23983
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddf9fb3-adcc-4e34-a9a7-1927e38830dc.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddf9fb3-adcc-4e34-a9a7-1927e38830dc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 93aada35cf6b5ccf56d7c8c49e566a1e
349f301eab8e4cd3732e9b0fbd1675bbbe3e969b
2285236779612c298f54306c6237df079a3329daa415c3f3a9015bf2a75f99aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ddf9fb3-adcc-4e34-a9a7-1927e38830dc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9331
x-amzn-requestid: d67eca4f-66a8-4366-b2d8-fb424e77b438
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJb3lHQmIAMFemg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d9c9-77519cf22b23b7e00a23cacc;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:46:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ZiP3LoPE9a2aP16DN-jBzPfGPS_uW4M_qtJ3ilw26cxK6w6mWJOxPQ==
via: 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 06 Nov 2022 22:25:21 GMT
age: 62760
etag: "349f301eab8e4cd3732e9b0fbd1675bbbe3e969b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1190aa1b3db742f1cc476e53b34479b7
7e7ba87cfbc21acc28219c68521eedd6d3f614a0
6724e0c14b11cf9ef8c2050116115e5f7985f744184a7d2e8ea4c0189bd1997d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faba2be0c-46a2-4aa1-be6e-09cafbba66a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7309
x-amzn-requestid: 0d1c4df8-769e-497b-999c-b1087d79dfe4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKLIGGWHIAMFhiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63672566-1745417f7ed16a0576321e03;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 03:09:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0EhZdU9imzr2PMiF_8CNHggx2T53fnClbpE-rFqlKU3jtxHdRXQKyQ==
via: 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 03:23:35 GMT
age: 44866
etag: "7e7ba87cfbc21acc28219c68521eedd6d3f614a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
File type ASCII text, with very long lines (32065)
Hash 6d973c8b7e2439d958e09c0a1ab9fe50
05ae0830200c20b9a2dfd5a825adc400481a60fb
f3c122dc227e829ed96b2a754296809201bd78abbad7ba50ef5079654e1cc894
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 04 Nov 2022 12:17:14 GMT
expires: Sat, 04 Nov 2023 12:17:14 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 272047
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 05cdd4636279d3c971f3cbbbb2a0d486
61d17037ad350d14f5b9d70721ae348afb81200a
b37746f2e32a5da47dbacd6a21f6a8194a86be720d3b7b861fb4b95e581444bd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127155
Date: Mon, 07 Nov 2022 15:51:22 GMT
Etag: "6368641e-1d7"
Expires: Wed, 09 Nov 2022 03:10:37 GMT
Last-Modified: Mon, 07 Nov 2022 01:49:18 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cte6ouZTrR2B-VQ1fUUy1keRR_9vyAL9sSY0tlNQ9jGc5klpj5DZlg==
Age: 4879
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 05cdd4636279d3c971f3cbbbb2a0d486
61d17037ad350d14f5b9d70721ae348afb81200a
b37746f2e32a5da47dbacd6a21f6a8194a86be720d3b7b861fb4b95e581444bd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123040
Date: Mon, 07 Nov 2022 15:51:22 GMT
Etag: "6368641e-1d7"
Expires: Wed, 09 Nov 2022 02:02:02 GMT
Last-Modified: Mon, 07 Nov 2022 01:49:18 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1JVKbiof2WOiM0BbARxCZ_1e06Wy0mXBC2hIEwx47PZQcWwyw2ZV8Q==
Age: 764
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 05cdd4636279d3c971f3cbbbb2a0d486
61d17037ad350d14f5b9d70721ae348afb81200a
b37746f2e32a5da47dbacd6a21f6a8194a86be720d3b7b861fb4b95e581444bd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=126446
Date: Mon, 07 Nov 2022 15:51:22 GMT
Etag: "6368641e-1d7"
Expires: Wed, 09 Nov 2022 02:58:48 GMT
Last-Modified: Mon, 07 Nov 2022 01:49:18 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -uhUHbJDHGrz-Cw-HpAHMCWfSXulcHCZxQfE7nRroQwTD-6ANjij-A==
Age: 4170
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 05cdd4636279d3c971f3cbbbb2a0d486
61d17037ad350d14f5b9d70721ae348afb81200a
b37746f2e32a5da47dbacd6a21f6a8194a86be720d3b7b861fb4b95e581444bd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=128235
Date: Mon, 07 Nov 2022 15:51:22 GMT
Etag: "6368641e-1d7"
Expires: Wed, 09 Nov 2022 03:28:37 GMT
Last-Modified: Mon, 07 Nov 2022 01:49:18 GMT
Server: ECS (bsa/EB1C)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: k3un76nhk6dzDjMTq2wQtG01YO4nISfGdVHS99Zs-_HuplTiG9WEIA==
Age: 5959
dwmsurhf1svv8.cloudfront.net/public/external/guid.js
200 OK 862 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/guid.js
IP
File type ASCII text, with CRLF line terminators
Hash a983b9595d3219f26887592a358c9804
0de2d3f96ed4a892b4f476ad29206dc9f7b6cb71
e1996013bea18595368a7d2452d2a96a8a66b59bd08cde2935e36ffa0f985fda
Analyzer Verdict Alert fortinet Phishing
GET /public/external/guid.js HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/public/ct?cpguid=5li504a7k&s1=album-pwd-smart&s2=1418547089%7C2007-05-13&it=874265&w=1280&h=1002&key=dfd99&m=0&r=%1D%01%01%05OZZ%0F%1A%1B%10X%01%10%19%10%16%1D%14%07%12%10%18%10%1B%01X%14%19%17%00%18%06%5B%16%1A%18Z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 862
date: Mon, 07 Nov 2022 15:51:22 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
last-modified: Tue, 11 Aug 2020 19:47:27 GMT
etag: "35e-5ac9f574655f4"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: f9gpNHvPsqQ0wjDdfTp1UfhlpvxSefhzPxHY95djBhKurzOII475pw==
X-Firefox-Spdy: h2
s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/colorpicker/js/colorpicker.js
200 OK 17 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/colorpicker/js/colorpicker.js
IP
File type ASCII text, with very long lines (1023), with CRLF line terminators
Hash 96e6db8dd2c341f8aee73603eccea3b9
004db0e881d90bd5244e80becb8c6edcaf6d7d88
633dc2faf8814cf105d53e40564cca15b2dfe2e176d8c25eeb6d84d5e25d1346
GET /cloudfls.co/themes/startui/css/lib/colorpicker/js/colorpicker.js HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: mhFvtsmbVqm9kfh+Ro/Esz/SxyKGSO8uCuCoqeFT28lLOtqNzW42d0qBV86Nh/GHhpb8hMCLy5A=
x-amz-request-id: 0HQCYKTJGBH8083X
Date: Mon, 07 Nov 2022 15:51:23 GMT
Last-Modified: Mon, 20 Jul 2020 19:18:06 GMT
ETag: "96e6db8dd2c341f8aee73603eccea3b9"
x-amz-version-id: qFIBPe4Zod1AureDpJG1XaQIW1Qq766s
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 17175
s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/colorpicker/css/colorpicker.css
200 OK 3.2 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/colorpicker/css/colorpicker.css
IP
File type ASCII text, with CRLF line terminators
Hash 88ad8a6ad0054fcfa70e25a6c2474272
58ab27741e83725ee1b48a507070f2df37bb4e4f
8157923832e020c3a4ed7ef85ad7d032d7b1b03b02e5502dce8ac9af9cedea53
GET /cloudfls.co/themes/startui/css/lib/colorpicker/css/colorpicker.css HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: fFr0V3I/dUrT/Xwy+gOZHpgD/eq9gn9tS3ZgzU+mphxJuchbfxqQMC4YzlGjSklFEcr/s8wCNPQ=
x-amz-request-id: 0HQFK1CZYT30QHQW
Date: Mon, 07 Nov 2022 15:51:23 GMT
Last-Modified: Mon, 20 Jul 2020 19:18:06 GMT
ETag: "88ad8a6ad0054fcfa70e25a6c2474272"
x-amz-version-id: hOb.o1RIbFLjoUZHs0hFqKqWfq13uMQ1
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 3181
dwmsurhf1svv8.cloudfront.net/public/external/impression.php?it=874265&time=1667836279733
200 OK 10 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/impression.php?it=874265&time=1667836279733
IP
File type ASCII text, with no line terminators
Hash 4f4a5a7cc9e3cac0fec86177622c6b60
b9111928e830fa182ee9eafd403626ac270691a2
3efc61bcf3a2a65c875e501412e9db8b00b4b554e4351e01fab46c2793e87b3d
GET /public/external/impression.php?it=874265&time=1667836279733 HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 10
date: Mon, 07 Nov 2022 15:51:22 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uRUEHUQ3tGntfWZFlf71bDb7DCfOAQjrmXYuRDN27aiVQxomAn9qRw==
X-Firefox-Spdy: h2
s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/font-awesome/font-awesome.min.css
200 OK 28 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/font-awesome/font-awesome.min.css
IP
File type ASCII text, with very long lines (27339)
Hash 8f6faef8ee84c7d1bad83516f21d84a7
b5cafbed1beb0a43d1aed63236e55f1e2731acd1
18a279cbb81cf6d0f22aeaa24fbe994cdf94f4fac41d26ec3850eecbcf1a0bd1
GET /cloudfls.co/themes/startui/css/lib/font-awesome/font-awesome.min.css HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: V9lA8CDjSmBplraS8jr8aGdH/qq3nqNeajo6esy8VnBdgf4y0ZREJAI9TYbrvSiFVKr43osF2QA=
x-amz-request-id: 0HQ8DD3NZA7SD2X9
Date: Mon, 07 Nov 2022 15:51:23 GMT
Last-Modified: Mon, 20 Jul 2020 19:18:06 GMT
ETag: "8f6faef8ee84c7d1bad83516f21d84a7"
x-amz-version-id: ePIWjfMKtCaP4bDE.eZHRaP_PF6hOabL
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 27502
s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/151981978211ad81ad9b8c843e4b3c3052a8d6138c.css
200 OK 22 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/151981978211ad81ad9b8c843e4b3c3052a8d6138c.css
IP
Hash 4ee41ce0944001dd398a94528668aa9b
9a19710dea486f9cef4e40e10260e09679b53a99
27a59717d32af29935709bc2c2301d11291b4ca22dac6dd8d8741dffa6ac7ed8
GET /cloudfls.co/uploads/assets/151981978211ad81ad9b8c843e4b3c3052a8d6138c.css HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: tnru2FXBP3gcU7lUmC1kqDgdd8jtBBewQ842tAKcMSEFIeiBK293ZAB7q4L5FcA544WwZGwEhIs=
x-amz-request-id: 0HQ5BM92GFFWXTZW
Date: Mon, 07 Nov 2022 15:51:23 GMT
Last-Modified: Mon, 20 Jul 2020 19:44:07 GMT
ETag: "4ee41ce0944001dd398a94528668aa9b"
x-amz-version-id: mEuybZeBqZEWEnAJn0ikiMLlTy4658dV
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 22376
dwmsurhf1svv8.cloudfront.net/public/guid?cpguid=5li504a7k&s1=album-pwd-smart&s2=1418547089%7C2007-05-13&e=opl&t=1667836279734
200 OK 0 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/guid?cpguid=5li504a7k&s1=album-pwd-smart&s2=1418547089%7C2007-05-13&e=opl&t=1667836279734
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /public/guid?cpguid=5li504a7k&s1=album-pwd-smart&s2=1418547089%7C2007-05-13&e=opl&t=1667836279734 HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 07 Nov 2022 15:51:22 GMT
server: Apache/2.4.41 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zjGK1HmE46q9ieHhZjYwjRknCAaSm9euO_zpkyjm_F2_HxjMbHRJUA==
X-Firefox-Spdy: h2
s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/151999678694833b4c5a49a55ef7f9224b286820f0.js
200 OK 48 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/151999678694833b4c5a49a55ef7f9224b286820f0.js
IP
File type ASCII text, with CRLF line terminators
Hash 749f3a5be3474126eda77e97fbdc9d7d
57f2e094a01f933b1549870b848afec5bee66c2d
38b713ce7817068658fed4254cad04740e3eb5dc581f9b2100480feec4fe1622
GET /cloudfls.co/uploads/assets/151999678694833b4c5a49a55ef7f9224b286820f0.js HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 0n0vOQ/hn/KE5KfqDA9h5vAQ06OnBVm4a3LOL3/1Ud/C1F533V8Y1pWxGCQJjfrmb43yfgEkLl0=
x-amz-request-id: 0HQBA9JSCZXBB84J
Date: Mon, 07 Nov 2022 15:51:23 GMT
Last-Modified: Mon, 20 Jul 2020 19:44:08 GMT
ETag: "749f3a5be3474126eda77e97fbdc9d7d"
x-amz-version-id: JBcDJbWc5ONYvGQeSxxPJ._eBLuHPOyt
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 47834
s3.us-west-1.amazonaws.com/cloudfls.co/uploads/150170764295f591d2e1daeb4fda0985149aa31c04.png
200 OK 2.5 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/uploads/150170764295f591d2e1daeb4fda0985149aa31c04.png
IP
File type PNG image data, 167 x 63, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ee0c509b52e0c345f24631dca0eadb
e6a60c972bb922560774cb0155368e22035967cc
bed61deb1c5d1bc69150d71138328e0016d956d021c0cb03973f9e915a7424db
GET /cloudfls.co/uploads/150170764295f591d2e1daeb4fda0985149aa31c04.png HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 7jNarveK5kHly/KGdirU4PNE+1isYEWg4XJTJv1ooiFmz0DHcBXUs9YYOqMwLuGjH9VQZEBQwvI=
x-amz-request-id: 0HQF1XB1CV6WZGQ8
Date: Mon, 07 Nov 2022 15:51:23 GMT
Last-Modified: Mon, 20 Jul 2020 19:22:35 GMT
ETag: "e7ee0c509b52e0c345f24631dca0eadb"
x-amz-version-id: 5MYnSQOqbLlzjhjhh7pOwZQ1Av0RIEEC
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 2471
s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/1541527423a607b15a712c4823251c88682d1dbf54.js?_=1667836279247
200 OK 7.8 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/1541527423a607b15a712c4823251c88682d1dbf54.js?_=1667836279247
IP
File type ASCII text, with CRLF line terminators
Hash c2120b05cae0d60182021ca43c4a4727
997d99cae105610a6d6b96775da48cba526046bb
3d60086efeed0e3af6d42ff624a15d1274763b994bf240da9ddec88ef83d9f66
GET /cloudfls.co/uploads/assets/1541527423a607b15a712c4823251c88682d1dbf54.js?_=1667836279247 HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: vRTk/ni5wD9K94BWELU1my20V3L9YQPMl63tgdWJHPniPEjqSTUBvca4pcdXt+lHDEe0Jyg/qHw=
x-amz-request-id: 0HQ67EDM1ABMPCRQ
Date: Mon, 07 Nov 2022 15:51:23 GMT
Last-Modified: Mon, 20 Jul 2020 19:44:08 GMT
ETag: "c2120b05cae0d60182021ca43c4a4727"
x-amz-version-id: Xq5nEZrYhQVX6cpn7Hs2O6y63bMzhXo5
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 7816
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 616fb5ff7cdfc1ac4793c0cdc1902b10
a88b06025d4bba059f4abf02c705cc0a7fcac8fa
b925a3f64de185bbf7f6e2b27644fc615fe58512bc301d15642b4d69c5d764d8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123027
Date: Mon, 07 Nov 2022 15:51:22 GMT
Etag: "636851c3-1d7"
Expires: Wed, 09 Nov 2022 02:01:49 GMT
Last-Modified: Mon, 07 Nov 2022 00:30:59 GMT
Server: ECS (nyb/1D06)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VDJVvHmFz6tZ1T00kJr-s6rKcTpV4CY2KodOGDNJgIrGuef_oduiBQ==
Age: 5450
affise-media-service-prod.s3.eu-central-1.amazonaws.com/affise-media-service-prod/offers/959/12339/2952634534.200x200.png
200 OK 10 kB URL HTTP/1.1 affise-media-service-prod.s3.eu-central-1.amazonaws.com/affise-media-service-prod/offers/959/12339/2952634534.200x200.png
IP
File type PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced\012- data
Hash 2a5e44d8f00c08f1b95f10566e553d62
dc004d9fb9931f3ea156af564de2dee73e822e39
42620f4ff66a8a66f6c43fe1bcaf8cf9149fe049145b2b8c8302a1b740537e3d
GET /affise-media-service-prod/offers/959/12339/2952634534.200x200.png HTTP/1.1
Host: affise-media-service-prod.s3.eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: aYeFlsMxbFlh0ZTu2+iI8KG1pvykTfNGolG8pLbvsRroNs5VEb0Tn5Ybh1FhbsfLSQCyfc/nJBQ=
x-amz-request-id: 0HQ9D41M339BBNH7
Date: Mon, 07 Nov 2022 15:51:23 GMT
Last-Modified: Mon, 17 Jan 2022 07:52:45 GMT
ETag: "2a5e44d8f00c08f1b95f10566e553d62"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 10100
dwmsurhf1svv8.cloudfront.net/public/external/check.php?it=874265&time=1667836280229
200 OK 78 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/check.php?it=874265&time=1667836280229
IP
Hash 37ebc78db9bc22d4c972c5961163070c
865e3671f7e86b52d2f7b006b95ec7799a187572
9ef4a63fc5e0a14a7301d693d65d6acfc44cdf14853c4a20890198f2d5e52e3b
GET /public/external/check.php?it=874265&time=1667836280229 HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 78
date: Mon, 07 Nov 2022 15:51:22 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DGK6dvm18JNcWF9aufoNzohEgzAJsTBigMRlRCB0rlKdJasloqZAAQ==
X-Firefox-Spdy: h2
bundev.com/iframe_param.php?s1=album-pwd-smart&s2=1418547089|2007-05-13
200 OK 0 B URL HTTP/2 bundev.com/iframe_param.php?s1=album-pwd-smart&s2=1418547089|2007-05-13
IP
GET /iframe_param.php?s1=album-pwd-smart&s2=1418547089|2007-05-13 HTTP/1.1
Host: bundev.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 07 Nov 2022 15:51:19 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8mgAwLcWhvMfyD9hKzv1nJa8R6HzA9k6V3rih6LgqP7tQKPSDVBvzzIcX0x%2BoztTrpbpsL%2BZxZhe%2BqvjzJz947SqLhQnpNQ3kZGykETMun1Q%2BfnLDS3SpAyHkxTc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76673acabae61bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Cousine
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Cousine
IP
GET /css?family=Cousine HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 07 Nov 2022 15:51:19 GMT
date: Mon, 07 Nov 2022 15:51:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
db81lfl43r06.cloudfront.net/c6403d7.js
200 OK 0 B URL HTTP/2 db81lfl43r06.cloudfront.net/c6403d7.js
IP
Analyzer Verdict Alert fortinet Malware
GET /c6403d7.js HTTP/1.1
Host: db81lfl43r06.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 06 Nov 2022 21:08:34 GMT
last-modified: Sun, 30 Oct 2022 13:50:57 GMT
etag: W/"d0adadb877ad5f27d0c2a369cd5acb5e"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iDp2B6aiaVfj_dxGC40t685vQSmCQHRPUObCIEqfazIhVZGYp5bgUQ==
age: 67366
X-Firefox-Spdy: h2
dwmsurhf1svv8.cloudfront.net/public/external/v2/html.874265.dfd99.0.js
200 OK 0 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/v2/html.874265.dfd99.0.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /public/external/v2/html.874265.dfd99.0.js HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 07 Nov 2022 15:51:20 GMT
server: Apache/2.4.46 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LGoCo_6bKV8GHdI8FBDOlAJ06ASDBXe6XSkfbK2FWKQTonyxGkORXQ==
X-Firefox-Spdy: h2
172.67.185.137
151.101.85.229
104.18.20.226
23.36.76.226
52.219.169.210
93.184.220.29